0x2, &(0x7f0000000080)={0x9, [0x9, 0x8], 0x9}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x23000000, 0x4}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x24, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x9, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001440)='GPL\x00', 0x6, 0xd8, &(0x7f0000001480)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "4644d197ca56682ba1475e6fe041b7772b3c1901d22f6648f00bfd938d1530b57f0f06434f5b10625b72733075feb6a95cf2c2e69e5e584e63fcbbd0919d241c6a3460243d346e8a4e9053a82206604f461a75a538d21a96dfacf5fc42218b3e2f9e982c95141a151b9a2f024dc26d8099ec9409c1e868b3883b2110be74825593bf249a1e64a1f54c125c98dd9ed7c5a8a76ee714448f8c11277a14e504836f79d6a06dcfb154be98090cc4bda9e1ee6117ffa85c7c37914a656dc0228615938795daabca93ba2c8108b6450d740f53f5aceb2ecb11c5b478c8fda128725aff27fb5ba48a447388036ab1388dc05745"}}}, 0xf5) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r1, 0xfffffff8}) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="ed2100fe0400000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x1f, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r1, 0xfffffff8}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="ed2100fe0400000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x1f, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x25, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xd5b1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xd5b1, 0x4) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x80010000, 0x4}, 0x48) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x9, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001440)='GPL\x00', 0x6, 0xd8, &(0x7f0000001480)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "4644d197ca56682ba1475e6fe041b7772b3c1901d22f6648f00bfd938d1530b57f0f06434f5b10625b72733075feb6a95cf2c2e69e5e584e63fcbbd0919d241c6a3460243d346e8a4e9053a82206604f461a75a538d21a96dfacf5fc42218b3e2f9e982c95141a151b9a2f024dc26d8099ec9409c1e868b3883b2110be74825593bf249a1e64a1f54c125c98dd9ed7c5a8a76ee714448f8c11277a14e504836f79d6a06dcfb154be98090cc4bda9e1ee6117ffa85c7c37914a656dc0228615938795daabca93ba2c8108b6450d740f53f5aceb2ecb11c5b478c8fda128725aff27fb5ba48a447388036ab1388dc05745"}}}, 0xf5) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x26, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000016c0)={0x740, 0x0, 0x1, 0x1ff, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c96}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa02}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="60aa4d2f4044ee3dea860ca73b7dd774f6313c1f289570fbdfcecc25a86c836d61d616e58b22b1797f59db4563d479cc5695bd2e4a4a7e96a18e5afd6b3398f57792d62947bb1e8374f823643f24e83e86bdc9864858826d18075674d19d454285fae93473be1006ef9a8f4ce0538125507319b424445254639128644d", 0x7d, 0x800, &(0x7f0000000140)={0x11, 0xf8, r0, 0x1, 0x3f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x1d, 0xa, 0x8) recvfrom$packet(r7, &(0x7f0000001380)=""/29, 0x1d, 0x40, &(0x7f00000013c0)={0x11, 0x5, r0, 0x1, 0x20, 0x6, @local}, 0x14) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x600401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000010000000000000070008475a3c07fa8eedbdf25080001000100008b93878e26bdf808aef97de504bfb90008000102000000cb86ec6ae2d6b2bd78fa33020000000800010001000000090002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32, @ANYBLOB="00010000617c592897ee27bda106269d9e2f1af5050000ac332000001222644e", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x4, 0x0, 0x8, 0x7f, 0x5a1f, 0x4}, 