000007000100696200002c0009800800020005000000080002000001000008000200010000000800020001000000080001000300"/106], 0x70}, 0x1, 0x0, 0x0, 0x8bd1a58d30b8ec88}, 0x20008001) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x450, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x14000) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x1402, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040080}, 0x20000080) 01:01:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 01:01:51 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)) 01:01:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x10, 0x5, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001f1db511b7bd7000fbdbdf257f0000010000000000000000f4ffffb03e41610bceccea5148b900000004000000000000000000000000000000000000000015280a00000435000010000a0028bd700025bd70000000000008001d00f20000000c"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 01:01:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 01:01:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000001a40)=0x2, 0x4) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4800d) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x0, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040040}, 0x4080) 01:01:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 01:01:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 01:01:51 executing program 2: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 01:01:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="63202a3a262872776d730ffe5d3fdf5ab804"], 0xa) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r1}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {r1, 0x6}}, 0x10) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) write$nbd(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="67446600040000000000040004000000f43ce67b79d27c1e099212f43c6bebe0a0fa932134b75b4c6c0aba7c8ee3621e26b5ad253a1cc056a8f455b92bb5248763a9d14e6394bf52f272381b25192abf7317ea6401a461d711b960b36e5e2975a349c20b72a507014a95a1963479f9c02e646bc188e6e813f27caf889c342c7591064eb01f03fc1ef68702b87dce57d82c0180f02755e2a4d13c54000000000000000000"], 0xa4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) 01:01:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 01:01:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xfeff, 0x3}, 0x6) 01:01:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 01:01:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xfffffe01, [0x8, 0x5], 0x35}, 0x10) 01:01:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x3, "6c20fd", 0x3b, 0x6}) 01:01:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 01:01:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x13}, 0x24000000) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000100)=0x7fb, 0x4) 01:01:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x8000}) 01:01:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:01:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfffb, 0x3}, 0x6) 01:01:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8010}, 0x8008041) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000080)) [ 493.084649] audit: type=1107 audit(1617411711.947:235): pid=12282 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 493.108939] audit: type=1107 audit(1617411711.967:236): pid=12282 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfbff, 0x3}, 0x6) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) r5 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=@updpolicy={0x310, 0x19, 0x10, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, r3}, {0x4, 0x0, 0x1ff, 0x7, 0x5, 0x81, 0x9}, {0x3, 0x549, 0x1, 0xff}, 0x1ff, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, [@sa={0xe4, 0x6, {{@in6=@private1, @in=@multicast2, 0x4e22, 0x5, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x4, r4, r5}, {@in=@multicast2, 0x4d6, 0x2b}, @in=@rand_addr=0x64010102, {0x47, 0x5cb, 0x80, 0x1da, 0x1, 0x2, 0x100000000, 0x1ff}, {0x100000000, 0x80000001, 0x1f, 0x9}, {0x3, 0x5e9, 0x8}, 0x70bd2b, 0x0, 0x2, 0x3, 0x80, 0x2}}, @lifetime_val={0x24, 0x9, {0x7, 0x8, 0x6}}, @lastused={0xc, 0xf, 0x7}, @algo_auth_trunc={0x8d, 0x14, {{'sha1-ce\x00'}, 0x208, 0x180, "9ca836eadf643ef4d5b354302c816ff9c11a71663a03eb16b097ff17a72a23cc5f510bedfe4ecf3c8b84c5c64fb2f782a1e3664e05779d91fb26966ef573b37bb3"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @tfcpad={0x8, 0x16, 0xfffffffc}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffd}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3501, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@mcast2, @in=@broadcast, @in=@multicast1, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2000c005}, 0x50) 01:01:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x7, [0xff, 0x19bb], 0x80}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80800) 01:01:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x772}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x24044884) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000080)=0x7, 0x4) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:01:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffc}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x3, 0x0, {0xa, 0x4e24, 0x15ae021c, @empty, 0x6}}}, 0x3a) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x400) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:01:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x6}, 0x6) 01:01:52 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="5227bcb56a3d95f5f0a39b4b0c0dcbfd073b1fbf85b2794a4f2c21cd5ea88cf3dc4d4e8d92aafa6821eb9ea3dfbfe99375e01183b2aa78f33c638107dbc6") bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x3, 0x4}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) 01:01:52 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x100, "80b72d", 0x7, 0xd0}) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) [ 493.322184] Bluetooth: hci0 command 0x0401 tx timeout 01:01:52 executing program 0: socketpair(0x1e, 0x5, 0x78, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000500)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"53dd8f256a09d365bfa3eee3cd9a7342"}}}}, 0x90) prctl$PR_GET_NO_NEW_PRIVS(0x27) accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80800) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x400) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000000, 0x800) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000080)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', r3) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000340)={'syzkaller1\x00'}) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:01:52 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfffb, 0x2}, 0x6) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x201, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$nfc_raw(r1, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x4}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000520002002cbd7000fbefdf271c0800060008000000000000"], 0x1c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000005c0)={r3, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x2, "136127eb976fdfc69df2372bd85bb6ab165c8b9b90f8a6549a0229f51cbf6ed72e79451771b3461683c518f2009f8cfe22b251df6edb084b871b68b9dca8e07804872fe1cdef2bc25862f12ed9895b7e9672cc91d764a5eb6d12513b70be901fa3aa22e564c22c7c94cc9f51a4c28059ffc358698176138c9ae0863f2bdaa2682cc95bdf289f8ff2f9e2fc791b69e95ca1f16039a53e848a718e215f2ab873d8ea3e3537d55674f8409bf73ae0039cbbc72d84bccbda17bbcee94eb66161bb271741763a400e24038ae393ab6887cb8a6cf7de9e49e4e404a9f485e2588203e82d10c3d9e8d0b3b0a6de58285cd66029933c3862e7bcf8c2dae66a82f956c257", 0x20, 0x1, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r4}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r4}}, 0x128) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x1}}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x4, 0x4) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0xffffffffffffff64) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x185080, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x80000000, 0x1ff], 0x7}, 0x10) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 01:01:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000040)="6df027667eba0a4a75e7d6159db1d74c0f9b2aa0803616315635ecb76be3e8585086f01665f270dbb6cbefc8a9e7fc9002bfaec9eca6aa419f088753dc2f7fdbdcc2d12891efeb905a28f6c425") 01:01:52 executing program 0: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:53 executing program 2: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"/468], 0x1d4}, 0x1, 0x0, 0x0, 0x40080c0}, 0xc000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x2, 0x4}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x3, [0x8, 0x5], 0x20}, 0x10) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xb665, 0x0) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8880031}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x18004}, 0x40010) 01:01:53 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x1f, "f303d0", 0x7, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000000)="cf00") 01:01:53 executing program 0: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x584, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1f, @remote, 0xfffffffb}, @ib={0x1b, 0x3, 0x7f, {"8c50236ca0d341d7e5c4cdd849a7e014"}, 0x400, 0xfffffffffffffff7, 0x2}}}, 0x118) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) [ 494.276920] audit: type=1107 audit(1617411713.137:237): pid=12381 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 494.296904] audit: type=1107 audit(1617411713.137:238): pid=12381 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:01:53 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:01:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000005c0)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x1, {0x2, 0x8, "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", 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0x9}}}, 0x128) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x210000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x5e, 0x5, 0x1f, 0x1082, 0xffffffffffffffff, 0xc6, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xa}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5658}, @alu={0x4, 0x0, 0x7, 0x9, 0x5, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x7, 0x5, 0xb, 0xfffffffffffffef4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map={0x18, 0x1, 0x1, 0x0, r3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, [], r2, 0x0, r3, 0x8, &(0x7f0000000280)={0xc, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x8001, 0xa000}, 0x10}, 0x78) 01:01:53 executing program 0: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@newpolicy={0x110, 0x13, 0x200, 0x70bd27, 0x25dfdbfc, {{@in=@multicast1, @in=@remote, 0x4e20, 0x200, 0x4e22, 0x9, 0xa, 0x0, 0x1a0, 0x3b, r0, 0xffffffffffffffff}, {0x0, 0x40, 0xffffffffffff0000, 0x5, 0x84a, 0x2ce9, 0xb45b, 0x7}, {0x3, 0x7, 0x4, 0x4}, 0x9, 0x6e6bbf, 0x1, 0x0, 0x3, 0x2}, [@lifetime_val={0x24, 0x9, {0x7, 0xc6, 0x100000000, 0x7405}}, @address_filter={0x28, 0x1a, {@in=@remote, @in=@broadcast, 0x2, 0x4, 0x5}}, @lastused={0xc, 0xf, 0x6}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getnetconf={0x24, 0x52, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @NETCONFA_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1, 0x3}, 0x6) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448d8, &(0x7f0000000080)="d47af90f492af0e70175ae1d6b9f3317449dd96cd08cff8020ca2d3bd3685a0d8f6ac5ae7506d8d30e2c1d68ffbb6aafc264a2efd855a3655bf21f0000bdb829a7c7c000481527836a6a415cb379b7e652043838efee78fc0da05e909f52f88ae15837f3ec87b98028") r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x6, 0x1b3002) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x10000, 0x4) 01:01:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x8, "d9e137", 0x13, 0x2}) 01:01:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) [ 495.162091] Bluetooth: hci4 command 0x0401 tx timeout 01:01:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0xb97a, "a129c7", 0x8, 0x48}) [ 495.252083] Bluetooth: hci5 command 0x0401 tx timeout 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r1) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000000)="543f55fab0ecab1cd2e41d0d6bd6537c3b4410ae1119eaef4ca0c5bec67aa06a125ea0af000501181262ea36289abf87973ada32ec3434bd225aa3abaed2fb0805f66de4adada8a5e634cf03199857d8cb96b75ed0cc752b5697a6770d322152e02d231184b72a154ffa4bf26f46ee2a5655a4386e79b0e0cd39ccf0e682e2de19d4a58ad36afa1164fdb76d55473d844f77b6635724f9be76c15ffc582b2424b9e0c76839cf4ad952076d5edd803fa4c09ca7493f9d5c8d5f983aa28c6c3580f4db5391bbb81fcd998dcef5f51ebc5a9678d959d490", 0xd6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0xfffffff0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@loopback}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x884) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{@none}, {@none}, {@fixed}]}) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x2, 0x1}, 0x6) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:54 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e24, 0x36f, @local, 0x81}}}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) [ 495.402413] Bluetooth: hci0 command 0x0401 tx timeout 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x2}, 0x6) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="be06247f3db54d4df115266b2a20770000000000"], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/250, 0xfa}, {&(0x7f0000001480)=""/144, 0x90}, {&(0x7f0000001540)=""/214, 0xd6}], 0x8, &(0x7f00000016c0)=""/72, 0x48}, 0x100) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000001840)="f548e66b44dc44d4fa06fae773754b13110afcc4385b8597f0b93f520fc362395f78dbc0c62a6fcdec9d9e10880d85c1cd7c4c856c1b3e7197f72091ad2c8caaf590d206eaa1fd3917533508484e9719dddb5b543d6742fc99910dbebcc9f2c6dd2bc1e5e3b4d80329951b75de293cb8428c0b837042eed99d8579e9764079c8632eaf515b69aae05aa81e430611f171e8d6214da8c9ea1b62312a3c441826") ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000001780)="725351456ea2f6e98c11ae0f9ef26ebbf384def94f42a5be5209eba2b24f9bd3d157bee2e5c3ad1d075d53aa0f497f87683f9bc8248750794c931c444c97b31c6447cb97b479fcf0763ec96b2ab680446438aedd1d6ebcbb279a8ded368230d4c2fe60ed457ea2c622a861594db8fe04c08dee5c8f1c4f315fc8feda937dc73e1483a6bb6f7876db26d026c1ab46ef") 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8, 0x200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x6, 0x400, 0x2, 0x500, r1, 0x40, [], r2, r3, 0x0, 0x2, 0x1}, 0x40) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xc186, [0x7]}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0xfffff800, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1}, 0x6) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 01:01:54 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) socket$l2tp(0x2, 0x2, 0x73) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xffffff6a) 01:01:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={@fixed={[], 0x11}, 0x3}) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x4}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x1, 0x3, 0x1, 0x2}}, 0x2e) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000000c0)=0x76, 0x8) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e1d, @local}, 0x0, 0x4, 0x4, 0x4}}, 0x2e) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000180)="622b67cfc03d7e236bda8bcbf733160eb7e652db6399b9ca810c2282af184fea29b1056fc628a1a0ad57b67d4e57398650717f3bde23b1ecae82677200e24bfa81856334fce968b24752d28c33dcb4eb5ca90af98299f64887559eb2137aa28e5c32cd671afbed7be87fd33b42fbac3c0d6baf5e5e9b792598463b948f721921e7c176b43b8af923efc7a85963bc2481669109d1007aeb106c55fd1877198a09d6cce5be4fd232c956a3facc4b7d64fc6a1d50ae50284819e024c22ce10495c73f34ef54473babed0cef0525d098e10cb5480114ecaf62408ef046937618") sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x855227137de7e659}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x300, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000100)="ae27b5b796881125a3dd9d0305cf721ab3b2b1b66e3d48c062520a0c9e273c78db19f493f74e1fbbb5801a801a936e5f09b19a520142b4537c45957b188bbf734837a9cbf7242e383fb5b3b0bc29a41227f288b1504765df201aa65ae38cfe08d8819e4ac97daec972d77d3b8a55dd59d01b43350830b65600f8c2") 01:01:54 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f0000000100)=@raw=[@generic={0x7f, 0x1, 0xf, 0x6, 0x40}, @alu={0x7, 0x0, 0x9, 0x2, 0x2, 0xfffffffffffffff4, 0xfffffffffffffff0}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x42, &(0x7f0000000180)=""/66, 0x40f00, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x9, 0x6, 0xf3}, 0x10}, 0x78) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @broadcast, @remote}, &(0x7f0000000480)=0xc) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x8, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100102}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x6, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000400)={0x9, [0xfffffff8, 0x8], 0x7}, 0x10) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x800) 01:01:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000000)="a536bf30d1bb0dc15ab1f780a3054b0b440cf06e8c7b6559d2552d60d46c7afa441df60956a8f400665be745245f9cf282b89db9d627736195822776e761485f94965b89ebfda41c769954c58d46b1a6f154c021694248c7", 0x58) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000002c0)="dd7810c2e6eba1191fe7d84dc52d2740a46180e26875a2a5", 0x18) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x1402, 0xb, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x200048c1}, 0x8003) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) r7 = getpgid(0xffffffffffffffff) r8 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x40000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', r9) 01:01:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socketpair(0x5, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080), 0x4) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x4, 0x4) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x2, 0x1, 0x8, 0x8, 0x21af, 0x5, 0x2}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7, 0x0, 0xf, 0x65a9d456, 0x9, 0x4, 0x1}, &(0x7f0000000140)={0x3ff, 0x9, 0x3ff, 0x4, 0xc1d3, 0x1f, 0xd2, 0x9d0}, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xfffffffffffff001]}, 0x8}) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @loopback}, &(0x7f0000000040)=0xc) 01:01:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:01:55 executing program 0: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@fixed={[], 0x12}, 0x3}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:55 executing program 0: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'wlan1\x00', @ifru_data=&(0x7f0000000000)="7980e240fa609a8928608655de17f6ccec17861459f71a3e74a8a6d884e5b577"}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000001400)={0x67446698, 0x1, 0x3, 0x2, 0x3, "294ef456d692512d87de6baafd785bfb115853ab90f2d1e09e73f7d6d739b50da5ed9f7431fabe80b73969a73aff943f366eafb5c57733a1eaadbf712579bf34421e6819f9e350a426b9f860d49559235213fd5cd83c5888122ae1ad75f8f285d6e5c36de619fd59cc336572f837e839b5b63839aad02ddc5093d030699dc0ff57319252a322cd1e68e95a69f8b3643fc7056487b04b044d56be64e37d33cd39faf86341ce6706d7675cf17ea121892a2e8df1d60fdd4f55069c83623602d7453318155c7b544bbf332fd5de7dd2bd9c9d6b5e2fddf94b0931d1a7a156cd249647ecbd496ad3786025"}, 0xf9) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="2017e0ff7d00000018340000fd320300000000000000000000001839000005000000000000000000000095000000000000f7"], &(0x7f0000000040)='GPL\x00', 0xffffff37, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x3, 0xe131, 0x4}, 0x10}, 0x78) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "b617e8fcd08122e3bb960cecce973ac7792f64809baf3db6b95bc1f0e9cb788cc0dd211651e4aea64cf2f1d3c881ae3f10a320dad1f98f3c3885d18e6c7047cabd32bd21b8df6701433944e42de7bbc02a53980b5f037c326d0aca1995d57dc1104c4b4a908320cd85b2da3c63f8182a2deb606b95a0bee887a1597e3d6a92abf6ece690c54763174867b08b96a32a5929b109ebd4ee3e7cfe74818b71c94f98cf480910c2de97437555e68b4fd93c70f642f7913b3e6070b64ba93cfd46b938b0c37661ab9e16c00a86e0b438ffbc86f62c9a639f15a9cc35eccdbee08428e96c4158729b89a532c4ec33f6b19688d69fb29bb7dd2ec65a4e2ae2fff241e3c7", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r2}}, 0x128) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000380), 0x4, r2, 0x0, 0x1, @ib={0x1b, 0x3, 0x9, {"0ccddd2bb2810b8899d10abee796eb07"}, 0xdd, 0x4b, 0x1}}}, 0xa0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x453, 0x233, 0x70bd25, 0x25dfdbff, "f39da8959f485615a351d66f1d9c03bdefcff0598dcd812f8c6934c60f71b93c8db682a6830fc8cefd43cb6e0188857ac3aa98c9fcc4742487ceb1e2eae7da74c09c8218ccf8865d289c75907274c87ffd1a6d2ee56db7e696937b798f58bea005aad2d7f3abf7849791e333bc810af2ec6b3538fcec52815e749addd4fdb11ab1d24ee3e85f09462feb6b0255ad18510b1c521d98c4681141886c1070e7", ["", "", "", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x24040800}, 0x4008001) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000005c0)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r2, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0xfff, 0xfffffffd, {"44e6352c52bd3ff00364e45f0535d8fd"}, 0x9, 0x0, 0x2883}, @in={0x2, 0x4e24, @broadcast}}}, 0x118) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8000, 0x4000) read$eventfd(r1, &(0x7f0000000040), 0x8) 01:01:55 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfffd, 0x3}, 0x6) 01:01:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01010000000000000000130000000e0003006e657464657e73696d0000000f0002006e657464657673696d300000080003000000000008000b00000100000600110000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, r1, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0xb8}, 0x1, 0x0, 0x0, 0xc040}, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x3, "e5e1d2", 0x9, 0x1f}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r1}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x0, 0x40, 0x0, 0x5}, r1}}, 0x128) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e24, 0xe4, @empty, 0x8}, r1}}, 0x38) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)="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") 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 496.372065] Bluetooth: hci1 command 0x0401 tx timeout [ 496.522009] Bluetooth: hci3 command 0x0401 tx timeout 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1402, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x28}}, 0x4004010) 01:01:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) 01:01:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x2, 0x9], 0x6}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:01:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x3, [0x2, 0x9], 0x6}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) 01:01:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="7d3d72843a1525733a2a785e1b98cb4f579645c82214678929ccb71660b1a992e9729f1355ec407093e63cdf37522317a865229d3249709ef3ecdab9d75791c4b9b12d3db00ff9b78caa240d01b3df0076f1c3a5856f67e5399810acc00c668a3f45099d") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) 01:01:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) [ 497.252036] Bluetooth: hci4 command 0x0401 tx timeout [ 497.322059] Bluetooth: hci5 command 0x0401 tx timeout [ 497.482185] Bluetooth: hci0 command 0x0401 tx timeout 01:01:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:01:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffa, 0x400) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socketpair(0x23, 0x6, 0x8000, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1d, 0x400, 0x800, 0x10001, 0xb0, r1, 0x4, [], 0x0, r1, 0x2, 0x3}, 