0x1c) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="26736d5dd977aaa7e61a7de8f02b48bcc0bc59bba6ea0e6fb89199241fea54aafc76efb63ef37bfc6ff9bea66bced0e2af19d8ad2a061aaabf2343c53da6cb6a39860754a3e42b50b5215f51b08d42f6d8ff571715bb7c8682284f191e02efe1e7f7c0d4f2c75a62d2dc109fd105c49ca6c9e4550bf27c2422fa1e337eb5ecb3b5c22bce7926dfb2ce276f355c252ee47f878bf95dc9c4cdc3b989df7871bba7f6afcefed88d2850e10fde0009dfae5396426745509b05e1208599039e19cc2fa0a27a9977ee64e9c6fc21605b83a65abca8eefd585c5a03e65914dc49ebcfa81efc21ee1254872ac60a1eb86e65497c8b7119af045b100ade23ffca082351ebcf5b2b428a1f4e8da7fbb9331a9ec254e0c0c6d60f8e7fe5bd04271dbcb4eafbf04e345022ccbab526c8bdb10c9c740b52c6926fc3196fd6976ba40698a5b5da519bb3b3fe7cdc630798740b78026b0cd4b3d7870598e2ef33bd080e9b4b6a8a42ef827d37514d987727314d73976a9727526883421862abf539a83d639b3220eec90c96848fcb05c2a4b3cda6f1fb874e2c27ed1d3251c1c078bcfe1164dd304a763b6186201f9aab4656f93066178111e32461b62b1cf2ce13ae89096f53429cfe4267a5b5186e5ff43c5690c2292ddea15690227dd4bec593836340f9b1f13147382fbc535a9f006686cb99b13996e2175963bcdff62789b72a1d57335166d4d40bc4d0de9fb7e0b7aa44cc78e063aa2e96a4d4a7d81e37dfb59e011bb94710c50b0f5731d0f2795cfffcd8dd25d5dd844ad32f3e1e9685be1117af5a78be87fcc9c365f5a3dbcb56829bf71d7de4fdfe5a84db98114e7a05dcb65ae063927f4111b1ffaf3fc90ab0a6f83ae3082a479caa286846c00529104b5037c741660e1609a777be14d2a4b4e0130b337de23ac777369c9f3a8a280669f174725b340d5681cad2488306e220ca6d8c545bb62fa28e511d03a7a2c2fa5f75fb1f47fe79d2b81729108defcedeb27f8ece0cf90c81534e5a21d93b697e27bb0c7d75dfef096fd0b6022fa2e534c8df886fdd3179bd4096f980211d598a45ff3c55592f46b11532f0e52fd83768b833fd0687e8a83b195c60d6c0c03d79bb485e98a8810624c70d9238909e1b583f1022a87675f0ffc3636cb135b74b8e3849e7a88643d2ff735d27b769e4a0a376807df8d6042fa0abcd1e75ff82fecb218abf49084d3f2941e4a32925b94a3438f7541c3443524517203f7e94fdcd32ce62ad24dff8787beccdf522fbe7cee6c258edacd2942ca085cdc0e694ac3e49ba78b8c10ecf7ded7b75b2780241239c11e2f3df7f2fe8e5de8763b438b6c4ea2e65b9f6de9da5b11fc5a26a9b1ecaf448d30c65b76f51e155fa2f8bbc8229761c151ac0eefbc31818d8de25269cdf1c4bceac0804c40c16f78d0307c3f01ba233da44669f28a7b51ec7b7191bcd64b084766553d66a136b12cb5d0dd7feece5f1c1a3514923e6eba3be1178441fb47ad04c0b87c586225cb5ea8a66f756319ebc8009d39aa7bd282e7fb7c651361dd259d1fa213f685a2c62303c1edef29ccac1cdb3cf5fabd83b657cacbd2ddf3aa810ed03a0adb37bd5cd158b7b485c98ffd339120d6445095d556f520f700e59cd2ea740d2fabc7cc24e1c0c13b880a5e0fd72b2666b5a90f663ebc264c26002c0e4b19636a50cced872560dc4c77d4600526bc25771fe71fa96dd37a27d43676ae36949c120253a50da880b6370c42e16457f9a4eccc5855a89cdb8435e61360a8a274998a329c23a4fb57718af4fa2490dc041083c121b8ee1c9d6870ea610e50fbf2e9f1dceca36063bcb5ebbdec7c4258096ad52503ccb823cdcebfca5dd9e647f8fb04b55a53939fde0ebb4ad9edb35dcc98167b590922d6bedba09dc8afa7e45efe6051464febf2700d8e3aac162d196275351861a705f52156bf7165b54febfd33ab708e6f297c5526c7d6a59f6f16e85ab21b3d743e35f4e1c1a63b5d80ff5e188835444cdc1c12187c6bc9c92161650c616ccbbf01f76d475f758241c617a6b896a9afb3cc48261c1e7c02b234ba4fb9e84e4350fbc1580337d11b27ff7a788f79bc444881ad55bcca04b7536cd908d28b998a1261dd0aa074b3eaaf16e322b6de2f9660b2849b44df09caaf08243e9576820173db0012e7a5ad3ecb32b019fc03825f7f915447d0f3dd3913f4bc8b60d3dc380eafca9a6667d86d20f9732e64d1ca33292c6b1c7986d261cf9b47f407eab0f6dbe121723078893caeaaae2e4cd4673cb871f3173b1aa257fbed4c3ab8e0eadc983c676401ba5475a45d836eafdbe64f12c3bbc5fed6ae3fb4c15a2101c5e9df38ab1a93e978b32e42a42fdf64b3244108c2e6ec645734c01715818c97c30417d724d788872bde48ff66411378f2f71f91e205c94b3689423e6ea1549ca3443d561b8703f8ea121693b114e44a852ffba02254891c890161185b809b4ec3da52299f86de5ccdaf919a4de0d6387e4365bef432ae36388f11fa863209897c873efc9f7eaae76adf25d8fa219798e6336f88993bec6f5f8a1d33f1fee5911bea91f8dd64ce7fb52a53e75a89489d63277135b72080d162bac9c178f3180b213a2febb607ef526f9a430a621fd18e3a76d4abc738930d3572addd8aaebea21e06102ad50f6b88258ba0b8e7e0363c95dd8e3d0be91d4fcf96d0b80c56fe43c4efb30746817a75c92478260cca5525c7104d72d879195f345290e1a060b7e5d00c2d73df81c28d022fe4780b648ffce9095403c9a4d516b1d7e46608c8b65881649e1587035c88bc9c3e822a5be5000d21b356d260bdcbdf9fb175baa96fa665b29439e627365ac2b45ee207b9a9238418172e35b19f4ac89778b2fba2ed37954a0267b65179fdbbcac0d8023ceaa0331c3b0b44b58ac9537d916a8339db8fd739946b59e14f14407aa20cbe6a7e6f4d602323a6332188746c8db0b0535bc436fd39e312b1c0f5855d69d0a4abb9f63ac7aae260414cce5c2a394b3ea0a558004bfabfabea1048aa643de09da49ab2347d75a17f1ce05f555e9f956573410a08cdec2df7a64f85182cc7da2b2abbd00e0808df62630af1582af4036df0d24fe6bdfc2e945ab991d870f14b8fcebd9c4d1cc4af76e6ccdd3f5a1bc1c4362d70e7b5a1806b2db69f6b377c41f97768923ec08761c15cf22326fc410fec5b6dbae9ec5a5e61765a368f0de255a58a0e12caa6bb6720c29b8d8f82db646394417c27abff4bf5ce38cb290186df041f1be02ea4ebe46d7faca076fe092f8956d98de46072469248be74db7a11527f778460afd2d9b6bfe30dc815a1830d9d49b942399f89c2aa748fff3805f6cb91969bda179cbc3e25b0f809849747e002be35267d69c43a510b38b7ad81f3237cc6398b9b7fd483fb88597fc2c7a83fdf7335b6acc67653064d8c9589b935ea1eae10b4318a03a35e8877b23fd1fe40cd4335ed0a3de3bee751c56a9b9b2566134f8f1cc6cb59c3673757ef04864e8bea3e70db926d3799aed26ee258d00303a1fa62b35e65f2ad79887d86264bff8898e7bb2d71e1c7cde34bc2cb579f125dda418124db375f32d78ac58e892fef82c66d7fee2ef81a9af8e35f9dbd640ad6d8f3813a758bafc8e0dad4fa931d678fa7ba67ad44ccba62f7c9f8694cb580238b7e56e6af97c754b740149e149cffcbfbef1dea13441ccfedf63dc08c74839ab7367d4d6a40bdcf7449bf4886b0c8f27e8ece21242a04629fafbea3c4457f5a2ced5e6842b86508ffebc48c253efc866d584610b52fdb2e753a9c99fa74c4569a4dd27326cffa1c8637d5f0f20769f64d7a7247b16b7d26552f8dfd0f99b2a2ec874970a4a510540024102194c4e65406c8978f58b17b05bd877002434266dc2084f0a549180eb6a68f21c430f8757876f2f47b813a93ea43c90d95b2ee162ab354b7b9357ac13a30fe4d2ae65b92705eac8167e2d765e38d812cadff8a6b7f5173f9cd0ae3979181b5c08ef7c935cf0cf66468e0170c0af6a76a40220f5f6107004ca67dcc2e8bbff9fd1f659dc56c8ee92940c309e638cb0176939bf6e295560a01d890debb4d827983cd5367e8f72f08a2a4e9598cb39dbd04e85a1d9fcd018a6efcd6001e71e24c4035a1cd7508a0f67b42d8b4fef751be50a00646917bfde1b8e5f39ee69b117302b23b8d7251a053800c12b092948106271e06f8d30b8cd95499e46da992e74d2902945789b56121adc6ea68ef616f38ebcdb397f8532a404422ff2d45668e06f742c9fb72465f563b9d6bbf6b14f42324ab8d76e2842687a7360584ddf272bb7b3d77a13ee37de931c1e71929a88bf668d8b60bb1b5cfddb958234c9add2ad56021244e0645bdc25f9c2a327d4663f098295f0accd7c97fb9b2ded2c48583742d908c2187f848b23dbe98459a11d782b554be77eb9fae001e0488223cbdc390900fc38b89b8f2d5e820d0bb69a430d21731215e3eb1eab033282089227d8e72a797f5b19d37877927b3b99063063beaa59ceb21f0f07707dd2ada9019b647665c754cf6128d5b0bcbdc2a105ed4814f438f26bf1839981d90fa5cd07006de405ebdcedfeb518a5b0a78b3e8d0394295f0ed4803a1a6a2cf99e07f5f71ef4d33c5110ca01e55ab60610952da5bbaa12a90e1b79e421c8421c9626d55cbf14cca2416b2e76d200e98cf689172bb3311f0b88ad72a441b6ab769e676f77d29dcac17fdad9c6fb87e575d1219ae4248549ad7b3639b2a26caae6798b428f923d585c4d911c47343dacdeb3afd72cd085e9109e08ea24c4b4d007b6329597fcb0014ad9ba040f83a4c3f77f0dbee05ca3ee03e9f8a2efadb3cfc92e314684ceb69f1510f0a572d4bb84f29233f3c941924f8b2d9a75522a437c41fa58fe81c22f0390a0b2ab08e7fd9a048a034c0c8d4b7ce09f86c2f8b68976ce45caad55de14e051c96f70fa647324ac27a43e9841dc3e328a8cb6eacfcdbf957d078c25ac27582cb92aacd0c42ad2e0262a57e56c3adadd3cb579e2c0c37645654a849656d2da3ecdc7f29ffe260143dec12fffa5cf773e82b1f95f2fa095322b3d64b1592703af34cd260dfb54d088e444f6668dc62b869cb8595ff8a08c28a5c4f5f04c05f4beda1aee5d1797d064bd3581f4dfd56fa31424ff45899cb81f3f0cfdb653fc3d9de7181bd85ba248ed2528c5301fbc178fd63a75206b817f5879b3d76bb309faf1162ed8074a8ad8c98cd2591aea0dbf21ab019c73ee6cb6201f80603b2178d52894efb3f4d7b567582a7eb19f9f3a5a58db88306403c7ff7a4d0c2718e8c6557cddd73f5e88e4e8f8db51814898ec365364df525c180f77572e2f3765712806b7b2e6a6896246603ad1170ebc896ad2b2fb6c4abbd834a8a48ed02bf249e39fa1320b16a2b770803308065071df6bc7133038b8763880ff10e8abc8306d89d5621a70afae78d4513cbd69ca684682861284b5074178274d6f8fd93b155a60027d9667b93fb9afa69cbed26ab09a5faf03d953ff0f265ab4668a93914109ac78b10e439bd2457329aea95737b0e87308c54a59bd5d8e0719e654959f98cdea7d9769af0171a851f7517a1498fcf1fcb775284fe07a74f5705254cf62eb5843690db3c848d1b09a4b6acff7ad31c10b8973307f1477a8a7bc1d8bc015ae50a0853412e098b408c6be7f880bed83bcd7ca3f747fc7ed1158ae172921d550fe380247430a5127179d010a8b21f879f7c0b433512738d0cddf885a93cf99d0ec8cfa7364a67431b9723932a8dbdcb9", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x9, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001440)='GPL\x00', 