0x40) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10, 0x80800) 01:01:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 01:01:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r1) 01:01:56 executing program 2: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000000)=@buf) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000080)="50b338ed78408242c95976c5a07f78734a6fb7cf3b684abf66566aad399a432df16b0a23669cd2ccfbe0485b2a936f90f0091d8898136d2d7f6541f5f1e5af8b305e4397207abacc551a7b5084bc8e145658383980c160d9dfc5c266c0562e86c68972600dbd5f52a497165cc577ab232c3cd6b96a0c19477b1ad14893a970580aaff6a09eca575d6d955de90e19dc8a0a371f8b691c7dc92f759b8d0bf132265ec2727856d705da57902a96cbf896b67d80daf959566279093a39be8699a494ef256817c7d76c133777bcfe") 01:01:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x7851c0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xcf4, 0x4) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="660de40b8af9bbf868c1394401a863fd90c86fb2e26229f6a01155cb639fa5600ae59fb3ae6c3df93658c80b2b5c0ad4de29383f") 01:01:56 executing program 2: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x4000007e, 0xb) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000000)="b7a782d9568ab601021ec3d0d1106a20d0e5c7c8255d4e46343699eb472ce10b27d28e62d6db11918b046f5ea05b4aa493ed24191ca7e014300682214ebfaea2d7ae48b882f6") 01:01:57 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000240)="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") 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="d18c4485f1dbd3ad1d31a546229d4ddd5b29f59ad69e2ab37857383ef9fe40c53c3feaf9eb1ad8b5ebf7b0c669ce20f143aca7a094ec884998cc286ec184841ba6e8d0a361dca6c79913f07eb7306a1e7a6fbde860ec34d2b18a06cdf9b516230f15eebd950ed724f2623d9ec7c1ca9a7b17d8d2180b8321f095b76fe422266fd15d62784009fdb43ad0c462c2a54e8f984a49e96cfe9c548d79429e504360") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=@can_delroute={0x13c, 0x19, 0xddf1434e85c7cef, 0x70bd2d, 0x25dfdbfb, {0x1d, 0x1, 0x5}, [@CGW_CS_CRC8={0x11e, 0x6, {0x6a, 0x69, 0x7d, 0xfe, 0x84, "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", 0x2, "4a58c4069857f8ee422824de10f3404d1f159267"}}, @CGW_MOD_UID={0x8, 0xe, 0xee00}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000300)={0xfffffff8, [0x80, 0xd117], 0x5}, 0x10) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/103, 0x67}], 0x2, &(0x7f00000001c0)=""/255, 0xff}, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:57 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) [ 498.206371] Bluetooth: hci2 command 0x0401 tx timeout [ 498.442100] Bluetooth: hci1 command 0x0401 tx timeout 01:01:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000080)="b100906fa835b4e409f6333bcd") 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1}, 0x6) 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x6, [0x8000, 0x9], 0x100}, 0x10) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x25, 0x2, 0x10002000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="364d1ea1a5beebe55bd28d398e375ba33558c04ba220a48babadea1989821c758a73732eb1e8f5858cfa817132b492f6a2c683ccb9146d869ea87d08e8cf51d04668521127660d4c11f0b760") r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) r5 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x40000007, 0x4) sendmsg$SOCK_DESTROY(r3, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0xc000) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1}, 0x6) 01:01:57 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x0, 0x1, 0xfff, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$nfc_raw(r1, &(0x7f0000001140)={0x27, 0x1, 0x2, 0x5}, 0x10) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000001040)="2b4e40b41b53688cb55035c1f384b6115ceaca8a2904cd24cd8ab99bc78209a1579a99f4d8c97c807054ec9ea448fe10bfda6c939213024970e87120934e3cff2718816613f723dacef432fbe0a0dc940ebc94999d5f45b2e66ef6a05bc8428f48448ccaa45bdeae11d4a23f55874b8929b208528c45d38b98c0282a19bac77135dd7d") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0xe3fa, "9e2ff8", 0x3f, 0x7}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000040)="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") [ 499.572074] Bluetooth: hci0 command 0x0401 tx timeout 01:01:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) [ 500.282094] Bluetooth: hci2 command 0x0401 tx timeout 01:01:59 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) accept4$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10806}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) 01:01:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x6, 0x2400) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x2800) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000180)) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000100)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000001800)={0x1, [0x11e, 0x4], 0x6}, 0x10) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r5, 0x400443c9, &(0x7f0000000040)={@fixed={[], 0x11}, 0x9}) [ 500.522045] Bluetooth: hci1 command 0x0401 tx timeout 01:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)="c1b57e86fbaf49c401e009b0e9e928c612f36144c2bd6cf53830d715aeba590640afbb3de74d95df528b5aa4a6738b") 01:01:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x80300) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x20}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x3f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5892}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0xc79, 0x4) 01:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)="e6c2e7a0a5a9d67d259206cb36212df72994bd") 01:01:59 executing program 2: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x3}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:59 executing program 2: socketpair(0x15, 0x3, 0x101, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001240)={0x0, @remote}, &(0x7f0000001280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000012c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f00000013c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001400)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001500)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000001700)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="54010000170000042bbd7000fbdbdf25fc010000000000000000000000000000000004d63c000000ac1e0001000000000000000000000000ac1414aa000000000000000000000000ff0100000000000000000000000000014e179e2200004e230000020020803a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1e0001000000000000000000000000fe8000000000000000000000000000234e23a0664e2300050a00809032000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="0100000000000000030000000000000001000000000000000600000000000000fdffffffffffffff0180000000000000ffff000000000000010000800000000007000000000000000100000000000000ff07000000000000090000000000000008000000000000000000000200000000790000000500000030f500002cbd700008001f00", @ANYRES32=r3, @ANYBLOB="08001f00", @ANYRES32=r4, @ANYBLOB="14000d00ffffffff0000000000000000000000000800160007000000"], 0x154}}, 0x20001000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001740)='devlink\x00', r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000001840)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x54, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x10000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000000)={'wlan0\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$nfc_raw(0x27, 0x2, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) r10 = fork() sendmsg$AUDIT_SET(r9, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x38, 0x3e9, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x1, 0x1, r10, 0xffffffff, 0x8, 0x2, 0x3, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20004080}, 0x4000050) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000001040)=@buf={0x1000, &(0x7f0000000040)="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"}) ioctl$sock_bt_hci(r7, 0x400448e3, &(0x7f0000000080)) 01:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc883000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x8080) 01:01:59 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x401, [0x2, 0x80000000], 0x5}, 0x10) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0xc37c, [0x200, 0x7eea4147], 0x6}, 0x10) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3f05e4c260c36a36}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r1, 0x8ea}}, 0x10) 01:01:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) [ 500.694969] audit: type=1107 audit(1617411719.557:239): pid=12651 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 500.712663] audit: type=1107 audit(1617411719.577:240): pid=12651 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:00 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000005c0)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r2}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r2, 0x0, 0x2, 0x4}}, 0x20) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:02:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)="c3083048f86a0dd308be4d89dcb10ae288600282cfaa874b1a1fdbde678c44cfb924d0f4459f547c069b0f5f8cfd77adb92e9e4ff9f03dbab999a658c2e90a30e2c82b8c088a46cc0d9c97470a64b2f6441a6e59c7e2f3ff") r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xe2ca, 0x2000) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) 01:02:00 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x401, ')B\f', 0xf7, 0x2}) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000080)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) [ 501.642147] Bluetooth: hci0 command 0x0401 tx timeout 01:02:01 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/120, 0x78}, {&(0x7f0000000100)=""/13, 0xd}], 0x2, &(0x7f0000000180)=""/30, 0x1e}, 0x41) connect$pppl2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x1, 0x1, 0x3, 0x4}}, 0x2e) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448d0}, 0x50) 01:02:01 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x40002) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x101, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xf39, 0x8c40) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:01 executing program 2: socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) [ 502.362215] Bluetooth: hci2 command 0x0401 tx timeout 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)="44bea5eb7e3f485dc9bbc717ee51f78269f1efbb74ffa0f037088740f9367fc1320267ff51a8b9243c37bae0d7e3928b1222fc38d3e5abc9ade1eaa00567df3e47100e6fc21457bb2ba9fc736d0b") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 01:02:01 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2c, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)="57e04680ae1ad88afda0") 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)="9586d1a43da5b13e833947a5e047c25b83f1af2a8e17d92ca63e0db05f22294189f05be6e67e9ebf3fe3aa32f3d8b18204e7a86eb885fa49bab4834d5d8251450cfa06d88873c6f8f1b4139c059bc668846f85df4df583f9ee90862e099c480d1cab3f043995df91acc45c6f4f1c486055a873c8ebf56f62ed27f1ed0e0c2dc938bf72bb57bbe9372c2f2e16b58a33856c33121e10a9b9") ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x2}) [ 502.602093] Bluetooth: hci1 command 0x0401 tx timeout 01:02:01 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) 01:02:01 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x120, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000) 01:02:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x401, 0x200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x944e, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x4) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) 01:02:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socket$kcm(0x29, 0x0, 0x0) 01:02:02 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) [ 503.482023] Bluetooth: hci3 command 0x0401 tx timeout [ 503.732020] Bluetooth: hci0 command 0x0401 tx timeout 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x7, 0x7ff], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x0, [0x7], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x0, [], 0x9d21}, 0xffffffffffffff50) 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 2: setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), 0xffffffffffffff50) 01:02:02 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 01:02:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) [ 504.452120] Bluetooth: hci2 command 0x0401 tx timeout [ 505.802130] Bluetooth: hci0 command 0x0401 tx timeout [ 506.522084] Bluetooth: hci2 command 0x0401 tx timeout [ 507.882216] Bluetooth: hci0 command 0x0401 tx timeout [ 508.602103] Bluetooth: hci2 command 0x0401 tx timeout [ 509.962036] Bluetooth: hci0 command 0x0401 tx timeout [ 510.682100] Bluetooth: hci2 command 0x0401 tx timeout [ 512.042365] Bluetooth: hci0 command 0x0401 tx timeout [ 512.762129] Bluetooth: hci2 command 0x0401 tx timeout [ 514.122087] Bluetooth: hci0 command 0x0401 tx timeout [ 514.842073] Bluetooth: hci2 command 0x0401 tx timeout 01:02:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:14 executing program 3: socket$kcm(0x29, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448d0}, 0x50) 01:02:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x401, ')B\f', 0xf7, 0x2}) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000080)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc883000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x8080) 01:02:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000006800081e2cbd7000ffdbdf25000003002000000004000400060003000000000004c20b5d437fe524f0000b00560ca914b370a535b1b6a0c3f37e2475316a8c94b4b5ebef1fb8b49ac98a988fc2bda0de940af1c250bb8890a212e1619f99c1c0082b8c2834ae3b7535e2c33284970c8606c634c451948b15d55bfb0cafb7b4cfe94918aea83857dc232e38cc193e94a50040b2786c32b0c0324eb2b6804ba61eeac6ca0ad487bdd40529528cf54d29cd0d7a492fae62a45af04d579b5bdf41867c470d2b348cefd7e01f73e43e91328f004ba15cff1353548eb9040c83e0293222bafa3165c671a779f908e369b3ed1726c0d048532d53975b6dce0bebc7c0115f809af4dd070c2ff2b8706f9db4b94e031fb946b910b1447f4b4af91d4495db008d4a40da7cf715892ced1fc08e445255a63be402dc557f8006f685217f039a4fb1b8ba4b65c8ac9e8029658cf8ab22472c9c43f8fcf9df33e394f8dc7164281fb2c038c2c329157b014b214cf6cb19a6be713595bd539d10ac185c67435d2fb88d5ccf6345cb2b62d1590eb7b913f827d86f09d2755f438972a48371413d3daf6b908247c9e3e52edb289ad0065ff66d170525b945b83fb0d743cd3440392ab72b7a"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x6, 0x2400) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x2800) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000180)) ioctl$sock_bt_hci(r2, 0x400448e3, &(0x7f0000000100)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000001800)={0x1, [0x11e, 0x4], 0x6}, 0x10) r5 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r5, 0x400443c9, &(0x7f0000000040)={@fixed={[], 0x11}, 0x9}) 01:02:14 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) [ 515.437004] audit: type=1107 audit(1617411734.297:241): pid=12805 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 01:02:14 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc883000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x8080) 01:02:14 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="7d3d72843a1525733a2a785e1b98cb4f579645c82214678929ccb71660b1a992e9729f1355ec407093e63cdf37522317a865229d3249709ef3ecdab9d75791c4b9b12d3db00ff9b78caa240d01b3df0076f1c3a5856f67e5399810acc00c668a3f45099d") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) 01:02:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) [ 515.561936] audit: type=1107 audit(1617411734.417:242): pid=12823 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 516.202160] Bluetooth: hci0 command 0x0401 tx timeout 01:02:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x401, ')B\f', 0xf7, 0x2}) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000080)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:15 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc883000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x8080) 01:02:15 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_devices(r1, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 01:02:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) 01:02:15 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) [ 516.277976] audit: type=1107 audit(1617411735.137:243): pid=12837 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 01:02:15 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 01:02:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) [ 516.336070] audit: type=1107 audit(1617411735.197:244): pid=12847 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="7d3d72843a1525733a2a785e1b98cb4f579645c82214678929ccb71660b1a992e9729f1355ec407093e63cdf37522317a865229d3249709ef3ecdab9d75791c4b9b12d3db00ff9b78caa240d01b3df0076f1c3a5856f67e5399810acc00c668a3f45099d") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) 01:02:15 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) [ 516.413994] audit: type=1107 audit(1617411735.277:245): pid=12856 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 516.932088] Bluetooth: hci2 command 0x0401 tx timeout 01:02:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x401, ')B\f', 0xf7, 0x2}) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000080)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 01:02:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 01:02:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) 01:02:16 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:16 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 01:02:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 01:02:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) 01:02:16 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) [ 517.180502] audit: type=1107 audit(1617411736.037:246): pid=12866 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 517.239243] audit: type=1107 audit(1617411736.097:247): pid=12879 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="7d3d72843a1525733a2a785e1b98cb4f579645c82214678929ccb71660b1a992e9729f1355ec407093e63cdf37522317a865229d3249709ef3ecdab9d75791c4b9b12d3db00ff9b78caa240d01b3df0076f1c3a5856f67e5399810acc00c668a3f45099d") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) 01:02:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) [ 517.320720] audit: type=1107 audit(1617411736.177:248): pid=12886 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 517.482230] Bluetooth: hci3 command 0x0401 tx timeout [ 517.642206] Bluetooth: hci1 command 0x0401 tx timeout 01:02:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x3, 0x401, ')B\f', 0xf7, 0x2}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 01:02:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 01:02:16 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 01:02:16 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) 01:02:16 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') [ 518.024944] audit: type=1107 audit(1617411736.887:249): pid=12896 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 01:02:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) [ 518.075570] audit: type=1107 audit(1617411736.937:250): pid=12903 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000000)="7d3d72843a1525733a2a785e1b98cb4f579645c82214678929ccb71660b1a992e9729f1355ec407093e63cdf37522317a865229d3249709ef3ecdab9d75791c4b9b12d3db00ff9b78caa240d01b3df0076f1c3a5856f67e5399810acc00c668a3f45099d") ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:17 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 518.282073] Bluetooth: hci0 command 0x0401 tx timeout 01:02:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r1 = eventfd2(0x4, 0x80001) read$eventfd(r1, &(0x7f00000000c0), 0x8) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) 01:02:17 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 01:02:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) 01:02:17 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) eventfd2(0x4, 0x80001) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 01:02:17 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 01:02:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) 01:02:17 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:17 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 01:02:17 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) 01:02:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 01:02:17 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 519.002717] Bluetooth: hci2 command 0x0401 tx timeout 01:02:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 01:02:17 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 01:02:17 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:17 executing program 0: socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)) 01:02:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) [ 519.562137] Bluetooth: hci3 command 0x0401 tx timeout [ 519.722068] Bluetooth: hci1 command 0x0401 tx timeout 01:02:18 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 01:02:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:18 executing program 0: socketpair(0x0, 0x80f, 0x2, &(0x7f0000000140)) 01:02:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 01:02:18 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:18 executing program 0: socketpair(0x0, 0x0, 0x2, &(0x7f0000000140)) 01:02:18 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 01:02:18 executing program 0: socketpair(0x0, 0x0, 0x2, &(0x7f0000000140)) 01:02:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 01:02:18 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:18 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) [ 520.362143] Bluetooth: hci0 command 0x0401 tx timeout 01:02:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:19 executing program 0: socketpair(0x0, 0x0, 0x2, &(0x7f0000000140)) 01:02:19 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 01:02:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 01:02:19 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) eventfd2(0x4, 0x80001) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 01:02:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 01:02:19 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:19 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') 01:02:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:19 executing program 0: socketpair(0x0, 0x80f, 0x0, &(0x7f0000000140)) [ 521.082067] Bluetooth: hci2 command 0x0401 tx timeout [ 521.642218] Bluetooth: hci3 command 0x0401 tx timeout 01:02:20 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:20 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x2c, 0x4a, 0x800, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x80, 0x0, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x800) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:20 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 01:02:20 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:02:20 executing program 0: socketpair(0x0, 0x80f, 0x0, 0x0) 01:02:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80000001, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x0) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r1, 0x5, 0x9, r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) 01:02:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) 01:02:20 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:20 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:20 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) 