0x6, 0xd8, &(0x7f0000001480)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "4644d197ca56682ba1475e6fe041b7772b3c1901d22f6648f00bfd938d1530b57f0f06434f5b10625b72733075feb6a95cf2c2e69e5e584e63fcbbd0919d241c6a3460243d346e8a4e9053a82206604f461a75a538d21a96dfacf5fc42218b3e2f9e982c95141a151b9a2f024dc26d8099ec9409c1e868b3883b2110be74825593bf249a1e64a1f54c125c98dd9ed7c5a8a76ee714448f8c11277a14e504836f79d6a06dcfb154be98090cc4bda9e1ee6117ffa85c7c37914a656dc0228615938795daabca93ba2c8108b6450d740f53f5aceb2ecb11c5b478c8fda128725aff27fb5ba48a447388036ab1388dc05745"}}}, 0xf5) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x2}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xd5b1, 0x4) 07:55:25 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000016c0)={0x740, 0x0, 0x1, 0x1ff, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c96}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa02}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="60aa4d2f4044ee3dea860ca73b7dd774f6313c1f289570fbdfcecc25a86c836d61d616e58b22b1797f59db4563d479cc5695bd2e4a4a7e96a18e5afd6b3398f57792d62947bb1e8374f823643f24e83e86bdc9864858826d18075674d19d454285fae93473be1006ef9a8f4ce0538125507319b424445254639128644d", 0x7d, 0x800, &(0x7f0000000140)={0x11, 0xf8, r0, 0x1, 0x3f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x1d, 0xa, 0x8) recvfrom$packet(r7, &(0x7f0000001380)=""/29, 0x1d, 0x40, &(0x7f00000013c0)={0x11, 0x5, r0, 0x1, 0x20, 0x6, @local}, 0x14) (async, rerun: 64) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (rerun: 64) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x600401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000010000000000000070008475a3c07fa8eedbdf25080001000100008b93878e26bdf808aef97de504bfb90008000102000000cb86ec6ae2d6b2bd78fa33020000000800010001000000090002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32, @ANYBLOB="00010000617c592897ee27bda106269d9e2f1af5050000ac332000001222644e", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x4, 0x0, 0x8, 0x7f, 0x5a1f, 0x4}, 0x1c) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x28, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x60, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:25 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000016c0)={0x740, 0x0, 0x1, 0x1ff, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c96}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa02}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="60aa4d2f4044ee3dea860ca73b7dd774f6313c1f289570fbdfcecc25a86c836d61d616e58b22b1797f59db4563d479cc5695bd2e4a4a7e96a18e5afd6b3398f57792d62947bb1e8374f823643f24e83e86bdc9864858826d18075674d19d454285fae93473be1006ef9a8f4ce0538125507319b424445254639128644d", 0x7d, 0x800, &(0x7f0000000140)={0x11, 0xf8, r0, 0x1, 0x3f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = socket(0x1d, 0xa, 0x8) recvfrom$packet(r7, &(0x7f0000001380)=""/29, 0x1d, 0x40, &(0x7f00000013c0)={0x11, 0x5, r0, 0x1, 0x20, 0x6, @local}, 0x14) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x600401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000010000000000000070008475a3c07fa8eedbdf25080001000100008b93878e26bdf808aef97de504bfb90008000102000000cb86ec6ae2d6b2bd78fa33020000000800010001000000090002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32, @ANYBLOB="00010000617c592897ee27bda106269d9e2f1af5050000ac332000001222644e", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x4, 0x0, 0x8, 0x7f, 0x5a1f, 0x4}, 0x1c) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="26736d5dd977aaa7e61a7de8f02b48bcc0bc59bba6ea0e6fb89199241fea54aafc76efb63ef37bfc6ff9bea66bced0e2af19d8ad2a061aaabf2343c53da6cb6a39860754a3e42b50b5215f51b08d42f6d8ff571715bb7c8682284f191e02efe1e7f7c0d4f2c75a62d2dc109fd105c49ca6c9e4550bf27c2422fa1e337eb5ecb3b5c22bce7926dfb2ce276f355c252ee47f878bf95dc9c4cdc3b989df7871bba7f6afcefed88d2850e10fde0009dfae5396426745509b05e1208599039e19cc2fa0a27a9977ee64e9c6fc21605b83a65abca8eefd585c5a03e65914dc49ebcfa81efc21ee1254872ac60a1eb86e65497c8b7119af045b100ade23ffca082351ebcf5b2b428a1f4e8da7fbb9331a9ec254e0c0c6d60f8e7fe5bd04271dbcb4eafbf04e345022ccbab526c8bdb10c9c740b52c6926fc3196fd6976ba40698a5b5da519bb3b3fe7cdc630798740b78026b0cd4b3d7870598e2ef33bd080e9b4b6a8a42ef827d37514d987727314d73976a9727526883421862abf539a83d639b3220eec90c96848fcb05c2a4b3cda6f1fb874e2c27ed1d3251c1c078bcfe1164dd304a763b6186201f9aab4656f93066178111e32461b62b1cf2ce13ae89096f53429cfe4267a5b5186e5ff43c5690c2292ddea15690227dd4bec593836340f9b1f13147382fbc535a9f006686cb99b13996e2175963bcdff62789b72a1d57335166d4d40bc4d0de9fb7e0b7aa44cc78e063aa2e96a4d4a7d81e37dfb59e011bb94710c50b0f5731d0f2795cfffcd8dd25d5dd844ad32f3e1e9685be1117af5a78be87fcc9c365f5a3dbcb56829bf71d7de4fdfe5a84db98114e7a05dcb65ae063927f4111b1ffaf3fc90ab0a6f83ae3082a479caa286846c00529104b5037c741660e1609a777be14d2a4b4e0130b337de23ac777369c9f3a8a280669f174725b340d5681cad2488306e220ca6d8c545bb62fa28e511d03a7a2c2fa5f75fb1f47fe79d2b81729108defcedeb27f8ece0cf90c81534e5a21d93b697e27bb0c7d75dfef096fd0b6022fa2e534c8df886fdd3179bd4096f980211d598a45ff3c55592f46b11532f0e52fd83768b833fd0687e8a83b195c60d6c0c03d79bb485e98a8810624c70d9238909e1b583f1022a87675f0ffc3636cb135b74b8e3849e7a88643d2ff735d27b769e4a0a376807df8d6042fa0abcd1e75ff82fecb218abf49084d3f2941e4a32925b94a3438f7541c3443524517203f7e94fdcd32ce62ad24dff8787beccdf522fbe7cee6c258edacd2942ca085cdc0e694ac3e49ba78b8c10ecf7ded7b75b2780241239c11e2f3df7f2fe8e5de8763b438b6c4ea2e65b9f6de9da5b11fc5a26a9b1ecaf448d30c65b76f51e155fa2f8bbc8229761c151ac0eefbc31818d8de25269cdf1c4bceac0804c40c16f78d0307c3f01ba233da44669f28a7b51ec7b7191bcd64b084766553d66a136b12cb5d0dd7feece5f1c1a3514923e6eba3be1178441fb47ad04c0b87c586225cb5ea8a66f756319ebc8009d39aa7bd282e7fb7c651361dd259d1fa213f685a2c62303c1edef29ccac1cdb3cf5fabd83b657cacbd2ddf3aa810ed03a0adb37bd5cd158b7b485c98ffd339120d6445095d556f520f700e59cd2ea740d2fabc7cc24e1c0c13b880a5e0fd72b2666b5a90f663ebc264c26002c0e4b19636a50cced872560dc4c77d4600526bc25771fe71fa96dd37a27d43676ae36949c120253a50da880b6370c42e16457f9a4eccc5855a89cdb8435e61360a8a274998a329c23a4fb57718af4fa2490dc041083c121b8ee1c9d6870ea610e50fbf2e9f1dceca36063bcb5ebbdec7c4258096ad52503ccb823cdcebfca5dd9e647f8fb04b55a53939fde0ebb4ad9edb35dcc98167b590922d6bedba09dc8afa7e45efe6051464febf2700d8e3aac162d196275351861a705f52156bf7165b54febfd33ab708e6f297c5526c7d6a59f6f16e85ab21b3d743e35f4e1c1a63b5d80ff5e188835444cdc1c12187c6bc9c92161650c616ccbbf01f76d475f758241c617a6b896a9afb3cc48261c1e7c02b234ba4fb9e84e4350fbc1580337d11b27ff7a788f79bc444881ad55bcca04b7536cd908d28b998a1261dd0aa074b3eaaf16e322b6de2f9660b2849b44df09caaf08243e9576820173db0012e7a5ad3ecb32b019fc03825f7f915447d0f3dd3913f4bc8b60d3dc380eafca9a6667d86d20f9732e64d1ca33292c6b1c7986d261cf9b47f407eab0f6dbe121723078893caeaaae2e4cd4673cb871f3173b1aa257fbed4c3ab8e0eadc983c676401ba5475a45d836eafdbe64f12c3bbc5fed6ae3fb4c15a2101c5e9df38ab1a93e978b32e42a42fdf64b3244108c2e6ec645734c01715818c97c30417d724d788872bde48ff66411378f2f71f91e205c94b3689423e6ea1549ca3443d561b8703f8ea121693b114e44a852ffba02254891c890161185b809b4ec3da52299f86de5ccdaf919a4de0d6387e4365bef432ae36388f11fa863209897c873efc9f7eaae76adf25d8fa219798e6336f88993bec6f5f8a1d33f1fee5911bea91f8dd64ce7fb52a53e75a89489d63277135b72080d162bac9c178f3180b213