01:02:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000000)="6ebd535fc8aaa380c37ac3547c8c6fd553cba2b6144d8f8cfcafe14c6ab79d3e10466c42d465c79a472b330f922a11de2ece0001d0a83d") r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair(0x1, 0x80f, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd4, r5, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xd24ffa9a03ca6284}, 0x4000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x1e4, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff3a55}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0x16c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "99dd89efec65add343ae6bdc3e4bef376fde1b1c1897bea6573d3be69eafc9d159"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "ee2b0172728153a94d4cc9e400cd89f1dff3d99523deb0b59abe2b3e644f8e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "4c10823103b38cb478a5606bba5b4f329503140164a6dc3d804a0725903984ca79e97c283d2d4119b434614e8fe354ce8af418c260f583825f0cde37ce530aa96901af4d26e4a45b6385f4895063d2cbe3b40fba7616151ab4870394d8bf2e76d29e1bb4a0adebf152b6c628f1d637c3994b2b5dbd9ae7e68ee18a6dd3e5b752bf13ae3b6ec503c3d3c70a74c6ca40cb2c8149d9c3342084de6d2e5e5a29a5cf36d9c2e18cdf2dbf1340d03802ae916852b8555df3da1d2e4fac18d46dd4a8f5792baad5e39e89350971408a66992e1083044d77f192880efc878698f8f6bf0228"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8061}, 0x4000000) 01:02:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:02:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x40, "b27791", 0x9, 0xd0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f00000000c0)="863d7d941eee37feae368df38fa0b3d0b07fb14a29a60364b1e32d112f790299344318a0eb588e5c3333a735d5d0b198c8605c81ba5f18172e17e0f1cf175eacc7faf7b6d392f41e64a31a6fdd301183f3b4b81eb497812a183976c5b3882d16d5a6e3fc7143379754eec0aef3370e55d9399291dfc41c01ccbe0eabf53eb55e7cbdc56d7a68542e7ced0335ffa11eb525ef2f3c3d641dd1d6410e3e33cab94a69db7d2f6e64c4f41a51af8631e72b8da864c2272e63cc63ef1be9e6ca7c586ea413") ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x19, &(0x7f0000000200)="3c5d5ceaa4f04bae7a0dc275405a44aa977e3fab1e15312944"}) 01:02:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8000, 0x4000) read$eventfd(r1, &(0x7f0000000040), 0x8) [ 521.802095] Bluetooth: hci1 command 0x0401 tx timeout [ 521.814685] kauditd_printk_skb: 1 callbacks suppressed [ 521.814692] audit: type=1107 audit(1617411740.677:252): pid=13039 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:20 executing program 1: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:20 executing program 4: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000000)={@fixed={[], 0x12}, 0x3}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:20 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) [ 521.889406] audit: type=1107 audit(1617411740.727:253): pid=13046 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:02:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x2, 0x1, 0x8, 0x8, 0x21af, 0x5, 0x2}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7, 0x0, 0xf, 0x65a9d456, 0x9, 0x4, 0x1}, &(0x7f0000000140)={0x3ff, 0x9, 0x3ff, 0x4, 0xc1d3, 0x1f, 0xd2, 0x9d0}, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xfffffffffffff001]}, 0x8}) 01:02:20 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000000)="a536bf30d1bb0dc15ab1f780a3054b0b440cf06e8c7b6559d2552d60d46c7afa441df60956a8f400665be745245f9cf282b89db9d627736195822776e761485f94965b89ebfda41c769954c58d46b1a6f154c021694248c7", 0x58) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000002c0)="dd7810c2e6eba1191fe7d84dc52d2740a46180e26875a2a5", 0x18) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x1402, 0xb, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x200048c1}, 0x8003) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) r7 = getpgid(0xffffffffffffffff) r8 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x6, 0x40000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00', r9) 01:02:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:02:20 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:20 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x2, 0x1, 0x8, 0x8, 0x21af, 0x5, 0x2}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7, 0x0, 0xf, 0x65a9d456, 0x9, 0x4, 0x1}, &(0x7f0000000140)={0x3ff, 0x9, 0x3ff, 0x4, 0xc1d3, 0x1f, 0xd2, 0x9d0}, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xfffffffffffff001]}, 0x8}) [ 522.442140] Bluetooth: hci0 command 0x0401 tx timeout 01:02:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000100)=""/226, 0xe2}, {&(0x7f0000000200)=""/228, 0xe4}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/250, 0xfa}, {&(0x7f0000001480)=""/144, 0x90}, {&(0x7f0000001540)=""/214, 0xd6}], 0x8, &(0x7f00000016c0)=""/72, 0x48}, 0x100) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448e0, &(0x7f0000001840)="f548e66b44dc44d4fa06fae773754b13110afcc4385b8597f0b93f520fc362395f78dbc0c62a6fcdec9d9e10880d85c1cd7c4c856c1b3e7197f72091ad2c8caaf590d206eaa1fd3917533508484e9719dddb5b543d6742fc99910dbebcc9f2c6dd2bc1e5e3b4d80329951b75de293cb8428c0b837042eed99d8579e9764079c8632eaf515b69aae05aa81e430611f171e8d6214da8c9ea1b62312a3c441826") ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000001780)="725351456ea2f6e98c11ae0f9ef26ebbf384def94f42a5be5209eba2b24f9bd3d157bee2e5c3ad1d075d53aa0f497f87683f9bc8248750794c931c444c97b31c6447cb97b479fcf0763ec96b2ab680446438aedd1d6ebcbb279a8ded368230d4c2fe60ed457ea2c622a861594db8fe04c08dee5c8f1c4f315fc8feda937dc73e1483a6bb6f7876db26d026c1ab46ef") 01:02:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @remote}, &(0x7f00000000c0)=0xc) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8, 0x200) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xb, 0x6, 0x400, 0x2, 0x500, r1, 0x40, [], r2, r3, 0x0, 0x2, 0x1}, 0x40) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xc186, [0x7]}, 0x10) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) 01:02:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x0, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x100000001, 0x2, 0x1, 0x8, 0x8, 0x21af, 0x5, 0x2}, &(0x7f0000000100)={0xfffffffffffffffb, 0x7, 0x0, 0xf, 0x65a9d456, 0x9, 0x4, 0x1}, &(0x7f0000000140)={0x3ff, 0x9, 0x3ff, 0x4, 0xc1d3, 0x1f, 0xd2, 0x9d0}, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0xfffffffffffff001]}, 0x8}) 01:02:21 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:21 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0x4e24, 0x36f, @local, 0x81}}}, 0x38) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:21 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000000c0)={0x1, 0x8801, "5bdc19", 0x21}) 01:02:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{@none}, {@none}, {@fixed}]}) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x2, 0x1}, 0x6) 01:02:21 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) clock_gettime(0x0, &(0x7f0000000180)) 01:02:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:02:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{@none}, {@none}, {@fixed}]}) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x2, 0x1}, 0x6) 01:02:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x0, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:22 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) 01:02:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:02:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{@none}, {@none}, {@fixed}]}) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x2, 0x1}, 0x6) 01:02:22 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) 01:02:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:02:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{@none}, {@none}, {@fixed}]}) 01:02:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="71c9eec7a1bf89431fd62ebf0e49ab3192cecf3307c01f398dbc8103cbec4cabb75afa04593e642dc4d8da72e7bdf36bb78672391637d193359f6b7911c3be2b541a8ba250be62687f8ad063e4825865cb2eff309536ff08ae8a3d8d48f6b95b021f83e7cae59505c26f4a04672c858dc4688f2ea5") 01:02:22 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x8801, "5bdc19", 0x21}) [ 523.722535] Bluetooth: hci3 command 0x0401 tx timeout [ 523.882125] Bluetooth: hci1 command 0x0401 tx timeout [ 523.962094] Bluetooth: hci2 command 0x0401 tx timeout 01:02:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x0, 0x9, "7e42b4", 0x9, 0xfe}) 01:02:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) 01:02:23 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) 01:02:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) 01:02:23 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x400080, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:23 executing program 0: syz_open_dev$audion(0x0, 0x0, 0x511400) 01:02:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 01:02:23 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 524.526014] Bluetooth: hci0 command 0x0401 tx timeout 01:02:23 executing program 0: syz_open_dev$audion(0x0, 0x0, 0x511400) 01:02:23 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "5bdc19", 0x21}) 01:02:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x0, "7e42b4", 0x9, 0xfe}) 01:02:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:24 executing program 0: syz_open_dev$audion(0x0, 0x0, 0x511400) 01:02:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 01:02:24 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 01:02:24 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) 01:02:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x0, "7e42b4", 0x0, 0xfe}) 01:02:24 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 01:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "5bdc19"}) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)) 01:02:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x0, "7e42b4"}) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="006c80da5000"/21) 01:02:24 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="006c80da5000"/21) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") 01:02:24 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) 01:02:24 executing program 3: shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)) 01:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "5bdc19"}) 01:02:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "5bdc19"}) 01:02:24 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="006c80da5000"/21) 01:02:24 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)="006c80da5000"/21) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) 01:02:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:02:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) socketpair(0x15, 0x44f3cec8fd213fe8, 0x20000042, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f00000002c0)="36629a9c3660287ccd3ebb96e24788dc5e7c17157f6464aab163a45fa315995b380fcfcce3f88b2ecd53fad1651983385a3b0724cfd51337cbed8a3a2d555c2c075ee1a431cf8b21eaa43a1c5e32c112290421b13754515c607858e7e45641105cb4bf557a51ae4a78e29332") socketpair(0x4, 0x4, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) 01:02:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "5bdc19"}) 01:02:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xfd9, 0x4) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:02:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:02:24 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000280)={0xffffffff, [0x2, 0x9], 0x401}, 0x10) shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x60000) 01:02:24 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x511400) 01:02:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r1) 01:02:24 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:02:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x210000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x14, 0x5e, 0x5, 0x1f, 0x1082, 0xffffffffffffffff, 0xc6, [], 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xa}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5658}, @alu={0x4, 0x0, 0x7, 0x9, 0x5, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x7, 0x5, 0xb, 0xfffffffffffffef4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x1, 0x3, 0x5, 0xc, 0xfffffffffffffff0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map={0x18, 0x1, 0x1, 0x0, r3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, [], r2, 0x0, r3, 0x8, &(0x7f0000000280)={0xc, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x5, 0x8001, 0xa000}, 0x10}, 0x78) 01:02:24 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:24 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:24 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000080)) [ 525.962451] Bluetooth: hci1 command 0x0401 tx timeout 01:02:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:02:24 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 01:02:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:24 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:24 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:02:24 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x584, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1f, @remote, 0xfffffffb}, @ib={0x1b, 0x3, 0x7f, {"8c50236ca0d341d7e5c4cdd849a7e014"}, 0x400, 0xfffffffffffffff7, 0x2}}}, 0x118) 01:02:24 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:02:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x584, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1f, @remote, 0xfffffffb}, @ib={0x1b, 0x3, 0x7f, {"8c50236ca0d341d7e5c4cdd849a7e014"}, 0x400, 0xfffffffffffffff7, 0x2}}}, 0x118) 01:02:25 executing program 3: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:25 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:25 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:02:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x584, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1f, @remote, 0xfffffffb}, @ib={0x1b, 0x3, 0x7f, {"8c50236ca0d341d7e5c4cdd849a7e014"}, 0x400, 0xfffffffffffffff7, 0x2}}}, 0x118) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x4, 0x80001) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "2885c5a37f74bd077aa3eaf5b2543d851340e295138af1fbb950aafe8657b960afb6787a1fe328e19d684528ff62ecc7cd12a2c5a0fac5fc2776ff72497f001fea1759f44fce679d6acac0af2348e928ba61c2b017add9cd22796b4e4cdb7d1fca328eb7818d089cbe095eb2d696b673f543d3222e45e77b8f2659e20b0c3fa771a3224d69c768f500c513380b48bd082c89b44fafef0bc43fa0bbf360dd0904ecf1b584b47994b0e5be03cb366f8cf158ea0c4f6fc327cd20c0f237185ff6720c0c598c0e3eff2200bfa5740081109186d763628bbd3031ffefe57b620b302bb1eb4e1f0f840cd4bc3325257904be3ebbeed5239fdeb63c36a80afdb90a6900", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) 01:02:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "2885c5a37f74bd077aa3eaf5b2543d851340e295138af1fbb950aafe8657b960afb6787a1fe328e19d684528ff62ecc7cd12a2c5a0fac5fc2776ff72497f001fea1759f44fce679d6acac0af2348e928ba61c2b017add9cd22796b4e4cdb7d1fca328eb7818d089cbe095eb2d696b673f543d3222e45e77b8f2659e20b0c3fa771a3224d69c768f500c513380b48bd082c89b44fafef0bc43fa0bbf360dd0904ecf1b584b47994b0e5be03cb366f8cf158ea0c4f6fc327cd20c0f237185ff6720c0c598c0e3eff2200bfa5740081109186d763628bbd3031ffefe57b620b302bb1eb4e1f0f840cd4bc3325257904be3ebbeed5239fdeb63c36a80afdb90a6900", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 01:02:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "2885c5a37f74bd077aa3eaf5b2543d851340e295138af1fbb950aafe8657b960afb6787a1fe328e19d684528ff62ecc7cd12a2c5a0fac5fc2776ff72497f001fea1759f44fce679d6acac0af2348e928ba61c2b017add9cd22796b4e4cdb7d1fca328eb7818d089cbe095eb2d696b673f543d3222e45e77b8f2659e20b0c3fa771a3224d69c768f500c513380b48bd082c89b44fafef0bc43fa0bbf360dd0904ecf1b584b47994b0e5be03cb366f8cf158ea0c4f6fc327cd20c0f237185ff6720c0c598c0e3eff2200bfa5740081109186d763628bbd3031ffefe57b620b302bb1eb4e1f0f840cd4bc3325257904be3ebbeed5239fdeb63c36a80afdb90a6900", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) [ 526.602415] Bluetooth: hci0 command 0x0401 tx timeout 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) 01:02:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) 01:02:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:25 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x4}, 0x6) 01:02:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:25 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 1: clock_gettime(0x4, &(0x7f0000000040)) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x4, &(0x7f0000000040)) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "2885c5a37f74bd077aa3eaf5b2543d851340e295138af1fbb950aafe8657b960afb6787a1fe328e19d684528ff62ecc7cd12a2c5a0fac5fc2776ff72497f001fea1759f44fce679d6acac0af2348e928ba61c2b017add9cd22796b4e4cdb7d1fca328eb7818d089cbe095eb2d696b673f543d3222e45e77b8f2659e20b0c3fa771a3224d69c768f500c513380b48bd082c89b44fafef0bc43fa0bbf360dd0904ecf1b584b47994b0e5be03cb366f8cf158ea0c4f6fc327cd20c0f237185ff6720c0c598c0e3eff2200bfa5740081109186d763628bbd3031ffefe57b620b302bb1eb4e1f0f840cd4bc3325257904be3ebbeed5239fdeb63c36a80afdb90a6900", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 01:02:25 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:25 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) 01:02:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) 01:02:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:25 executing program 0: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: clock_gettime(0x0, &(0x7f0000000040)) 01:02:26 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:26 executing program 1: clock_gettime(0x4, 0x0) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:26 executing program 2: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:26 executing program 1: clock_gettime(0x4, 0x0) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "2885c5a37f74bd077aa3eaf5b2543d851340e295138af1fbb950aafe8657b960afb6787a1fe328e19d684528ff62ecc7cd12a2c5a0fac5fc2776ff72497f001fea1759f44fce679d6acac0af2348e928ba61c2b017add9cd22796b4e4cdb7d1fca328eb7818d089cbe095eb2d696b673f543d3222e45e77b8f2659e20b0c3fa771a3224d69c768f500c513380b48bd082c89b44fafef0bc43fa0bbf360dd0904ecf1b584b47994b0e5be03cb366f8cf158ea0c4f6fc327cd20c0f237185ff6720c0c598c0e3eff2200bfa5740081109186d763628bbd3031ffefe57b620b302bb1eb4e1f0f840cd4bc3325257904be3ebbeed5239fdeb63c36a80afdb90a6900", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: clock_gettime(0x4, 0x0) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x4, 0x80001) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x4, 0x80001) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "2885c5a37f74bd077aa3eaf5b2543d851340e295138af1fbb950aafe8657b960afb6787a1fe328e19d684528ff62ecc7cd12a2c5a0fac5fc2776ff72497f001fea1759f44fce679d6acac0af2348e928ba61c2b017add9cd22796b4e4cdb7d1fca328eb7818d089cbe095eb2d696b673f543d3222e45e77b8f2659e20b0c3fa771a3224d69c768f500c513380b48bd082c89b44fafef0bc43fa0bbf360dd0904ecf1b584b47994b0e5be03cb366f8cf158ea0c4f6fc327cd20c0f237185ff6720c0c598c0e3eff2200bfa5740081109186d763628bbd3031ffefe57b620b302bb1eb4e1f0f840cd4bc3325257904be3ebbeed5239fdeb63c36a80afdb90a6900", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x4, 0x80001) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:26 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 4: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) 01:02:26 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 01:02:26 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 01:02:26 executing program 3: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:26 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 528.042484] Bluetooth: hci1 command 0x0401 tx timeout 01:02:26 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 01:02:26 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 01:02:27 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 01:02:27 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 01:02:27 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 4: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:27 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x4, 0x80001) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) [ 528.682228] Bluetooth: hci0 command 0x0401 tx timeout 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:27 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 0: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:27 executing program 0: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x6, 0x5, 0x2, 0x1, 0x7d, 0x9, 0x80}}}, 0x120) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r2, 0x584, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1f, @remote, 0xfffffffb}, @ib={0x1b, 0x3, 0x7f, {"8c50236ca0d341d7e5c4cdd849a7e014"}, 0x400, 0xfffffffffffffff7, 0x2}}}, 0x118) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) 01:02:27 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:27 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:27 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:27 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) eventfd2(0x4, 0x80001) 01:02:27 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8880031}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x18004}, 0x40010) 01:02:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:28 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x100, "80b72d", 0x7, 0xd0}) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) [ 529.183361] audit: type=1107 audit(1617411748.047:254): pid=13800 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) 01:02:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:28 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x100, "80b72d", 0x7, 0xd0}) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:28 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, 0x0, 0x0, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:28 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 01:02:28 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:29 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) [ 530.122169] Bluetooth: hci1 command 0x0401 tx timeout 01:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, 0x0, 0x0, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, 0x0, 0x0, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:29 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) [ 530.762071] Bluetooth: hci0 command 0x0401 tx timeout 01:02:29 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x0, 0x100, "80b72d", 0x7, 0xd0}) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:29 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:29 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:29 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111, 0x2}}, 0x20) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, 0x0, 0x0) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, 0x0, 0x0) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2a, 0xa, 0x6, &(0x7f0000000000)) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, 0x0, 0x0) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:30 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:30 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000340)={0x3, 0x5, "7c0342", 0x3, 0x8}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)) 01:02:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:31 executing program 0: syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x9, 0x2000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)) 01:02:31 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20) 01:02:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)) 01:02:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x0, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)) 01:02:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)) 01:02:31 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)) 01:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 01:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 01:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 01:02:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x0, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x0, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:33 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, 0x0, 0x4, r3, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, 0x0, 0x4, r3, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, 0x0, 0x4, r3, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x0, r3, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x0, r3, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x0, r3, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3}) 01:02:34 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3}) 01:02:44 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3}) 01:02:44 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, 0xffffffffffffffff, 0x2}) 01:02:44 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x0, r3, 0x2}) 01:02:45 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x0, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:45 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x0, 0x2}}, 0x20) 01:02:45 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, 0x0, 0x0) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:45 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r2, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r3, 0x2}) 01:02:45 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:45 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:45 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:46 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = eventfd2(0x4, 0x80001) read$eventfd(r2, &(0x7f00000000c0), 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@empty}}}, &(0x7f0000000080)=0xe8) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x4, r2, 0x2}) 01:02:46 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:46 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r1, &(0x7f0000000740)={0x28, 0x0, 0x0, @host}, 0x10, 0x1800) 01:02:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000040)="6df027667eba0a4a75e7d6159db1d74c0f9b2aa0803616315635ecb76be3e8585086f01665f270dbb6cbefc8a9e7fc9002bfaec9eca6aa419f088753dc2f7fdbdcc2d12891efeb905a28f6c425") 01:02:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000040)="6df027667eba0a4a75e7d6159db1d74c0f9b2aa0803616315635ecb76be3e8585086f01665f270dbb6cbefc8a9e7fc9002bfaec9eca6aa419f088753dc2f7fdbdcc2d12891efeb905a28f6c425") 01:02:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:46 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x400448e1, &(0x7f0000000040)="6df027667eba0a4a75e7d6159db1d74c0f9b2aa0803616315635ecb76be3e8585086f01665f270dbb6cbefc8a9e7fc9002bfaec9eca6aa419f088753dc2f7fdbdcc2d12891efeb905a28f6c425") 01:02:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) 01:02:46 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) 01:02:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) 01:02:47 executing program 0: socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfffb, 0x2}, 0x6) 01:02:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:47 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:47 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:47 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:47 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:47 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:47 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) 01:02:48 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:48 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:48 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 2: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 01:02:48 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x2}, 0x6) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x1}, 0x6) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x2}, 0x6) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x2}, 0x6) 01:02:48 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) 01:02:48 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x1}, 0x6) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) 01:02:48 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0x6) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x400) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x6}, 0x6) 01:02:48 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0x6) 01:02:48 executing program 1: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0x6) 01:02:48 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x6}, 0x6) 01:02:48 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) 01:02:48 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x400) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:48 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffc}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xffffffff, 0x4) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x7, [0xff, 0x19bb], 0x80}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80800) 01:02:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x7, [0xff, 0x19bb], 0x80}, 0x10) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) accept4$x25(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80800) 01:02:49 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) accept4$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x400) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) r5 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=@updpolicy={0x310, 0x19, 0x10, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, r3}, {0x4, 0x0, 0x1ff, 0x7, 0x5, 0x81, 0x9}, {0x3, 0x549, 0x1, 0xff}, 0x1ff, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, [@sa={0xe4, 0x6, {{@in6=@private1, @in=@multicast2, 0x4e22, 0x5, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x4, r4, r5}, {@in=@multicast2, 0x4d6, 0x2b}, @in=@rand_addr=0x64010102, {0x47, 0x5cb, 0x80, 0x1da, 0x1, 0x2, 0x100000000, 0x1ff}, {0x100000000, 0x80000001, 0x1f, 0x9}, {0x3, 0x5e9, 0x8}, 0x70bd2b, 0x0, 0x2, 0x3, 0x80, 0x2}}, @lifetime_val={0x24, 0x9, {0x7, 0x8, 0x6}}, @lastused={0xc, 0xf, 0x7}, @algo_auth_trunc={0x8d, 0x14, {{'sha1-ce\x00'}, 0x208, 0x180, "9ca836eadf643ef4d5b354302c816ff9c11a71663a03eb16b097ff17a72a23cc5f510bedfe4ecf3c8b84c5c64fb2f782a1e3664e05779d91fb26966ef573b37bb3"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @tfcpad={0x8, 0x16, 0xfffffffc}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffd}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3501, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@mcast2, @in=@broadcast, @in=@multicast1, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2000c005}, 0x50) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) r5 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=@updpolicy={0x310, 0x19, 0x10, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, r3}, {0x4, 0x0, 0x1ff, 0x7, 0x5, 0x81, 0x9}, {0x3, 0x549, 0x1, 0xff}, 0x1ff, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, [@sa={0xe4, 0x6, {{@in6=@private1, @in=@multicast2, 0x4e22, 0x5, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x4, r4, r5}, {@in=@multicast2, 0x4d6, 0x2b}, @in=@rand_addr=0x64010102, {0x47, 0x5cb, 0x80, 0x1da, 0x1, 0x2, 0x100000000, 0x1ff}, {0x100000000, 0x80000001, 0x1f, 0x9}, {0x3, 0x5e9, 0x8}, 0x70bd2b, 0x0, 0x2, 0x3, 0x80, 0x2}}, @lifetime_val={0x24, 0x9, {0x7, 0x8, 0x6}}, @lastused={0xc, 0xf, 0x7}, @algo_auth_trunc={0x8d, 0x14, {{'sha1-ce\x00'}, 0x208, 0x180, "9ca836eadf643ef4d5b354302c816ff9c11a71663a03eb16b097ff17a72a23cc5f510bedfe4ecf3c8b84c5c64fb2f782a1e3664e05779d91fb26966ef573b37bb3"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @tfcpad={0x8, 0x16, 0xfffffffc}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffd}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3501, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@mcast2, @in=@broadcast, @in=@multicast1, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2000c005}, 0x50) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$vsock_stream(0x28, 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:49 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x0, 0x0, 0x2, 0x4}}, 0x26) 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) r5 = geteuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000980)=@updpolicy={0x310, 0x19, 0x10, 0x70bd27, 0x25dfdbfe, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2, 0x4e24, 0xffff, 0x4e21, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, r3}, {0x4, 0x0, 0x1ff, 0x7, 0x5, 0x81, 0x9}, {0x3, 0x549, 0x1, 0xff}, 0x1ff, 0x6e6bb6, 0x1, 0x1, 0x3, 0x3}, [@sa={0xe4, 0x6, {{@in6=@private1, @in=@multicast2, 0x4e22, 0x5, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x4, r4, r5}, {@in=@multicast2, 0x4d6, 0x2b}, @in=@rand_addr=0x64010102, {0x47, 0x5cb, 0x80, 0x1da, 0x1, 0x2, 0x100000000, 0x1ff}, {0x100000000, 0x80000001, 0x1f, 0x9}, {0x3, 0x5e9, 0x8}, 0x70bd2b, 0x0, 0x2, 0x3, 0x80, 0x2}}, @lifetime_val={0x24, 0x9, {0x7, 0x8, 0x6}}, @lastused={0xc, 0xf, 0x7}, @algo_auth_trunc={0x8d, 0x14, {{'sha1-ce\x00'}, 0x208, 0x180, "9ca836eadf643ef4d5b354302c816ff9c11a71663a03eb16b097ff17a72a23cc5f510bedfe4ecf3c8b84c5c64fb2f782a1e3664e05779d91fb26966ef573b37bb3"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @tfcpad={0x8, 0x16, 0xfffffffc}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffd}, @migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x33, 0x1, 0x0, 0x3501, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00', @in6=@mcast2, @in=@broadcast, @in=@multicast1, 0x3c, 0x1, 0x0, 0x0, 0x2, 0x2}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x2000c005}, 0x50) 01:02:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x4}}, 0x26) 01:02:49 executing program 0: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) geteuid() 01:02:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) 01:02:49 executing program 0: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 01:02:49 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x26) 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@mcast1, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000940)=0xe8) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 0: connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 01:02:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:49 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 01:02:49 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 01:02:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000002680)={0x9, [0x2, 0x81], 0x6}, 0x10) 01:02:49 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) [ 550.730792] audit: type=1107 audit(1617411769.587:255): pid=14429 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:49 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)) socket$l2tp(0x2, 0x2, 0x73) 01:02:49 executing program 0: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 01:02:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 01:02:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") [ 550.816460] audit: type=1107 audit(1617411769.677:256): pid=14441 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)) 01:02:49 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 01:02:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) 01:02:49 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) 01:02:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x2}}, 0x20) [ 550.934076] audit: type=1107 audit(1617411769.797:257): pid=14460 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:49 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)) 01:02:49 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:49 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 01:02:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:49 executing program 5: socketpair(0x27, 0x800, 0x800, &(0x7f0000002640)) 01:02:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) [ 551.035061] audit: type=1107 audit(1617411769.897:258): pid=14478 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:49 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:49 executing program 2: ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 01:02:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:50 executing program 5: socketpair(0x0, 0x800, 0x800, &(0x7f0000002640)) 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 551.115679] audit: type=1107 audit(1617411769.977:259): pid=14491 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 551.145677] audit: type=1107 audit(1617411769.997:260): pid=14487 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 01:02:50 executing program 5: socketpair(0x0, 0x800, 0x800, &(0x7f0000002640)) 01:02:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) [ 551.229089] audit: type=1107 audit(1617411770.077:261): pid=14505 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) 01:02:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 01:02:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0x20) 01:02:50 executing program 5: socketpair(0x0, 0x800, 0x800, &(0x7f0000002640)) [ 551.299850] audit: type=1107 audit(1617411770.087:262): pid=14509 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 551.322393] audit: type=1107 audit(1617411770.157:263): pid=14523 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) [ 551.378587] audit: type=1107 audit(1617411770.227:264): pid=14525 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) 01:02:50 executing program 5: socketpair(0x27, 0x0, 0x800, &(0x7f0000002640)) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 01:02:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0x20) 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 01:02:50 executing program 5: socketpair(0x27, 0x0, 0x0, &(0x7f0000002640)) 01:02:50 executing program 2: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 5: socketpair(0x27, 0x0, 0x0, 0x0) 01:02:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x2}}, 0x20) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 01:02:50 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 01:02:50 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) 01:02:50 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 01:02:50 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:50 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) 01:02:50 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "454fa0", 0x0, 0x2}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) 01:02:50 executing program 5: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4800d) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x0, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040040}, 0x4080) 01:02:50 executing program 5: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4800d) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x0, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040040}, 0x4080) 01:02:50 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000001c0)=0x2, 0x4) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 5: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4800d) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f2, 0x0, 0x70bd26, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040040}, 0x4080) 01:02:50 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x10, 0x5, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001f1db511b7bd7000fbdbdf257f0000010000000000000000f4ffffb03e41610bceccea5148b900000004000000000000000000000000000000000000000015280a00000435000010000a0028bd700025bd70000000000008001d00f20000000c"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:50 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:50 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x3b}}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4081) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 5: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x8, 0x8) 01:02:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4800d) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:02:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}}, 0x4800d) 01:02:51 executing program 5: kexec_load(0x20, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: kexec_load(0x0, 0x7, &(0x7f0000000480)=[{&(0x7f0000000040)="9be8f6eeb6f297a337e49a1a58909c0d6e851f0689b5cbd6c286173d49080186bd503e51f1dbd0ef933e", 0x2a, 0x6}, {&(0x7f0000000080)="f7ca2b3bc9453c010c0c829c4454a74b31e8a9b42453ec2b0186a9d45b059754e1c293becd6a0abaef1bc0c6923f875e936192de8529e79250ca1dac22545eaf4f4db6f373d82f0b9206f8991be8cc947803f2a3b83f97f60c19306860717739bcaa1e26ab3e", 0x66, 0x100, 0x1}, {&(0x7f0000000100)="7b4e4de3f0d04e24078e2713e859b5893f463d09a40144e7697908115d1a02668be557d8540811e514c7e1fb0a4c3d3b8eb6e3f499305428962e6ce7ab58591ce9c0af7c529050d4fcda93eb46b34dd2d69b76c6", 0x54, 0x3ff, 0x3f}, {&(0x7f0000000180)="19f54af4f369c232d298199378b5677f2e9a7b12a0d437eef89eff2ebcc5b0e123c5267ff736124ed54de12161d79f51cd01e6a924a26ffc0fd8ccd5cc1999267a3718c4bd9acedfb75bac2a2c1fd3ceec7c1e38ad103c04655b93474109eebb013822ea7eb6d557f96f47a3dd53e7d1705b5d499702f247a1ff367982bb1e301a34d226a4f8c1c472300889f4d347b309358d84ea5313c1c9f4a95a38b998ab6a9493765f6e70e35c7cdddc30", 0xad, 0x6, 0x58}, {&(0x7f0000000240)="d13043661d66da8cd167d0e32c7be33475c2beb6bd1b836782c8a42b9b1597adb6f09c5bef68770ae1bb06a5e30706de79e6606b79bfb6f7c081e50f20b060e194fa1d6fe0813b04352510bc0afd20cb6a3cf180535fe2d1bb1970852a4c74c8b4440dbebfb87c806de6a64e", 0x6c, 0xb5, 0x9}, {&(0x7f00000002c0)="c5842f053c456ea2ea5a38245b3746cf2129e0d964f0e1fb6cb88909584ca4d300bbab51c0775a9291c44678636afaeaa457b39af1d03b1e1a5f7e53f6bc87f57229cfa8b128e90286150ef27f6d84eccd80dce15bae98c962b54b015a31264154c2e84c690fa319b23e182633de0abc37584659aa16aab73d180523a2665aaf533cf2aef742f0de70bbb5a0b3d7ebba2dc825fa4e20fcba8723b73e4c726c92c901eccbf8105b38676677f654129081b330059c124f5458d516489a5f4b8f4c384141a62abe251acd61afb85db08745e58873363499", 0xd6, 0x10, 0x5}, {&(0x7f00000003c0)="c51b5a3aced0c8d7d72bb3eae3a02d37672656c006f0d3c3a1b351add4967cd5bbb1acd3218375e879d36aa167aac25fc3f182f8bc74c0f5afeaf924753d6c0b2cdd60e3530a359936234d9698c66a7ddd235890ee0b462cc5a7fde60d8a788fa29290cf6adbe00f5f76bce307eda93b1e7dff090b645eb55fc081542d116ff0d9f0337a6d967b4e71", 0x89, 0x5, 0x6}], 0x150002) 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 5: kexec_load(0x0, 0x0, 0x0, 0x150002) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000000)) 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: kexec_load(0x0, 0x0, 0x0, 0x0) 01:02:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: kexec_load(0x0, 0x0, 0x0, 0x0) 01:02:51 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: kexec_load(0x0, 0x0, 0x0, 0x0) 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x5, 0x6, 0x1, &(0x7f0000000180)) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fork() wait4(r1, 0x0, 0xa0000000, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfd, {0x40, 0x1, 0x0, r1, 0x4, 0x395, 0x80000001, 0x1ff, 0x0, 0x8}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x48004) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:51 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) [ 552.762186] Bluetooth: hci4 command 0x0401 tx timeout 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x3}, 0xfffffffffffffd1e) 01:02:51 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:51 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:02:51 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 3: socketpair(0x18, 0x0, 0x0, &(0x7f00000007c0)) 01:02:51 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:02:51 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:51 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:51 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:51 executing program 3: socketpair(0x18, 0x0, 0x0, &(0x7f00000007c0)) 01:02:51 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:02:51 executing program 0: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:02:52 executing program 3: socketpair(0x18, 0x0, 0x0, &(0x7f00000007c0)) 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x40000c0) 01:02:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:52 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000007c0)) 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x40000c0) 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x4, 0x100, "814526", 0x72, 0x2}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:52 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000007c0)) 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x40000c0) 01:02:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x70bd2a, 0x0, 'X'}, 0x14}}, 0x0) 01:02:52 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f00000007c0)) 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x200, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:52 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 3: socketpair(0x18, 0x0, 0x0, 0x0) 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x10}, 0x10}}, 0x0) 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x0, 0x70bd28, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:52 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:52 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x0, 0x0, 0xfffff83b, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:52 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x10}, 0x10}}, 0x0) 01:02:53 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x464, 0x0, 0x0, 0x0, "b9", ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:53 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x10}, 0x10}}, 0x0) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:53 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x464, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:53 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x464, 0x0, 0x0, 0x0, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:53 executing program 1: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x464, 0x0, 0x0, 0x0, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:53 executing program 1: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x24000804}, 0x40000c0) 01:02:53 executing program 1: sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x40000c0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10}, 0x10}}, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:53 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xffffff3a, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:53 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) [ 554.842249] Bluetooth: hci4 command 0x0401 tx timeout 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:02:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:53 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:53 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:53 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:53 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:53 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:54 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:54 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)="68382a248a115309a696613b6b07a5bb1eb9a71e0002c99fe00527e7d37327b0d003754b412497e4a44b2b911c8b92dc923eaed800b9f41cc943deef1bf8bfebd6597a46eed99813b6d890d37fc225be652e294885792fedb8b37ffb0bfde687b0304c64793e4394ff12125d37ad26ca7c989f0adaf8a4fbf3f9ba6f511ecf6c42ae4874c4ca3e4fc6d03f7897d4df6a3c3f462cb16100f477198465f331ca61030309c0ab021bd0") 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7, [0x80, 0x7], 0x8001}, 0x10) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:54 