a2febb607ef526f9a430a621fd18e3a76d4abc738930d3572addd8aaebea21e06102ad50f6b88258ba0b8e7e0363c95dd8e3d0be91d4fcf96d0b80c56fe43c4efb30746817a75c92478260cca5525c7104d72d879195f345290e1a060b7e5d00c2d73df81c28d022fe4780b648ffce9095403c9a4d516b1d7e46608c8b65881649e1587035c88bc9c3e822a5be5000d21b356d260bdcbdf9fb175baa96fa665b29439e627365ac2b45ee207b9a9238418172e35b19f4ac89778b2fba2ed37954a0267b65179fdbbcac0d8023ceaa0331c3b0b44b58ac9537d916a8339db8fd739946b59e14f14407aa20cbe6a7e6f4d602323a6332188746c8db0b0535bc436fd39e312b1c0f5855d69d0a4abb9f63ac7aae260414cce5c2a394b3ea0a558004bfabfabea1048aa643de09da49ab2347d75a17f1ce05f555e9f956573410a08cdec2df7a64f85182cc7da2b2abbd00e0808df62630af1582af4036df0d24fe6bdfc2e945ab991d870f14b8fcebd9c4d1cc4af76e6ccdd3f5a1bc1c4362d70e7b5a1806b2db69f6b377c41f97768923ec08761c15cf22326fc410fec5b6dbae9ec5a5e61765a368f0de255a58a0e12caa6bb6720c29b8d8f82db646394417c27abff4bf5ce38cb290186df041f1be02ea4ebe46d7faca076fe092f8956d98de46072469248be74db7a11527f778460afd2d9b6bfe30dc815a1830d9d49b942399f89c2aa748fff3805f6cb91969bda179cbc3e25b0f809849747e002be35267d69c43a510b38b7ad81f3237cc6398b9b7fd483fb88597fc2c7a83fdf7335b6acc67653064d8c9589b935ea1eae10b4318a03a35e8877b23fd1fe40cd4335ed0a3de3bee751c56a9b9b2566134f8f1cc6cb59c3673757ef04864e8bea3e70db926d3799aed26ee258d00303a1fa62b35e65f2ad79887d86264bff8898e7bb2d71e1c7cde34bc2cb579f125dda418124db375f32d78ac58e892fef82c66d7fee2ef81a9af8e35f9dbd640ad6d8f3813a758bafc8e0dad4fa931d678fa7ba67ad44ccba62f7c9f8694cb580238b7e56e6af97c754b740149e149cffcbfbef1dea13441ccfedf63dc08c74839ab7367d4d6a40bdcf7449bf4886b0c8f27e8ece21242a04629fafbea3c4457f5a2ced5e6842b86508ffebc48c253efc866d584610b52fdb2e753a9c99fa74c4569a4dd27326cffa1c8637d5f0f20769f64d7a7247b16b7d26552f8dfd0f99b2a2ec874970a4a510540024102194c4e65406c8978f58b17b05bd877002434266dc2084f0a549180eb6a68f21c430f8757876f2f47b813a93ea43c90d95b2ee162ab354b7b9357ac13a30fe4d2ae65b92705eac8167e2d765e38d812cadff8a6b7f5173f9cd0ae3979181b5c08ef7c935cf0cf66468e0170c0af6a76a40220f5f6107004ca67dcc2e8bbff9fd1f659dc56c8ee92940c309e638cb0176939bf6e295560a01d890debb4d827983cd5367e8f72f08a2a4e9598cb39dbd04e85a1d9fcd018a6efcd6001e71e24c4035a1cd7508a0f67b42d8b4fef751be50a00646917bfde1b8e5f39ee69b117302b23b8d7251a053800c12b092948106271e06f8d30b8cd95499e46da992e74d2902945789b56121adc6ea68ef616f38ebcdb397f8532a404422ff2d45668e06f742c9fb72465f563b9d6bbf6b14f42324ab8d76e2842687a7360584ddf272bb7b3d77a13ee37de931c1e71929a88bf668d8b60bb1b5cfddb958234c9add2ad56021244e0645bdc25f9c2a327d4663f098295f0accd7c97fb9b2ded2c48583742d908c2187f848b23dbe98459a11d782b554be77eb9fae001e0488223cbdc390900fc38b89b8f2d5e820d0bb69a430d21731215e3eb1eab033282089227d8e72a797f5b19d37877927b3b99063063beaa59ceb21f0f07707dd2ada9019b647665c754cf6128d5b0bcbdc2a105ed4814f438f26bf1839981d90fa5cd07006de405ebdcedfeb518a5b0a78b3e8d0394295f0ed4803a1a6a2cf99e07f5f71ef4d33c5110ca01e55ab60610952da5bbaa12a90e1b79e421c8421c9626d55cbf14cca2416b2e76d200e98cf689172bb3311f0b88ad72a441b6ab769e676f77d29dcac17fdad9c6fb87e575d1219ae4248549ad7b3639b2a26caae6798b428f923d585c4d911c47343dacdeb3afd72cd085e9109e08ea24c4b4d007b6329597fcb0014ad9ba040f83a4c3f77f0dbee05ca3ee03e9f8a2efadb3cfc92e314684ceb69f1510f0a572d4bb84f29233f3c941924f8b2d9a75522a437c41fa58fe81c22f0390a0b2ab08e7fd9a048a034c0c8d4b7ce09f86c2f8b68976ce45caad55de14e051c96f70fa647324ac27a43e9841dc3e328a8cb6eacfcdbf957d078c25ac27582cb92aacd0c42ad2e0262a57e56c3adadd3cb579e2c0c37645654a849656d2da3ecdc7f29ffe260143dec12fffa5cf773e82b1f95f2fa095322b3d64b1592703af34cd260dfb54d088e444f6668dc62b869cb8595ff8a08c28a5c4f5f04c05f4beda1aee5d1797d064bd3581f4dfd56fa31424ff45899cb81f3f0cfdb653fc3d9de7181bd85ba248ed2528c5301fbc178fd63a75206b817f5879b3d76bb309faf1162ed8074a8ad8c98cd2591aea0dbf21ab019c73ee6cb6201f80603b2178d52894efb3f4d7b567582a7eb19f9f3a5a58db88306403c7ff7a4d0c2718e8c6557cddd73f5e88e4e8f8db51814898ec365364df525c180f77572e2f3765712806b7b2e6a6896246603ad1170ebc896ad2b2fb6c4abbd834a8a48ed02bf249e39fa1320b16a2b770803308065071df6bc7133038b8763880ff10e8abc8306d89d5621a70afae78d4513cbd69ca684682861284b5074178274d6f8fd93b155a60027d9667b93fb9afa69cbed26ab09a5faf03d953ff0f265ab4668a93914109ac78b10e439bd2457329aea95737b0e87308c54a59bd5d8e0719e654959f98cdea7d9769af0171a851f7517a1498fcf1fcb775284fe07a74f5705254cf62eb5843690db3c848d1b09a4b6acff7ad31c10b8973307f1477a8a7bc1d8bc015ae50a0853412e098b408c6be7f880bed83bcd7ca3f747fc7ed1158ae172921d550fe380247430a5127179d010a8b21f879f7c0b433512738d0cddf885a93cf99d0ec8cfa7364a67431b9723932a8dbdcb9", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="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", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2}, 0x48) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = socket(0x10, 0x1, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r8 = memfd_secret(0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) (async) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x300, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) r1 = memfd_secret(0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="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", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = socket(0x10, 0x1, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r8 = memfd_secret(0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) (async) socket(0x10, 0x1, 0x3ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) (async) memfd_secret(0x80000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) (async) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) (rerun: 32) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x3}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x600, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) r1 = memfd_secret(0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) (async) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) (async) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x4}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = socket(0x10, 0x1, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r8 = memfd_secret(0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) (async) socket(0x10, 0x1, 0x3ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) (async) memfd_secret(0x80000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) (async) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xf00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") (async) 07:55:25 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) (async) r1 = memfd_secret(0x0) (async) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x5}, 0x48) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x6}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:25 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1100, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="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") 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x7}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="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") 07:55:25 executing program 5: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x486001) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x8}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1200, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) 07:55:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="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") 07:55:25 executing program 5: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) (async, rerun: 64) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x486001) (rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x9}, 0x48) 