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, 0x0}, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:54 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={0x0}}, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, &(0x7f00000000c0)) 01:02:54 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x10}, 0x10}}, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x10}, 0x10}}, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f00000000c0)) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:54 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x10}, 0x10}}, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0x0) 01:02:54 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:54 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:54 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:55 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 01:02:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', r1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x274141fa, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000000, 0x204440) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x2, 0x3}, 0x6) 01:02:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x200, 0x50000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x2, 0x4) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x10340) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000000c0)) 01:02:55 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x0, 0x2, 0x1, 0x3, "de31c73bf6f082c5f2cbc6f15615b8ef842bd3c74ebe789b4bdf102c0cc2772f6320ecb12bc6a7e4369feaf7b8eb4ae76394aa9e6e8c8427214fbd725a50ba32e48971"}, 0x53) 01:02:55 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)="296ab10e2af035abd7201c0300894dcfad410ff32b625fd9409f24eaf3eacf9fa807f266acf4d5bc67ce039b3672b4421e62363745885cad8ae540c9566db48a55b3c4c2b2da620d2521dde343147c5af35af3c59f542f3b4beba733d6ee40976064a4c390b1dee2ef41e3c06f6235e39ca8e6ecf0245922af58020ebf07d900"/141) 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x0, 0x2, 0x1, 0x3, "de31c73bf6f082c5f2cbc6f15615b8ef842bd3c74ebe789b4bdf102c0cc2772f6320ecb12bc6a7e4369feaf7b8eb4ae76394aa9e6e8c8427214fbd725a50ba32e48971"}, 0x53) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$nbd(r2, &(0x7f0000000040)={0x67446698, 0x0, 0x2, 0x1, 0x3, "de31c73bf6f082c5f2cbc6f15615b8ef842bd3c74ebe789b4bdf102c0cc2772f6320ecb12bc6a7e4369feaf7b8eb4ae76394aa9e6e8c8427214fbd725a50ba32e48971"}, 0x53) 01:02:55 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x8101) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x8101) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x8101) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) 01:02:55 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) [ 556.922161] Bluetooth: hci4 command 0x0401 tx timeout 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x8101) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="020027bd7000fedbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r1 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x7fffffff, 0x2000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000780)={0x1, 0x7, "7dfa0f", 0xd9}) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4840) socketpair(0x18, 0x3, 0x7c, &(0x7f00000007c0)) 01:02:55 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:55 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) 01:02:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) 01:02:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x8101) 01:02:55 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x8101) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) 01:02:55 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000080)) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:56 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1dc, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94a}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a71}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x77}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ccf}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x304}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff54e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8565}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76ff0c8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008005}, 0x8000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 01:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:56 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="4370e3ca5c31c4c2009cd55c98c756436c391e7567c84ac2ff36eef73525d35bd4b8ae8d077ce584b0bd4c2b8ef298ec9052bc2f094a9c10e2fbf8e6e506e5110aaafb8f0ee9a506fc2344cd6d50d9f8c8758ffa40374d2333d8494bc9f4e9d3edaa5c29f30e33bd50bf3f7c762746c3ff3e540b1d7ed94cdc3a520faec794ac376ae6a54f914a34d84f55e8ba40dd2ef710e5e5b7792bb95e41380ed844b4db9d1834f4189d5ae0740f07a9fedb39d597462103932d8c84969529efb30c137fd9f207ef20d83b4939b09c64ae4fb82e81e1cad2") 01:02:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1dc, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94a}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a71}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x77}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ccf}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x304}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff54e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8565}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76ff0c8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) 01:02:56 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 01:02:56 executing program 0: socketpair(0x1d, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) 01:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 01:02:56 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 0: socketpair(0x0, 0x63c6d452bfba49d7, 0x0, &(0x7f0000000000)) 01:02:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1dc, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94a}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a71}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x77}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ccf}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x304}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff54e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8565}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76ff0c8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 01:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x0, 0x1, 0x0, 0x4}}, 0x2e) 01:02:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 01:02:56 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 01:02:56 executing program 1: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x4}}, 0x2e) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, 0x0) 01:02:56 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 01:02:56 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000000)) 01:02:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)) 01:02:56 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x2e) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 01:02:56 executing program 4: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) 01:02:56 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getsa={0x20c, 0x12, 0x402, 0x70bd2c, 0x25dfdbfb, {@in=@local, 0x4d5, 0x2, 0x32}, [@replay_thresh={0x8, 0xb, 0x3}, @tfcpad={0x8, 0x16, 0xba9a}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x40}}, @algo_auth_trunc={0xd4, 0x14, {{'sha256-ce\x00'}, 0x440, 0x0, "bb922f29433b87b6c45fc9199f3f5c1748ba953812559e724f35e40ff2d5916c53619085fb10b897b55c0074b6bca4421bc568de5d179a6e44901d260e3cb3c4063990d86a668b40baf6952fd429978269a4a11ed6895567682d123b63ab3fd2084c31c43a097d3a3a97be68f812557515f99b9085cb1b0938c408c9d38adb44ee52740996ae8497"}}, @lifetime_val={0x24, 0x9, {0x101, 0xfffffffffffffffe, 0x3827e885, 0x2}}, @algo_auth_trunc={0xc7, 0x14, {{'sha1\x00'}, 0x3d8, 0x180, "071c4244b1618e1eb65f52353e0fd02d8b61eecc5af085579e1a75311a3b3a599fc0601ef51ae0781cb2d0636fc8d560bde11a906826add17f07f8fdf5e8a861c9b1075034cf89538e323ef01875a142b9f7bd351b5ea935c2ef9f656c050c37239b0288b3399e727e57483a3ce5f9fb8caf258723c1e54a0fb318"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4488c}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) socketpair(0x9, 0x6, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1dc, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94a}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2a71}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x77}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ccf}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x304}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff54e9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8565}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x76ff0c8e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f9}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2d6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7, [0x1, 0x4], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 0: socketpair(0x0, 0x63c6d452bfba49d7, 0x0, 0x0) 01:02:56 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="36e6263cddb6ab60218f46e1e6d81dbe9b80cf6876017bb0d4739562e556a0a086df6d49b3364bda10bc6e396f1b9b535a09f0867f11a9a0c9341a290f30c09aadba0ca5e92db03fa9826138ce34ee549dfb35cc4a8c171ea270ce84f708091a50c358330171e917d28fc3eda37c1e", 0x6f) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfeb, 0x541040) setsockopt$inet_dccp_int(r2, 0x21, 0x10, &(0x7f00000000c0)=0x9, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000480)={0x67446698, 0x1, 0x1, 0x1, 0x1, "1a11f6ff14065d367340d2d85b20c03b9bc863a8c95e309d404e1d47e289cb8c97f5315061d76763fea117c28b44ac9a1e9661026137001e5c68464ee7ffff226526dbb88e8ce603b626396b814ef0b8f97461b8b500e9e380627f87e970899d089f64a493545f9a0632e6231912b01ed99dd0a28787485dc8e8f548912bdb18085a3fab0d2c407a9d8b222ac6feeb79ab40426cd6e83a"}, 0xa7) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x77689d5a4e94b28f, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7, [0x1, 0x4], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:56 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)="36e6263cddb6ab60218f46e1e6d81dbe9b80cf6876017bb0d4739562e556a0a086df6d49b3364bda10bc6e396f1b9b535a09f0867f11a9a0c9341a290f30c09aadba0ca5e92db03fa9826138ce34ee549dfb35cc4a8c171ea270ce84f708091a50c358330171e917d28fc3eda37c1e", 0x6f) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfeb, 0x541040) setsockopt$inet_dccp_int(r2, 0x21, 0x10, &(0x7f00000000c0)=0x9, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000480)={0x67446698, 0x1, 0x1, 0x1, 0x1, "1a11f6ff14065d367340d2d85b20c03b9bc863a8c95e309d404e1d47e289cb8c97f5315061d76763fea117c28b44ac9a1e9661026137001e5c68464ee7ffff226526dbb88e8ce603b626396b814ef0b8f97461b8b500e9e380627f87e970899d089f64a493545f9a0632e6231912b01ed99dd0a28787485dc8e8f548912bdb18085a3fab0d2c407a9d8b222ac6feeb79ab40426cd6e83a"}, 0xa7) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x77689d5a4e94b28f, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44800}, 0x40000) 01:02:56 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 01:02:56 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) [ 557.847042] kauditd_printk_skb: 24 callbacks suppressed [ 557.847048] audit: type=1107 audit(1617411776.707:289): pid=15507 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:56 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x7, [0x1, 0x4], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 01:02:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) [ 557.898953] audit: type=1107 audit(1617411776.727:290): pid=15512 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:56 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:56 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") bind$bt_hci(r0, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x7, [0x1, 0x4], 0x7}, 0x10) 01:02:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)) 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) [ 557.996757] audit: type=1107 audit(1617411776.857:291): pid=15528 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 558.030536] audit: type=1107 audit(1617411776.877:292): pid=15522 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:56 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:02:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) 01:02:57 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) [ 558.075185] audit: type=1107 audit(1617411776.927:293): pid=15537 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 558.109669] audit: type=1107 audit(1617411776.957:294): pid=15540 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:57 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0xfffffffffffffffc) 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) [ 558.141927] audit: type=1107 audit(1617411776.997:295): pid=15546 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) 01:02:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) [ 558.181400] audit: type=1107 audit(1617411777.037:296): pid=15548 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000080)) [ 558.277857] audit: type=1107 audit(1617411777.137:297): pid=15561 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 01:02:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0xfffffda2) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)) 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448ca, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x2, 0x3}, 0xfffffda2) 01:02:57 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'ipvlan1\x00', @ifru_ivalue}}) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0xfffffffffffffffc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team_slave_0\x00'}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) 01:02:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:02:57 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000040)="2b4ef60745986cafec6fa26d905682be8edff337c097f26d23e32235a3aee39505c830379ec742f47780b460bd5924127fe5a5eab92f5de45df1ab72ec4ec2aa210defea7af8ff1248cb62a28f23d4aea1220e606303e4744159a280c29f3dc5cf789e2b9a1790596af4e166cc262b46dd0d48783bfcd4788583cae3ce07fb7b3ccc40d9020e5ad81570958999294f831d084442") 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x5}, 0x6) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0x106, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0) 01:02:57 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:02:57 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x350, 0x12, 0x400, 0x70bd2b, 0x3, {0x9, 0x4, 0x8, 0x64, {0x4e22, 0x4e22, [0x101, 0x0, 0xe438, 0x4], [0x2, 0xffffff7f, 0x10000, 0x1], 0x0, [0xfff, 0x4]}, 0x3ff, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xa1, 0x1, "48fed4772063e3a07b675c11dd4145861817cfd32593af60abcc758c3447ecf4e829ece888586760756ededb08081da94d88a3811d975d19d93bd4354fb58fc293ce4a395732eb0d3fa4a3a96b9fc079c54ea22e6efdee0f3d072c092e1ed7c6ff952c97d6228e13d079470026cb8e4d96f02ce478766fa78ade784f7f6bcd085e0e2998c290a1ab1ae0a87e7d9d45a067b5b8d715b8c78caff47e8d0c"}, @INET_DIAG_REQ_BYTECODE={0xf0, 0x1, "caca01e82c89af1b4cc890079548bc5ab3ab021ab726a3acf69fd35f8fc8fe69b95fdb4b4575e301d8e5cb3d78137fd83610a04b0c3d306bad4b7e6ff5f22a864f5fad54f0997f4c752f6344635966c49b3329dd96f44c1a4c3c41cd004efebdeea7aaf27b3be49c0ed57e4a6ce5b32ccaf2e9d52faea3facea300afc19262cfe373f43d06b02c69f5a83b5946d7e198d1e13288d78e1f0b6ad25e691e8c5bcfc61284ec7f3bcff453883df33a24d5796c9dec705ee26bee6efc1558699325536bfd4bf564c23fec87ffac675031f374f26b455c05650ab8cccd93d4a5794e01cd57da6cdc68298f9833d6ae"}, @INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "a43ef97381b01cf4f7c168e24a8b18237046cdaa58c2ecdcdbfd13689b8d2a9192134efcac3afae3d6b5fdafd7ba7ecb7d124eed6f79ac00e1803b381cf83989bd2872a9c4016960e359221bb5a835c1ddaca688228c0d9d9595d33187949be329b0ca5b80b3262f01894508b0204e343b015f633ea9"}, @INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "c2d023d59c43bea085218b3c8a07afcde08e0a665831174a6e9da72b71def950d1615c74b1f2236f68d79f772842bcbe7f53ce95204be212bf25ceb189dc4a1e87f7f50beb5be0a0a275342a1fda3c39f94d99cf818debc63f7dccb0419b708163f978feadaba13137cb21ceeca14f791ddbfd4ad3a6d27444e6c1d5ea3c222e1cd01f65b4f346173d5ede4dc39841c5295d89ac61b27e9d162a1cbbb47086b78578fa16117f84d5d661f00ab4a2fca89533644d20a6e4c744ad61c672244ceedcbb33f43a249c2d65bff818cee9de4961b4bbca2a68435351427f06a683c0d7d48dbdee886a5c9a06b09813bf"}]}, 0x350}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) [ 559.002137] Bluetooth: hci4 command 0x0401 tx timeout 01:02:57 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x6c, &(0x7f0000000000)="b14687f808713c5802d2f4cdadd51d32b1d28e1f869adee683ac6e7573f774d9ef4c3a9405f13d104a474f85d0372f10b4ade5c1d3f07eec8f7671b8f5a1c0eeb6cc7294d627778013f3d6d7865aff7635377dd6126993bf8e8e2d881f50244822b78e7677b553e5b326a534"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@newnexthop={0x18}, 0x18}}, 0x4008040) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@ipmr_delroute={0x14c, 0x19, 0x200, 0x70bd27, 0x25dfdbff, {0x80, 0x0, 0x14, 0x6, 0xfe, 0x1, 0xff, 0x3, 0x200}, [@RTA_IIF={0x8}, @RTA_METRICS={0x93, 0x8, 0x0, 0x1, "9969be363a82cbe3eae256a9fa8e64bd8fcadc91bf8f99a8a68281790b7d16f0bfbcf23f1b415883294ac113c2e93db683ce4f3c0294b0fa4ca5ae6bbd6943d86fdefae148ed43c285f8cf12bbc47c38b3de502de6c49480ba26110f7cb9d3114f6e07e7c9b8346108c95b7607e970d1d28881b83f238563b944cc43cc47f9d664be3341db982b9f384cdea0733f24"}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_FLOW={0x8, 0xb, 0x10000}, @RTA_ENCAP={0x5c, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x58, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4f, 0x3, "abbeb6cd0fc2eb157cae850478775af95b16d684199d471308ea45a063de498ed8554734a3fe204c3bcc431f2bd60e82a91b9f4bf8407de6b144a640fbd460b2cdf954f44d4b0f89e30252"}}}}, @RTA_IIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_DST={0x8, 0x1, @private=0xa010102}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_OIF={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x800}, 0x20020057) 01:02:57 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000300), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x4, 0x1, "1d619f", 0x16, 0x3}) 01:02:57 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 01:02:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r0}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "b617e8fcd08122e3bb960cecce973ac7792f64809baf3db6b95bc1f0e9cb788cc0dd211651e4aea64cf2f1d3c881ae3f10a320dad1f98f3c3885d18e6c7047cabd32bd21b8df6701433944e42de7bbc02a53980b5f037c326d0aca1995d57dc1104c4b4a908320cd85b2da3c63f8182a2deb606b95a0bee887a1597e3d6a92abf6ece690c54763174867b08b96a32a5929b109ebd4ee3e7cfe74818b71c94f98cf480910c2de97437555e68b4fd93c70f642f7913b3e6070b64ba93cfd46b938b0c37661ab9e16c00a86e0b438ffbc86f62c9a639f15a9cc35eccdbee08428e96c4158729b89a532c4ec33f6b19688d69fb29bb7dd2ec65a4e2ae2fff241e3c7", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r0}}, 0x128) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r0, 0x10, 0x0, @in={0x2, 0x4e22, @remote}}}, 0xa0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) 01:02:58 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4800) 01:02:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 01:02:58 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:58 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4800) 01:02:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@initdev, @in=@dev}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)=@buf) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:02:58 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000040)) 01:02:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x8003}, 0xfffffffffffffff7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xc7, 0x822c1) setsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)="fc2e38a2a07f58547aa7cebd5580ff30b559a3d93ff7a9e6d90cd2281e4a0db106b511d402350063834fffbe852ba196e494ce854cfa702c909af1c4ccded92b705848629187fe65ff7567da7399b022e363f2ccc74a939d716132984df557bfb94a5e602d609bbb7938e3f7b49f60198a1103d7fd263834152c95a22663c303a509099ce5c28f3df7fec2862deffa0c894b981fd4c33ac6", 0x98) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:02:58 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:58 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4800) 01:02:58 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:58 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000300), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x4, 0x1, "1d619f", 0x16, 0x3}) 01:02:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:58 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) wait4(0x0, 0x0, 0x20000000, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x8c, 0x453, 0x20, 0x70bd26, 0x25dfdbfd, "c839e6ce400e530a7561c79aadb7b0efbef68e6be3d05e8e6c2a8d6c05acb08930052df3c7508b9cfc7f0f77a1ed5031529c8c3b33bb5fe879c473010000000000000008d47d40fac13f045f7ceee5babc75c6df557e2c016fd94903be020e93229d79870c40c572c6cf2002831c9a0b5d0984a7b59f044bc5", ["", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x4044044}, 0x1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ldst]}, &(0x7f0000000040)='syzkaller\x00', 0xa11, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x3, 0x1, 0x1, 0xb, 0xa, 0x30, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0xfffffff8, 0x4b, &(0x7f00000005c0)=""/75, 0x40f00, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0xa, 0x80, 0x6}, 0x10, 0x22cfb, r3}, 0x78) sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb8, 0x453, 0x10, 0x70bd29, 0x25dfdbfe, "6aefb30fd37ffa0e7c5df69ea45612890fda188e48fbdc1e1f1670e2e9deb957ae116362fb0689c445e646b059dfa69652b6f16db351517c8a5c435f8d7ca675939ea220ae5417c6430bddaac3384045d30792354911e92ec4a1711a8a1fbc21b086e4d6dfd6b1e970874b20720ba3f61c55cc60362679cfeef234a674cf95cffd3d524cd101560c3faaeb48242a57a1dd3918e464af9df661bc93ae5409e8bafab50c6077", ["", "", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000700)={0x2, [0x101, 0x1], 0x1}, 0x10) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:02:59 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x8400, 0x2}, 0x6) 01:02:59 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x22, 0x800, 0x80000000, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000300), 0xffffffffffffffd6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x6, "220aa2", 0x8, 0x1}) [ 560.171356] audit: type=1107 audit(1617411779.026:298): pid=15737 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:02:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x2c, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0xff000000) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r2, 0x80000000}) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:02:59 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:59 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) [ 560.273522] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 01:02:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000300), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x4, 0x1, "1d619f", 0x16, 0x3}) 01:02:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4800) 01:02:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448de, 0x0) 01:02:59 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4800) 01:02:59 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:02:59 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xf}}, 0x10) 01:02:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0x10001, [0x10, 0x80000000], 0x6a3}, 0x10) socketpair(0x28, 0x6, 0x80000000, &(0x7f0000000040)) 01:02:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:02:59 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, 0x0, 0x4800) 01:02:59 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) [ 561.084956] Bluetooth: hci4 command 0x0401 tx timeout 01:03:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000300), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x4, 0x1, "1d619f", 0x16, 0x3}) 01:03:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)="9494e1447902f92293e0563924a3ea82dc44d516925e43e7b4d5bc7f63442861db9d22733bf89669821760d322004d9c26b2615628db639d490fd6c9de98ea7d90e180c66734e1a01eb9278487eaeaf31166acd5ec54deb4b2fe48387a37bdb6773131381b2fd8106417817285931888a0b8fe39efe93695a1ca1f79d7717d527e4f10ee4a6cf69e36214cb6b578f86fbf2b8d525d") 01:03:00 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:00 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:03:00 executing program 2: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:03:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:00 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:00 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) ioctl$sock_bt_hci(r0, 0xe1e1937198786e5a, &(0x7f0000000340)="67d707b4482119f4afb7907637d9843bbf49e3ec80b18f38dff79da165f3b31af593c6e5a86523c669da6342fe7149f18ee35579621799750c959ff051d002c38871f78e0f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x198, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x49}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x138, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_ID={0x86, 0x3, "9624ffb0b4f12448957da1b1ab2676b3b5528c9afae011bf467d252f9bc95401c39099fadf2deb28bfbac9e8ee315d0c470ed0396802ade053a8b25a71b6f1a9dcc7c7d83c518b8cc1c3f2c752e90fae90b6938c727f1080a2f4e33aa9d3b32aafb7759a2be55df719dd6fb80071a8ee420d3d944cfc8f101694a24a47bcc525f91b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "2c56ca97c550be167f5436b41306c4dcbb94fef49059f4c92adb86f261b94dc589fdfa73"}}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "fbe52b119e6ed1020bcf8a45eb4f58c7b82d6da78fe5"}}]}]}, 0x198}}, 0x24000050) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) 01:03:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) [ 562.282101] Bluetooth: hci1 command 0x0401 tx timeout 01:03:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x3}, 0x8) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:03:01 executing program 2: getuid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x23, 0x4, 0x8, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x100, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x4, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x1, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x45090}, 0x40000) socket$inet_dccp(0x2, 0x6, 0x0) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000002c0)="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") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:03:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000280)=0x7f, 0x4) 01:03:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, 0x0) 01:03:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 01:03:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) 01:03:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 01:03:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x2, 0x200, "6260f1", 0x9}) 01:03:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:01 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x10}}, @GTPA_NET_NS_FD={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4004000) 01:03:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 01:03:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:01 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:01 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'bond_slave_1\x00'}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000300), 0xfffffda2) 01:03:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) [ 563.162184] Bluetooth: hci4 command 0x0401 tx timeout 01:03:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x80000, 0x7f, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000040)=0x5, 0x4) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x0, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x27, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x7, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0x4}, 0x6) 01:03:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socketpair(0x23, 0x6, 0x1, &(0x7f00000001c0)={0xffffffffffffffff}) bind$bt_hci(r2, &(0x7f0000000300), 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 01:03:02 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300), 0x3) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x81}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1b}, {0x6, 0x11, 0x1f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x2) r0 = socket$inet6(0xa, 0x80003, 0xfc1) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000001c0)={r0, 0x3}) 01:03:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x70bd25, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000540)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x158, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x5c}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x81}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffe01}, {0x6, 0x11, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x4}}]}, 0x158}, 0x1, 0x0, 0x0, 0x2080}, 0x2000c085) sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010229bdbd49207376afbd7000f5dbdf2502201401fc00ff050026000008000100e000000208001900", @ANYRES32=r2, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) 01:03:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x25dfdbfd, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x41}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) [ 564.094538] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 564.144380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 01:03:03 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@pptp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/200, 0xc8}, {&(0x7f0000000180)=""/64, 0x40}], 0x2, &(0x7f00000002c0)=""/4096, 0x1000}, 0x10100) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$bt_cmtp(0x1f, 0x3, 0x5) 01:03:03 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1}, 0x6) 01:03:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x70a, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff}}}, 0x118) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x90, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0xdf7}, {0x8, 0x15, 0x6c}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040842}, 0x2000c000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000100)={'syz_tun\x00', @ifru_ivalue}}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {@none}, {@fixed}]}) 01:03:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xb, 0x400000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={0x1, 0x0, "c8cfa9", 0x3f, 0x40}) socketpair(0x18, 0xa, 0x1ff, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0xf990, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 01:03:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) 01:03:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x1}, 0x6) 01:03:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:03 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:03 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)="928031d21b8004e1052dda358c9bbc153fca97032c43268feadfcef8b3b45bd9bb1a1aa94bc6faf22bc9e2da4740b610d8100b685f30b20b10dbb5cf034dab7b1e14b4db01790343fb52cd81ebfb28d3370ce04babe2c67a547b44acc417fca8f1d6515e1d0d3b652e65156ccb26d5995b0ee02265098e2c32a7f7034b216269ddccca067e63442c1dbbe4a9d66d8ec65c2e753428137bed7e113e3c0921e38cec4a7991f8d485244e7a4cb349e103f13185ab2d82be94ca35031ce28005c3281a66390193f90a69c4901e175cbec44b829dec7842c02d35aefb30a9ead20c35a25e5f73745b996732de0a8e1bc4") bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x3}, 0x6) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000100)={0x0, r3}) [ 565.082330] Bluetooth: hci2 command 0x0401 tx timeout 01:03:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x22, 0xa, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000001c0)=0x6, 0x4) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0xff, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xfffffffffffffffd, 0x82041) write$cgroup_type(r4, &(0x7f0000000040)='threaded\x00', 0x9) r5 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x420000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r6, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000de36ca46400cc74e629d3fb695757544aa7e6d2077c03580004a9b09f1ec1a8769ed1e68003e504d5d3dffc5a49c1ffbb0a129969c025ece0034bc082e7dbdf43bfa1d2f4fbcbdfe", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b00080000000600110052960000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b00630800000600110008000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000008000006001100010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00c26302f00600110002000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x8, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 01:03:04 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:04 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) [ 565.160551] kauditd_printk_skb: 3 callbacks suppressed [ 565.160558] audit: type=1107 audit(1617411784.016:302): pid=15992 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 565.198021] audit: type=1107 audit(1617411784.026:303): pid=15992 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 565.242244] Bluetooth: hci4 command 0x0401 tx timeout 01:03:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="326f0129c1a2de6189bd21a199b98f7a82cbd869e86ff2cf777de327e900000000000000", @ANYRES16=0x0, @ANYBLOB="f1e22abd7000fbdbdf25450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:04 executing program 2: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040)) 01:03:04 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 01:03:04 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="bf28b63d7b2e637f791d393d5df8e909339ad2a9c0bb73cacf5ae596ef44c4381ee9f84a8153ba58d8f36ce98aa8a383da9f31ea24578e690cae9033b37bf1e8816cb367453061d29d410a5c2f008c276497a6e4d9cde3b5e3ec4b1f0d315f7ae1459a3ae8843a7b61a6007610faae25cd8760a5ba2f8ee38c3a15c5e6269876ebdbd1866add288e2db8808ef77d0f234ce9ec03440cede6f79a0f5d4b668fc72ed27d47839667449c3848187fd016b0cab7d1f2278024ee5164247d9f81058a92238dce") ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000140)) 01:03:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x1, 0x7, "a5bbf1", 0x9a, 0x3}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:03:04 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x41}}, 0x4800) 01:03:04 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:05 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) 01:03:05 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:05 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x41}}, 0x0) 01:03:05 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x1c00, "434415", 0xff, 0x5}) 01:03:05 executing program 2: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x803d0, 0x1) 01:03:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x3, 0x3}, 0x6) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000000)=@buf) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x1, 0x7, "a5bbf1", 0x9a, 0x3}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:03:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:03:05 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:05 executing program 1: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x1, 0x7, "a5bbf1", 0x9a, 0x3}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:03:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000040)={0x67446698, 0x0, 0x3, 0x2, 0x1, "7f0249aeeb606fdbbf40ccf13700da57a419a84bb47aa24d279121300ec9c0d3c8ac50494b43ecfa19a7d2e142d655931626630b17eb58b7426d180eb5d006603f224228453dfe7ebd0cc4b093468fc9dde02c5532df6c4444778827ccd87d3958923e2aa9b7774ea48f68fbeae720253fba272f090b7caf5c03dc4f04bbaba41ca04517533ab6bc7e5366c39d7eef9859f370ac1da4b261d8488c0f3e5b3ad9059cd1beb47fdba8c17149bc097f69b75dac1ce900822a771b7bd9fb6cc31850"}, 0xd0) [ 567.162170] Bluetooth: hci2 command 0x0401 tx timeout [ 567.322194] Bluetooth: hci4 command 0x0401 tx timeout 01:03:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:06 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:03:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x1, 0x7, "a5bbf1", 0x9a, 0x3}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x1000, 0x4) 01:03:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xcb}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x24000808) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x4, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x190, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004001) 01:03:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xfffffff9, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x6, 0x4) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x1, 0x7, "a5bbf1", 0x9a, 0x3}) 01:03:06 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 01:03:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000001400)={0x0, 0xa4a1, "e8d45f", 0x9b, 0x8}) recvmsg$kcm(r1, &(0x7f00000013c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f00000012c0)=""/200, 0xc8}], 0x4}, 0x10002) 01:03:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="42f40d74b70da41643f0e568000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250a000000540003800800020002000000080002000010000008000300ff070000080003000300000008000300ffff00000800020052080000080001008100000008000100ffffffff08000200f8ffffff0800030056000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 01:03:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:07 executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getpolicy={0x244, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, {{@in=@local, @in6=@local, 0x4e23, 0x6, 0x4e23, 0x3, 0x2, 0x80, 0x0, 0xff, 0x0, 0xee00}, 0x6e6bb4}, [@address_filter={0x28, 0x1a, {@in=@multicast1, @in=@local, 0xa, 0x40, 0x3f}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd27, 0x70bd26, 0x70bd25, 0x70bd2d, 0x3, [0x142, 0x7, 0x3, 0x9]}}, @proto={0x5, 0x19, 0x33}, @mark={0xc, 0x15, {0x35075d, 0x8}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={[], [], @empty}, @in6=@loopback, 0x0, 0x1873dac49a177994}}, @algo_comp={0x5d, 0x3, {{'lzjh\x00'}, 0xa8, "51a3868605d3aa4cb5b9cd20e948654af6326a6317"}}, @algo_aead={0xba, 0x12, {{'pcrypt(ccm(fcrypt-generic))\x00'}, 0x370, 0xc0, "d77b6262a7065a4a509374ccff546dcfe21d51cc3b163ff047493e167e065734c0384f022904f4645af9facdb2bf5d4e0cb63ba548a795604749a12839bd7d90793b72da7f8efcf17d926b69a5570cc78a37776cdb4581e26dc9e3963d7e711674591a592c6cfdeaa4450279f975"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffff7f}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@private2, 0x0, 0x2}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd27, 0x8}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, &(0x7f00000003c0)=0x20) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x81, 0x329400) 01:03:07 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "434415", 0xff, 0x5}) 01:03:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x0, 0xa, 0x5, 0x8, 0x18, 0x4}, @jmp={0x5, 0x0, 0x2, 0x4, 0x0, 0xc, 0x8}, @ldst={0x2, 0x1, 0x1, 0x4, 0x8, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xb, 0x2, 0x6, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x98, &(0x7f0000000080)=""/152, 0x41000, 0x1, [], 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x2, 0x4, 0x1}, 0x10, 0x60f5}, 0x78) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") 01:03:07 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "434415", 0x0, 0x5}) 01:03:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) 01:03:07 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x41}}, 0x4800) 01:03:07 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={@fixed={[], 0x11}, 0xfffffff8}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, 0x453, 0x100, 0x70bd2b, 0x25dfdbff, "637e2684110f06dadbdd262a0a0b469cec7a06d4d2551e61869290d372f5b99e5c9be2b2038777ec887976e2f0e7de78ad5e8172c8fc1e04204106b3b47de41b97301534259510c4113cdf26d609ea1d51e97e693c09769c676356e00b0a1eb4b67943cb35889809cca07dc61f181948fc250a2cdab87b5f56f728dbdb00"/136, ["", "", "", "", "", "", ""]}, 0x98}}, 0x4044) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x222000) bind$bt_hci(r2, &(0x7f0000000300), 0x6) 01:03:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040014) 01:03:07 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", "", ""]}, 0x41}}, 0x0) [ 568.658423] audit: type=1107 audit(1617411787.516:304): pid=16110 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 568.675491] audit: type=1107 audit(1617411787.516:305): pid=16110 uid=0 auid=4294967295 ses=4294967295 msg='c~&„ÚÛÝ&* [ 568.675491] FœìzÔÒUa†’Órõ¹ž\›â²‡wìˆyvâðçÞx­^rÈü A³´}ä—04%•Ä<ß&Ö êQé~i< vœgcVà [ 568.675491] ´¶yCË5ˆ˜ Ì }ÆHü% [ 568.675491] ,Ú¸{_V÷(ÛÛ' [ 568.702831] audit: type=1107 audit(1617411787.526:306): pid=16110 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 568.714086] audit: type=1107 audit(1617411787.526:307): pid=16110 uid=0 auid=4294967295 ses=4294967295 msg='c~&„ÚÛÝ&* [ 568.714086] FœìzÔÒUa†’Órõ¹ž\›â²‡wìˆyvâðçÞx­^rÈü A³´}ä—04%•Ä<ß&Ö êQé~i< vœgcVà [ 568.714086] ´¶yCË5ˆ˜ Ì }ÆHü% [ 568.714086] ,Ú¸{_V÷(ÛÛ' [ 569.242123] Bluetooth: hci2 command 0x0401 tx timeout 01:03:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0x0, 0x0, "434415"}) 01:03:08 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) 01:03:08 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000300), 0xfffffda2) 01:03:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x2d8, 0x12, 0x200, 0x70bd28, 0x25dfdbfc, {0x3, 0x6, 0x81, 0x0, {0x4e21, 0x4e23, [0xdd, 0xc8bc, 0x3, 0x9], [0x4, 0x100, 0xfffffffa, 0x80000000], 0x0, [0x1, 0x7]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "af4a6ef806e8ec7c3017a60423d10d37374372ddafb1419caee38e4ce63c7388d1a1ef1fa633638986bc9a677d5d270d62ec7302103dc8bcfeada149aaa15afeaa20b5ebbb9de8287312132558b5cf6582fdadef02b17b5069491b07f091fe067f274ede3d90"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "43c533593fb3adbb4e9aa24b61b9ef8435341b681aaaab3d0865989bbe8e5d995462add220b3705f8e5d9beca78baa5753aa026db373194371da9f0b3ccc3d3295f2de20e56150af70bfdf200d59f8518ba409a76e91d5ac24"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "01f3dd79f639213c6454dc9072e91ea4d4a7fd6ac8fb621a82fb5b29ed39c6e476872019de6ce713591133078d2ffd516032f61a35d1eadf8e57832467c8f5f0bc1d5622d68cf38ba18f3ea11077e8886a0392b428ade22e415236b414d181a9ef8bf33b7c59bbc323c9b6f03a90c1f134ebdc217ca46db8bd036b2f98cd0e40243bd0c1ad181b03a1549896a6507447d78ddff9a60cc7b99aeee87716cc94d131a6455ce263ba37dc082506074fa816aa3b8717a0111e0e940595408007fce1242bb4e1889bf86c08912fc0e8e306d230860a92e7592bc4cd72f3bb1a2129a10a3f7b26158470d5a5af99cc5813e85d074fae8765debaebe7b1a2102356"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "946f1b68d9dbff43cc06c73e7ba45450cb7f2b8fd32b50545828"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "c03a5631d81474f65344f2"}, @INET_DIAG_REQ_BYTECODE={0x89, 0x1, "2e8daebc1047cff478e5c45f4350e2418fc731e3b4572ceb7d7170df008d5c398d2b3548408552d1d17cb9c34ca5fb3016b93f30caa73e4771ae727639127e7b529ab9249b06d4e5392ac85cde4e142f81e9313daa10b238612b338cb5cc3670f8861309894114c6bdf7786ba99b1630ea7ea4694c308525fa5be1b86d1acd2e8352d9dd10"}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4}, 0x90) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:08 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=@getpolicy={0x244, 0x15, 0x200, 0x70bd27, 0x25dfdbfd, {{@in=@local, @in6=@local, 0x4e23, 0x6, 0x4e23, 0x3, 0x2, 0x80, 0x0, 0xff, 0x0, 0xee00}, 0x6e6bb4}, [@address_filter={0x28, 0x1a, {@in=@multicast1, @in=@local, 0xa, 0x40, 0x3f}}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd27, 0x70bd26, 0x70bd25, 0x70bd2d, 0x3, [0x142, 0x7, 0x3, 0x9]}}, @proto={0x5, 0x19, 0x33}, @mark={0xc, 0x15, {0x35075d, 0x8}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={[], [], @empty}, @in6=@loopback, 0x0, 0x1873dac49a177994}}, @algo_comp={0x5d, 0x3, {{'lzjh\x00'}, 0xa8, "51a3868605d3aa4cb5b9cd20e948654af6326a6317"}}, @algo_aead={0xba, 0x12, {{'pcrypt(ccm(fcrypt-generic))\x00'}, 0x370, 0xc0, "d77b6262a7065a4a509374ccff546dcfe21d51cc3b163ff047493e167e065734c0384f022904f4645af9facdb2bf5d4e0cb63ba548a795604749a12839bd7d90793b72da7f8efcf17d926b69a5570cc78a37776cdb4581e26dc9e3963d7e711674591a592c6cfdeaa4450279f975"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffffff7f}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@private2, 0x0, 0x2}}, @replay_val={0x10, 0xa, {0x70bd29, 0x70bd27, 0x8}}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, &(0x7f00000003c0)=0x20) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) syz_open_dev$audion(&(0x7f0000000400)='/dev/audio#\x00', 0x81, 0x329400) [ 569.402140] Bluetooth: hci4 command 0x0401 tx timeout 01:03:08 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:08 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) 01:03:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x0, 0x2}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="42f40d74b70da41643f0e568000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf250a000000540003800800020002000000080002000010000008000300ff070000080003000300000008000300ffff00000800020052080000080001008100000008000100ffffffff08000200f8ffffff0800030056000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x0) 01:03:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0x2}, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'wg1\x00', @ifru_data=&(0x7f0000000180)="9a4464a05bfdd4b283a121db3e299aefdcceccdc3020da78178cfaf1a5f7a07f"}}) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={0x0, 0x8, "b92b0e", 0xfa, 0x8}) socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00', 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) r4 = eventfd2(0x4, 0x80001) read$eventfd(r4, &(0x7f00000000c0), 0x8) r5 = eventfd2(0xfffffffa, 0x80000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r4, 0x7f, 0xefc, r5}) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ashmem\x00', 0x10080, 0x0) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f0000000280)=""/118) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3002008d7de4e412cbe0ef32e0d6c9d700", @ANYRES16=r2, @ANYBLOB="00082bbd7000fedbdf25000000000c0003000300000000000000080008000300000008000700", @ANYRES32=r3, @ANYBLOB], 0x30}}, 0x20004010) prctl$PR_CAPBSET_DROP(0x18, 0x4) 01:03:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000300)="a66e2128158811d68039e07c87a4e942ab86a66130cfdfb158f4949e5ea4b5c9c77fba5b255d29e01a351f79593e350bdd55280c45c1170e1503f0b91e08c91e607bc277f8b26279a071caa94ffbcc0b5144cb8f466bca298e291a89ce7f7ec8639f7769dfb6ed5196abd076252d63cd9f4c75") ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x1, 0x7, "a5bbf1", 0x9a, 0x3}) 01:03:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x80}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 01:03:09 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 01:03:09 executing program 4: syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0xaaff, 0x4e000) 01:03:09 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 01:03:09 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x20000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x52, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0x6) 01:03:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x800448f9, &(0x7f00000002c0)="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") 01:03:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x80}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 01:03:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x800, "a4b69e", 0xeb, 0xff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="18050000001400012cbd7000fbdbdf2508000100010000007fa24309b5ba977acc6209e83df8100aeec2ec4369cfe2099e4d74c00d795da9f9633ecd5b28db9795424c30fdc34cd8d5e24ffbfecfdc90f0cb8f9864142760dcb349b40057fddbec26145e2a763f01c5db0309af2c96fa4e9175a0a48622e9e3376c2381f912ac36"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:09 executing program 4: syz_open_dev$audion(0x0, 0xaaff, 0x4e000) 01:03:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x80}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 01:03:09 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xad7, 0x4) 01:03:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x80}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, 0x0) 01:03:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 01:03:10 executing program 4: syz_open_dev$audion(0x0, 0xaaff, 0x4e000) 01:03:10 executing program 2: r0 = getpgid(0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "b617e8fcd08122e3bb960cecce973ac7792f64809baf3db6b95bc1f0e9cb788cc0dd211651e4aea64cf2f1d3c881ae3f10a320dad1f98f3c3885d18e6c7047cabd32bd21b8df6701433944e42de7bbc02a53980b5f037c326d0aca1995d57dc1104c4b4a908320cd85b2da3c63f8182a2deb606b95a0bee887a1597e3d6a92abf6ece690c54763174867b08b96a32a5929b109ebd4ee3e7cfe74818b71c94f98cf480910c2de97437555e68b4fd93c70f642f7913b3e6070b64ba93cfd46b938b0c37661ab9e16c00a86e0b438ffbc86f62c9a639f15a9cc35eccdbee08428e96c4158729b89a532c4ec33f6b19688d69fb29bb7dd2ec65a4e2ae2fff241e3c7", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r3}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) bind$bt_hci(r1, &(0x7f0000000300), 0xfffffda2) 01:03:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:10 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x803d0, 0x1) 01:03:10 executing program 4: syz_open_dev$audion(0x0, 0xaaff, 0x4e000) 01:03:10 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) getpgid(0xffffffffffffffff) 01:03:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="f40000006404100029bd7000fbdbdf25fcf1d74387d57c4c04b199c404e111ddacfd0114fd47182ff6cd3bf70166764396fbe6a595ce3d9108559ac45139ad9165c14b53dacf9b80181ba8a0e6a8b68fab6f710502ffbc863ad60cf5d89562512db5cc2eee5113a3c1e4871f761f04124091fd5c71c9511760ef632636fc47f013a298536734535b4cfa19f06963c97b664a1ae175ce85cfbfab8158a5091c4330420b127fd98f44a60d13b8bfca6a846d385c4dff518164d0bd8e23dbda937dd65f567e68f952e891b646c00cac67dd09d6448a8334d0000000"], 0xf4}}, 0x40880) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000100)='*,,\'.::*[\x89//)\x00') ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1018}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000140)) 01:03:10 executing program 4: syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x4e000) 01:03:10 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x803d0, 0x1) [ 571.323674] Bluetooth: hci2 command 0x0401 tx timeout [ 571.482129] Bluetooth: hci4 command 0x0401 tx timeout 01:03:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 01:03:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) 01:03:11 executing program 4: syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x0) 01:03:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:11 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000140)={@none, 0x6b, 0x446, 0x9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x40, 0x140) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0x0, 0x3}, 0x6) 01:03:11 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x803d0, 0x1) 01:03:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x8, 0x4) 01:03:11 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x803d0, 0x1) 01:03:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000005c0)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x1f}}, 0x10) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:11 executing program 4: syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x0) 01:03:11 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:03:11 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:11 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:03:11 executing program 4: syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x0, 0x0) 01:03:11 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f00000000c0)="8f1f7ba88f3c9924db927df3322346c7339e3749a5433b2d5b8a45716ddd9d9e7d35f8f7c3ba34147949af7ae5b8ea6022b4cf19da173a8b1a79031b0ea5a1888dbc67f7b5") setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) 01:03:11 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x803d0, 0x1) 01:03:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000005c0)={0xa, 0x4}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r2}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r3}}, 0x128) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0xfda}, r3}}, 0x30) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 01:03:11 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x803d0, 0x1) 01:03:12 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:12 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@dellink={0x64, 0x11, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10003}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_TXQLEN={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x49}, @IFLA_MASTER={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_MTU={0x8, 0x4, 0x200}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x8a88}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000006d206d740caafa27c714f7b02ae1daa8696d8e12a3ade22bfe7158656452dee81c654c094c46132611c7f32c16a2cc7a9995c5c74fff541850735764175", @ANYRES32, @ANYRES32=r1], 0x58}, 0x1, 0x0, 0x0, 0x2404c040}, 0x80) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x9) bind$bt_hci(r1, &(0x7f0000000300)={0x1f, 0x0, 0x4}, 0x6) 01:03:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x7f, "79e7ab", 0xfc, 0x3}) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r1) 01:03:12 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x803d0, 0x1) [ 573.412174] Bluetooth: hci2 command 0x0401 tx timeout [ 573.562115] Bluetooth: hci4 command 0x0401 tx timeout 01:03:12 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x80}, 0x6) 01:03:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x28, 0x80006, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/220, 0xdc}, 0x60) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:12 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:03:12 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x803d0, 0x1) 01:03:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:03:12 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:03:12 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x803d0, 0x1) 01:03:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:03:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@none, 0x81}) 01:03:12 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x803d0, 0x1) 01:03:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2f0, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4f}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x72}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @remote, 0x7ff}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1f, @local, 0x80000000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x38, @private0, 0xfffffffe}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1d, 0x3, "11cd8661cae1af177458564eeaa9ff7f11f3f0f8ceb130e130"}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "5466594468e0e150764770ad8138d803edf57529ac2f6d03c926d8b199acd73c7876e637cf3a23141df5c51a9d97ad448076c987bbf7426427c47c4c557c0e50af617d2b78f1"}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b6243fcee949b92360a5f6e920f998e87b2957aa"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "5accddf5b9478006514abec63bbc00ab36ef355886"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x48001}, 0x4811) 01:03:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 01:03:12 executing program 3: r0 = fork() ptrace$getenv(0x4201, r0, 0xe49e, &(0x7f0000000000)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x803d0, 0x1) 01:03:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000380)=""/87, 0x57}], 0x4, &(0x7f0000000400)=""/244, 0xf4}, 0x10000) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000540)="4a8fa0a8f218d4f7c8b8e66f0b1fcfdd84") 01:03:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:13 executing program 3: fork() r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x803d0, 0x1) 01:03:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:03:13 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:03:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x3, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000000214100028bd7000fcdbdf2508000100000000000900020073797a3000000000080001000000000008004400", @ANYRES32, @ANYBLOB="0900020073797a31000000000900020073797a30000000000800010002000000b5b4a3b2d98673d66f2ab6f075cb73b975cb51783daadd2a2e66232a88eda12b27059e491c4593b783cb74a5d806d232ecdf2aa7315470c4fc7a045625cc0f7574e60bfec4242703a46c35c656adf1c6dd175e44cb517020980cdce569b03ce1c286a206a3a62f5dea76f7fb06db2e7caa155cd3fdcda6fe09d2c307ac1873ac6ecfdc1c2078a12d9ab2acefd7dc56d5740e35d4b0cdbe9fde3c3a273394bc3fd7543e656642231fdb5903b6c1bf42fcfc56cc92d37d238d7af5f6801edb4434b98fbee8169224efd2c468ff9e9709494cb42c52d26d4f7d60"], 0x54}}, 0x80) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfffe, 0x1}, 0x6) 01:03:13 executing program 1: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) 01:03:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x803d0, 0x1) 01:03:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:03:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1ff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x6, 0x8, "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", 0x2, 0x21, 0x2, 0x5, 0x1, 0x6, 0x40, 0xfc}}}, 0x128) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x3, 0x1, {0xa, 0x4e24, 0x10, @ipv4={[], [], @local}, 0xfffffff7}}}, 0x32) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0x4, [0x3]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00', r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000002) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) 01:03:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8001, [0x7d810369, 0x8], 0x8}, 0x10) 01:03:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:03:13 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x803d0, 0x1) 01:03:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x42) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x2, 0x2, 0x0, {0xa, 0x4e24, 0xff, @private2, 0x6}}}, 0x3a) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) [ 575.242120] Bluetooth: hci1 command 0x0401 tx timeout [ 575.482118] Bluetooth: hci2 command 0x0401 tx timeout [ 575.642122] Bluetooth: hci4 command 0x0401 tx timeout 01:03:14 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x803d0, 0x1) 01:03:14 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:03:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @local, 0x10001}}}, 0x3a) 01:03:14 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) 01:03:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x2, 0x1}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:14 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8b, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r0, 0x1c, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xffff, 0x101100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000240)=0x2687, 0x4) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "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", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "136127eb976fdfc69df2372bd85bb6ab165c8b9b90f8a6549a0229f51cbf6ed72e79451771b3461683c518f2009f8cfe22b251df6edb084b871b68b9dca8e07804872fe1cdef2bc25862f12ed9895b7e9672cc91d764a5eb6d12513b70be901fa3aa22e564c22c7c94cc9f51a4c28059ffc358698176138c9ae0863f2bdaa2682cc95bdf289f8ff2f9e2fc791b69e95ca1f16039a53e848a718e215f2ab873d8ea3e3537d55674f8409bf73ae0039cbbc72d84bccbda17bbcee94eb66161bb271741763a400e24038ae393ab6887cb8a6cf7de9e49e4e404a9f485e2588203e82d10c3d9e8d0b3b0a6de58285cd66029933c3862e7bcf8c2dae66a82f956c257", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r4}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "b617e8fcd08122e3bb960cecce973ac7792f64809baf3db6b95bc1f0e9cb788cc0dd211651e4aea64cf2f1d3c881ae3f10a320dad1f98f3c3885d18e6c7047cabd32bd21b8df6701433944e42de7bbc02a53980b5f037c326d0aca1995d57dc1104c4b4a908320cd85b2da3c63f8182a2deb606b95a0bee887a1597e3d6a92abf6ece690c54763174867b08b96a32a5929b109ebd4ee3e7cfe74818b71c94f98cf480910c2de97437555e68b4fd93c70f642f7913b3e6070b64ba93cfd46b938b0c37661ab9e16c00a86e0b438ffbc86f62c9a639f15a9cc35eccdbee08428e96c4158729b89a532c4ec33f6b19688d69fb29bb7dd2ec65a4e2ae2fff241e3c7", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r4}}, 0x128) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000740), r4, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r3}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x81, @loopback, 0x800}, {0xa, 0x4e21, 0x0, @empty, 0x7ff}, r3, 0x7}}, 0x48) 01:03:14 executing program 2: r0 = fork() wait4(r0, 0x0, 0xa0000000, 0x0) waitid(0x2, r0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x4000) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x6, [0xfffff000, 0x4], 0xcd}, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="831a1df6b4c687740000004f9c7f77d88f50b278a0687c5d945d116d7b88020e00005b35824c0530d8d824474a768996d4505e4ff08fa7732f49e4981dedb070347ee26a7ca84f9769a99e54845d21c9110473af520379a4b12a719c04dd1a172c58efe9a8a954055a2d8680a2256482193b7a44b06d1707775271391e37102f4766d9185c53986e6fd5519cee0b95aac08551eab71ac7", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf250f0000001c0003800800030006000000080003000600000008000300040000002800058008000100756470001c00028008000200010000000800030005000000080002000000447b1c000980080002000100000008000100020000000800020004000000"], 0x74}}, 0x44004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{@fixed}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, 0x1}, 0xffffffffffffffc7) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x845}, 0x8000) 01:03:14 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) 01:03:14 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x803d0, 0x1) 01:03:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x1}, 0x6) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x2}, 0x10) 01:03:14 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x0, 0x1) 01:03:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:15 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) 01:03:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe8, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004090) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20000840) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r2, 0x400448dc, 0x0) 01:03:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fork() wait4(r1, 0x0, 0xa0000000, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008800}, 0x4800) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = eventfd2(0x4, 0x80001) read$eventfd(r3, &(0x7f00000000c0), 0x8) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x6000, &(0x7f0000000000), 0x2, r3, 0x2}) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:15 executing program 3: r0 = fork() wait4(r0, 0x0, 0xa0000000, 0x0) waitid(0x2, r0, &(0x7f00000004c0), 0x0, &(0x7f0000000540)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}}, 0x4000) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x6, [0xfffff000, 0x4], 0xcd}, 0x10) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="831a1df6b4c687740000004f9c7f77d88f50b278a0687c5d945d116d7b88020e00005b35824c0530d8d824474a768996d4505e4ff08fa7732f49e4981dedb070347ee26a7ca84f9769a99e54845d21c9110473af520379a4b12a719c04dd1a172c58efe9a8a954055a2d8680a2256482193b7a44b06d1707775271391e37102f4766d9185c53986e6fd5519cee0b95aac08551eab71ac7", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fcdbdf250f0000001c0003800800030006000000080003000600000008000300040000002800058008000100756470001c00028008000200010000000800030005000000080002000000447b1c000980080002000100000008000100020000000800020004000000"], 0x74}}, 0x44004) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000000640)={0x1, &(0x7f0000000600)=[{@fixed}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x4, 0x1}, 0xffffffffffffffc7) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x200, 0x70bd2b, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x845}, 0x8000) 01:03:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:15 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0xa00) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x8, @local, 0x10001}}}, 0x3a) 01:03:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8001, [0x7d810369, 0x8], 0x8}, 0x10) 01:03:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x3, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 01:03:15 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x200, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) 01:03:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 01:03:15 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:15 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:15 executing program 2: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x401, "0cf41c", 0x3f, 0x1}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x453, 0x0, 0x0, 0x0, 'X'}, 0x14}}, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x200, 0x70bd27, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) [ 576.886121] audit: type=1107 audit(1617411795.746:308): pid=16432 uid=0 auid=4294967295 ses=4294967295 msg='X' [ 576.919375] audit: type=1107 audit(1617411795.776:309): pid=16432 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:03:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8001, [0x7d810369, 0x8], 0x8}, 0x10) 01:03:15 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0xffffffff}) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:15 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:15 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) [ 576.990302] audit: type=1107 audit(1617411795.846:310): pid=16452 uid=0 auid=4294967295 ses=4294967295 msg='X' 01:03:15 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000000240)}], 0x5, &(0x7f0000000340)=""/63, 0x3f}, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x3, 0x10100) read$eventfd(r1, &(0x7f0000000240), 0x8) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, 0x0) [ 577.322130] Bluetooth: hci1 command 0x0401 tx timeout [ 577.562098] Bluetooth: hci2 command 0x0401 tx timeout 01:03:16 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)=@newnexthop={0x18}, 0x18}}, 0x4008040) r2 = fork() sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)=@bridge_dellink={0x144, 0x11, 0x10, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}, @IFLA_PORT_SELF={0x3c, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x10001}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "0151a55f80d453c899424c781bdbd279"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d4058becd68805d386cf8850ff4167c9"}]}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'wg1\x00'}, {0x14, 0x35, 'netpci0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'team_slave_0\x00'}, {0x14, 0x35, 'bridge_slave_0\x00'}]}, @IFLA_MAP={0x24, 0xe, {0x8a3, 0x9, 0x1, 0x9be, 0x9, 0x7}}, @IFLA_WEIGHT={0x8}, @IFLA_PHYS_SWITCH_ID={0x23, 0x24, "13b45b9e5125d22cad206c1a3cd21da2beaa94f1d25efd8d2cb28e6d9a8af4"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) socketpair(0xf, 0x3, 0xb90, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xb4, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xb1ceb829}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xfa}, {0x6, 0x11, 0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000081}, 0x4000054) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) ioctl$NS_GET_NSTYPE(r6, 0xb703, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x1, {0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, [], 0x1e}, 0xdfe}, r5}}, 0x38) 01:03:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8001, [0x7d810369, 0x8], 0x8}, 0x10) 01:03:16 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) [ 577.722140] Bluetooth: hci4 command 0x0401 tx timeout 01:03:16 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x83bce015f6aa07f1, 0x0, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8884) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) socket$inet6(0xa, 0x3, 0x4) 01:03:16 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r1, @ANYBLOB="00012dbd7000fcdbdf254500000008000011000200303030303a30303a31302e300000000008008e0002000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000000000080001007063690011000200303030303a30303a31302e300000000008008e0000080001007063690011000200303030303a30303a31302e300000000008008e00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0002010000"], 0xf0}, 0x1, 0x0, 0x0, 0x4004010}, 0x20004001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:16 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:16 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="03d4e072cfad7dec7c923596fd48482a98c44787cb116551acd6f9d4a7152e7f78691525b984a5ddf960e36ec5b5bb3ff0675ba7eb81d5951a129af4a8795649bcf351011f5ced56145b3329317469db4041f70153f2272ff04197d3bd5e01ff5c578cc3e280394eb09ad6ff7c6032b08960b31f2efff17f0038162ac7a00b6b893857e087a5e7408b35a2ed5d5e830d9fdcb41919bd89efc55ba3a3c10080f9492bada2968b01b8aa6353de32262112dd2dcb1274dc856addba18e4f628664bea63e2b4f7e805c208138e0efa499a36ad7ac66f83339da7332e59a4efea9d959aab55f4f4d10a1b29668c4ac5ad3ab0a433d88cb470d50ad1d3b5ed4b46609acc1cbd19444290daa975304ef64c48df8621481dd4900e546013f88c6cea5b6a573f67d76da879f42f8081"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 01:03:16 executing program 5: syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00', 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) 01:03:16 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 01:03:16 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffe, 0x4800) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x2, [], 0x7}, 0x10) 01:03:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0xfffffffffffffcec) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast2, @remote}, &(0x7f0000000340)=0xc) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4081000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, 0x12, 0x2, 0x70bd2a, 0x25dfdbfe, {0x28, 0x0, 0xf7, 0x9, {0x4e20, 0x4e20, [0x1dc, 0x3f, 0x7, 0x6], [0x1f, 0x7f, 0x5, 0xffff0000], r2, [0x3, 0x6]}, 0x7ff, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "c44fae992366e026fcf2291d3c47c603d169c2571bf2"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "44246a53261e8b"}]}, 0x74}}, 0x40) bind$bt_hci(r1, &(0x7f0000000280), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x0, 0x2}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x87a, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) eventfd2(0x8000, 0x40001) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='cachefiles_wait_active\x00', r4}, 0x10) 01:03:16 executing program 5: syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x4400) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:16 executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:03:16 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @empty}, &(0x7f0000000040)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:16 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="b29a7b1a3db1ee2082afb44c1e73f33da4936dff050a12bfff85b359f602e9d651871e499ae08ae9") socket$inet(0x2, 0x1, 0x7) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x0, {0x285d0000, 0x72, "136127eb976fdfc69df2372bd85bb6ab165c8b9b90f8a6549a0229f51cbf6ed72e79451771b3461683c518f2009f8cfe22b251df6edb084b871b68b9dca8e07804872fe1cdef2bc25862f12ed9895b7e9672cc91d764a5eb6d12513b70be901fa3aa22e564c22c7c94cc9f51a4c28059ffc358698176138c9ae0863f2bdaa2682cc95bdf289f8ff2f9e2fc791b69e95ca1f16039a53e848a718e215f2ab873d8ea3e3537d55674f8409bf73ae0039cbbc72d84bccbda17bbcee94eb66161bb271741763a400e24038ae393ab6887cb8a6cf7de9e49e4e404a9f485e2588203e82d10c3d9e8d0b3b0a6de58285cd66029933c3862e7bcf8c2dae66a82f956c257", 0x20, 0x2, 0x0, 0xf8, 0xa2, 0x7, 0x7, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0xfff, "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", 0x1f, 0x69, 0x0, 0x20, 0x3f, 0x20, 0xe3}, r3}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100), r3, 0x0, 0x1, 0x4}}, 0x20) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000400214000166f06600000000000000000000f92a8e86"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0x0, 0x2}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd4a, 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000040)={0x1, [0x1543bafa, 0x4], 0xfd7}, 0x10) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000240)={0x2, 0x1, "4382f6", 0x9, 0x8}) 01:03:16 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000280), 0x6) socketpair(0x11, 0x800, 0x7fff, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00', r1) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x9}, 0x6) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x101000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f00000b76ff2f272cfbdeb78544683e8220725af7163215e50f70f88b109b9e7a82d024eaefc06e50a8c00"/56, @ANYRES32=r3, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x40000005}, 0x0) 01:03:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) 01:03:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:17 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:17 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xfffe}, 0x6) socketpair(0x27, 0xa, 0x8000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0x4, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:17 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:17 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x2c}}, 0x200440d0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 01:03:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) bind$bt_hci(r0, &(0x7f0000000280), 0x6) 01:03:17 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0xfffffe01, [0x10001, 0x80000001], 0x6}, 0x10) 01:03:17 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 0: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:17 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000100)=""/222, 0xde}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/199, 0xc7}, {&(0x7f0000000480)=""/142, 0x8e}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f0000000640)=""/185, 0xb9}, {&(0x7f0000000700)=""/255, 0xff}], 0xa}, 0x20) bind$bt_hci(r1, &(0x7f0000000300), 0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000005c80)={0x2, 0x80, "8ebad0", 0x7f, 0x4}) socket$inet(0x2, 0x6, 0x212) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 01:03:17 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:17 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x80) 01:03:17 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000)='nl802154\x00', r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) 01:03:17 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6e443591d63be6c40ef28150d88ec9a1860f97e0798869c97f39f736d87650c2dbb1f729855a888c22f64d18a421c19d97a43ba2a3adaa74eeefa09518ed1c2481d3972949e53a9a14f3670138a121656d9d0fbeed9") 01:03:17 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x1403}, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x18, 0x4) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x0, 0x7, 0xac, 0x887, 0xffffffffffffffff, 0x7ff, [], 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x40) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e2, &(0x7f0000000000)="3262de23732f8641fbe37226ee995cbd4e7e40207d981ce2b45a02b91be142272475c955d38c7c3ca444e6577a24edf579f9b95a320788b880d63ad2bbb08806b7994492fb0cf987f24fac0e2e56b40ab68bc3") 01:03:18 executing program 3: socket$inet(0x2, 0x1, 0x80) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 01:03:18 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c8, r0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe03b}, {0x6, 0x11, 0x9}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80}, {0x6, 0x11, 0xff7f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfffa}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x8}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xc54e}, {0x6, 0x11, 0x1ff}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc001}, 0x4c800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) 01:03:18 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 01:03:18 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'geneve1\x00'}) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000000c0)={r2, 0x40}) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x7d}, 0x6) 01:03:18 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) 01:03:18 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 01:03:18 executing program 4: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x8) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 3: socket$inet(0x2, 0x0, 0x80) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x800, 0x4) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0xfffe, 0x3}, 0xffffffffffffff7e) 01:03:18 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 01:03:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf4, 0x200080) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0f70000", @ANYRES16=0x0, @ANYBLOB="000827bd7000000027000f000000080001007063690011000200303030303a30303a31302e300000000008000b000900000006001100060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b009d00000006001100000800000e0001006e657464657673696d0000000f73697f30000008000b00a9b10000060011000200"/154], 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) socketpair(0x8, 0x0, 0xfff, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 01:03:18 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 01:03:18 executing program 3: socket$inet(0x2, 0x0, 0x80) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x3}, 0x6) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 01:03:18 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x4, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x40bb, 0x3], 0x9}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="70bb503c25a7cdd2dcd700000000ddc642246fcae418ff7538bdd4f717a80fcdb54a1887fdd2ceb4cd71966e5134f23c0cbf27d3a08e006266e2da12cf773e647692a6c1d1868ce1860dc8ac0a9c5f5bc9eb80054478a89d126ac8926ffeebad05dc41f3852a50293bd9daf9b5f1fd881b84b3d1e5791d7b0be5422953f998ed20b6cbf839cc50264f0014674fa79b08ea1c487dd38d886ea2187e0cffbe650c2e0eae0090f1c7eb079564ab83629d73541b23d1d787ae21991956ba12f3b4170075e7c3d442716ecb25cf494af6ea97ab30ce604bd053b09274a120c100669d7b43be29df8dc9dcf175601928582d92691b845ed886d3450c5d4ff8a1ef0bda2a88379ca30ddae67e5e9d0911b3809c7e8ab052374f351e2ab699f888184b04f97736d64e56ef39df5502fc2fcbf487af81ce0f100dd195b1a838522bdfde28d20d57510cd9a4ad27fec277f42a2e991e2ded43ae7a8ce121960fc7c93a41810257508ab2e02aff56bcd280a0c63548056fb782254ff24a5057c6bdebee7adee151509c5be8c13878bfebd2913de06eccf24abdd85c4f584c0e114fabdc3e99e47b00d85c259b914d78920c5f7f6c29f2716b2d3ba59d8a8f43ec43f11b7e7a38bb9c912824ee924d185ef4b530fc5d84be0f076cb04aa15d6eba999889cd7946c008327840fe2c9ef87104b30a459238855b8b1c5edb32262e01c90fecd3cd057874f6c59f837a2ed6f2c405c2e3efbb", @ANYRES16=0x0, @ANYBLOB="080011bd7000fddbdf25000000000600020001000000060001000400000005000d000100000006000e002000000008000c000000000005000400090000000c001000abf60000edff0000060676000400000047e41d9c0200000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000c5}, 0xc009) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@private, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@private1}}, &(0x7f0000000080)=0xe8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) [ 579.642226] Bluetooth: hci2 command 0x0401 tx timeout 01:03:18 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r1) 01:03:18 executing program 3: socket$inet(0x2, 0x0, 0x80) 01:03:18 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433bc9827cdeb0366c0e2a95ea9aa5567da5620e14930605af6117dc34e80a00884afb106b4dfff2e58fcea6") 01:03:18 executing program 4: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, &(0x7f0000000200)=0xc) 01:03:18 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) 01:03:18 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x4, 0x1}, 0xfffffffffffffe08) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @dev}, &(0x7f0000000140)=0xc) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) 01:03:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 01:03:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r1) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 01:03:18 executing program 3: socket$inet(0x2, 0x1, 0x0) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x1ff, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000180)=""/78, 0x4e}, 0x121) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000003c0)={0x3, [], 0x3f}, 0x10) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x1f, 0x30000], 0x1}, 0x10) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r5 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) write$tcp_mem(r5, &(0x7f0000000080)={0x0, 0x20, 0x5, 0x20, 0x1ff}, 0x48) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:18 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x4, 0x1}, 0xfffffffffffffe08) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080)=0x5, 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @dev}, &(0x7f0000000140)=0xc) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000)) 01:03:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000200)) 01:03:18 executing program 3: socket$inet(0x2, 0x1, 0x0) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d5f8d3c4cd75aae87878885fbb6c6e5993831a26ab52ed2714a0e1b03e1f01c25d9d00d0b5b8d9679433b") 01:03:18 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x1000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xfffc, 0x3}, 0x6) 01:03:18 executing program 0: socket$inet(0x2, 0x1, 0x0) 01:03:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:18 executing program 3: socket$inet(0x2, 0x1, 0x0) 01:03:18 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) socketpair(0x226bba5d745b1e7c, 0x13, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 01:03:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) 01:03:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d") 01:03:18 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 0: socket$inet(0x2, 0x1, 0x0) 01:03:19 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x8, 0x3, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b00)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7f}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9af7}, {0x6, 0x11, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280), 0x6) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0x80, 0x4}, 0x6) 01:03:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x5, 0x4) 01:03:19 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 0: socket$inet(0x2, 0x1, 0x0) 01:03:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:19 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:03:19 executing program 0: socket$inet(0x2, 0x0, 0x0) 01:03:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:19 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="8d") 01:03:19 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x800) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x4, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r1, 0x400448dc, 0x0) 01:03:19 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = eventfd2(0x4, 0x80001) read$eventfd(r1, &(0x7f00000000c0), 0x8) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r1, 0x80, 0x4}) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x400, "e14598", 0x1, 0xfa}) 01:03:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:19 executing program 0: socket$inet(0x2, 0x0, 0x0) 01:03:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:19 executing program 3: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 01:03:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 01:03:19 executing program 0: socket$inet(0x2, 0x0, 0x0) 01:03:19 executing program 3: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x4], 0x5}, 0x10) 01:03:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:20 executing program 1: sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x2, [0xb87a, 0x3], 0x3}, 0x10) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 01:03:20 executing program 3: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300)={0x1f, 0x3}, 0x6) 01:03:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 01:03:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x200000) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf4, 0x200080) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0f70000", @ANYRES16=0x0, @ANYBLOB="000827bd7000000027000f000000080001007063690011000200303030303a30303a31302e300000000008000b000900000006001100060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b009d00000006001100000800000e0001006e657464657673696d0000000f73697f30000008000b00a9b10000060011000200"/154], 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) socketpair(0x8, 0x0, 0xfff, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 01:03:20 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = fork() wait4(r1, &(0x7f0000000000), 0x80000000, &(0x7f0000000040)) 01:03:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) 01:03:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf4, 0x200080) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0f70000", @ANYRES16=0x0, @ANYBLOB="000827bd7000000027000f000000080001007063690011000200303030303a30303a31302e300000000008000b000900000006001100060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b009d00000006001100000800000e0001006e657464657673696d0000000f73697f30000008000b00a9b10000060011000200"/154], 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) socketpair(0x8, 0x0, 0xfff, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 01:03:20 executing program 3: socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @empty}, 0x0) 01:03:20 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, 0x0) 01:03:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xcc, &(0x7f0000000000)="0c2c82ff98cbd7c8d4caa7e29018ad8d15b488b7b39c1b7d1171c7afc1fe63119f78ae5a9d2681f8c03c442b7be9cbdc7a5d3a6e95db7f1fdc8d47c177229978ac0a4d173e7b1f855e230eb125cc6d0e6eac92206e91096e2c35999c5711cee72a71251516749dba96b712fd3f720afc10b7d9a0a1f6bec180ab76ae10cd6c740d76e2a64654189c47884add7de164f334bd2cb1219db5e01bd079b96266aa887b8c4c8a2064f10e18b6d380eb87870e1939f905589bda9604eeebcad42e0800000000000000dde598e3fee7249b6a0e3205", 0xd2) 01:03:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) 01:03:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) 01:03:20 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x18, 0xd8442) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xffffff82, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280), 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f00000000c0)=0xa7, 0x8) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) 01:03:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003380)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000000100)=""/4090, 0x1000}, {&(0x7f00000011c0)=""/6, 0x1}, {&(0x7f0000001100)=""/141, 0x91}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/248, 0xfffffffffffffd93}, {&(0x7f00000043c0)=""/4110, 0x1000}], 0x6, &(0x7f0000003340)=""/44, 0x2c}, 0x1) ioctl$sock_bt_hci(r1, 0x400448e6, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000001300)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000001200)="8797b17cb9e76525fe218ede61f66c236be2eae1eb8aced4f0637d4202c92ba9cabcb2146471c677e4367c1f83e446b752c368ab367bbbd56d1cf85efbc006c9f75d4c4336a6fc4d7bfccd9fa29019b0af431e22704d96107f1b66f2d52316bd993f52606e8bc5ff389ff7ae850912789b8e8c5bfa910dff245fc617460910ba336806c6be6486d836216419b33e33389f82ce3642bdb263df5f8d64b1490d5762629e136aa3efc70abf41e962e8633b8f954a4fa8306bc88b10ed3d1c68e61e9ca78d940a1e219781e0b2446aa03c1c3b32f981c45268cfceb554b3786a1140b4015aa181b1a06d935d0912ded46b70c98e78fdb2") r2 = syz_open_dev$audion(&(0x7f0000001340)='/dev/audio#\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000013c0)='gtp\x00', r1) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000c0}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x3c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 01:03:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf4, 0x200080) ioctl$sock_bt_hci(r1, 0x400448dd, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0xc4}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0f70000", @ANYRES16=0x0, @ANYBLOB="000827bd7000000027000f000000080001007063690011000200303030303a30303a31302e300000000008000b000900000006001100060000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b009d00000006001100000800000e0001006e657464657673696d0000000f73697f30000008000b00a9b10000060011000200"/154], 0xa0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) socketpair(0x8, 0x0, 0xfff, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) 01:03:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getnetconf={0x1c, 0x52, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NETCONFA_RP_FILTER={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x80000001, 0x4) bind$bt_hci(r0, &(0x7f0000000300), 0xfffffda2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000)=0x7, 0x8) [ 608.272083] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.2:16891] [ 608.280011] Modules linked in: [ 608.283192] irq event stamp: 12496 [ 608.286722] hardirqs last enabled at (12495): [] restore_regs_and_return_to_kernel+0x0/0x2a [ 608.296865] hardirqs last disabled at (12496): [] apic_timer_interrupt+0x8e/0xa0 [ 608.305954] softirqs last enabled at (7150): [] __do_softirq+0x68b/0x9ff [ 608.314881] softirqs last disabled at (6471): [] irq_exit+0x193/0x240 [ 608.323703] CPU: 0 PID: 16891 Comm: syz-executor.2 Not tainted 4.14.228-syzkaller #0 [ 608.331657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.341015] task: ffff88809c07c100 task.stack: ffff88803e910000 [ 608.347091] RIP: 0010:queued_write_lock_slowpath+0xd0/0x1d0 [ 608.352800] RSP: 0018:ffff88803e917d10 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 608.360501] RAX: 0000000000000000 RBX: ffffffff89dd42a8 RCX: 00000000000011bd [ 608.367868] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd42a8 [ 608.375139] RBP: ffffffff89dd42ac R08: ffffffff8b9968a8 R09: 0000000000040597 [ 608.382409] R10: ffff88809c07c9d8 R11: ffff88809c07c100 R12: 0000000000000003 [ 608.389664] R13: fffffbfff13ba855 R14: 00000000000000ff R15: ffff8880aa3a9a50 [ 608.396932] FS: 0000000001c13400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 608.405155] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.411020] CR2: 00000000004e4a64 CR3: 00000000ab04f000 CR4: 00000000001406f0 [ 608.418537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.425797] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.433062] Call Trace: [ 608.435637] do_raw_write_lock+0xc2/0x1d0 [ 608.439777] bt_sock_unlink+0x1d/0x170 [ 608.443654] hci_sock_release+0xc1/0x4c0 [ 608.447697] __sock_release+0xcd/0x2b0 [ 608.451572] ? __sock_release+0x2b0/0x2b0 [ 608.456311] sock_close+0x15/0x20 [ 608.459758] __fput+0x25f/0x7a0 [ 608.463022] task_work_run+0x11f/0x190 [ 608.466894] exit_to_usermode_loop+0x1ad/0x200 [ 608.472418] do_syscall_64+0x4a3/0x640 [ 608.476316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 608.481488] RIP: 0033:0x41926b [ 608.484659] RSP: 002b:00007ffc65e9daf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 608.492482] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000041926b [ 608.499879] RDX: 0000000000570678 RSI: 0000000000000081 RDI: 0000000000000004 [ 608.507141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.514401] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000570678 [ 608.521851] R13: 00007ffc65e9dc10 R14: 000000000056bf60 R15: 000000000008df99 [ 608.529727] Code: 49 89 dc 41 be ff 00 00 00 49 c1 ed 03 41 83 e4 07 48 b8 00 00 00 00 00 fc ff df 49 01 c5 41 83 c4 03 eb 02 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 9e 00 00 00 8b 03 83 f8 01 75 e5 f0 [ 608.550079] Sending NMI from CPU 0 to CPUs 1: [ 608.554645] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff87223bce [ 608.555583] Kernel panic - not syncing: softlockup: hung tasks [ 608.567916] CPU: 0 PID: 16891 Comm: syz-executor.2 Tainted: G L 4.14.228-syzkaller #0 [ 608.577009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.586492] Call Trace: [ 608.589107] [ 608.591250] dump_stack+0x1b2/0x281 [ 608.594864] panic+0x1f9/0x42d [ 608.598048] ? add_taint.cold+0x16/0x16 [ 608.602010] ? printk_safe_flush+0xa9/0x110 [ 608.606330] watchdog_timer_fn.cold+0x16/0x25 [ 608.610824] __hrtimer_run_queues+0x30b/0xc80 [ 608.615392] ? watchdog+0x50/0x50 [ 608.618850] ? retrigger_next_event+0x310/0x310 [ 608.623695] ? ktime_get_update_offsets_now+0x272/0x3f0 [ 608.629063] hrtimer_interrupt+0x1e6/0x5e0 [ 608.633319] smp_apic_timer_interrupt+0x117/0x5e0 [ 608.638270] apic_timer_interrupt+0x93/0xa0 [ 608.642585] [ 608.644817] RIP: 0010:queued_write_lock_slowpath+0xd0/0x1d0 [ 608.652775] RSP: 0018:ffff88803e917d10 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 608.660472] RAX: 0000000000000000 RBX: ffffffff89dd42a8 RCX: 00000000000011bd [ 608.667752] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd42a8 [ 608.675032] RBP: ffffffff89dd42ac R08: ffffffff8b9968a8 R09: 0000000000040597 [ 608.682313] R10: ffff88809c07c9d8 R11: ffff88809c07c100 R12: 0000000000000003 [ 608.689608] R13: fffffbfff13ba855 R14: 00000000000000ff R15: ffff8880aa3a9a50 [ 608.696886] do_raw_write_lock+0xc2/0x1d0 [ 608.701153] bt_sock_unlink+0x1d/0x170 [ 608.705165] hci_sock_release+0xc1/0x4c0 [ 608.709215] __sock_release+0xcd/0x2b0 [ 608.713105] ? __sock_release+0x2b0/0x2b0 [ 608.717235] sock_close+0x15/0x20 [ 608.720688] __fput+0x25f/0x7a0 [ 608.723956] task_work_run+0x11f/0x190 [ 608.727829] exit_to_usermode_loop+0x1ad/0x200 [ 608.732416] do_syscall_64+0x4a3/0x640 [ 608.736292] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 608.741490] RIP: 0033:0x41926b [ 608.744675] RSP: 002b:00007ffc65e9daf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 608.752478] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000041926b [ 608.759740] RDX: 0000000000570678 RSI: 0000000000000081 RDI: 0000000000000004 [ 608.767271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 608.774689] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000570678 [ 608.782397] R13: 00007ffc65e9dc10 R14: 000000000056bf60 R15: 000000000008df99 [ 608.790367] Kernel Offset: disabled [ 608.794069] Rebooting in 86400 seconds..