07:55:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 07:55:25 executing program 5: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x486001) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1400, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xa}, 0x48) 07:55:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) (async) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/62) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="000000000000000040000000e0ff0000003272602e0400000000000000585d6c90a5b0751c58839fd1558b6dcee9a981b09d28c3c3d7ab737dc88fa4a03cfa01e3fc0b9480a4f7339070fa4070c0388c36ad391cb3eb35625afbcee785fc82b2e7bed53e7c83cb6277cf137dc4c3210b50d75b25a068be5a2ca035d42684621ffd20f000ac6634db9f7b2abf05ac6ed9c011"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/137) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xb}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1500, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) (async) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000d1400082abf563816f6e9d2fceb48dbbbf31f6cd42463bd7000fcdbdf2508003e0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20000030) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1600, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xc}, 0x48) 07:55:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xfffff800, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="a688a7c555b9621e3d00175a9f516f393a1098313845a61483f110f2fd5fb82ed3132fa7ce37bdc424532f3147a5f0b3bc050e5f2cf932ca18f01524abc9ec6cbbca55eb9ab02691445d93762b3f9e883c3094b86764265f4311b138d8725771642c6d4b1bed0ccf4a4290f29b59a442a5b5e8ab708350e93a8703f907de63c1dc4b47c0f44f6333ee78e91758faa45c520916ac8e1af59f1a13f75df72a573dfee91de3162675424c5fd255edda20393607971754e6c532193f03458ebd1708bb25153819c423a23e734160069cadcf316d5bd48cfd") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/62) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="000000000000000040000000e0ff0000003272602e0400000000000000585d6c90a5b0751c58839fd1558b6dcee9a981b09d28c3c3d7ab737dc88fa4a03cfa01e3fc0b9480a4f7339070fa4070c0388c36ad391cb3eb35625afbcee785fc82b2e7bed53e7c83cb6277cf137dc4c3210b50d75b25a068be5a2ca035d42684621ffd20f000ac6634db9f7b2abf05ac6ed9c011"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/137) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000d1400082abf563816f6e9d2fceb48dbbbf31f6cd42463bd7000fcdbdf2508003e0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20000030) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xd}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000d1400082abf563816f6e9d2fceb48dbbbf31f6cd42463bd7000fcdbdf2508003e0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20000030) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xfffff800, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="a688a7c555b9621e3d00175a9f516f393a1098313845a61483f110f2fd5fb82ed3132fa7ce37bdc424532f3147a5f0b3bc050e5f2cf932ca18f01524abc9ec6cbbca55eb9ab02691445d93762b3f9e883c3094b86764265f4311b138d8725771642c6d4b1bed0ccf4a4290f29b59a442a5b5e8ab708350e93a8703f907de63c1dc4b47c0f44f6333ee78e91758faa45c520916ac8e1af59f1a13f75df72a573dfee91de3162675424c5fd255edda20393607971754e6c532193f03458ebd1708bb25153819c423a23e734160069cadcf316d5bd48cfd") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1800, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/62) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="000000000000000040000000e0ff0000003272602e0400000000000000585d6c90a5b0751c58839fd1558b6dcee9a981b09d28c3c3d7ab737dc88fa4a03cfa01e3fc0b9480a4f7339070fa4070c0388c36ad391cb3eb35625afbcee785fc82b2e7bed53e7c83cb6277cf137dc4c3210b50d75b25a068be5a2ca035d42684621ffd20f000ac6634db9f7b2abf05ac6ed9c011"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/137) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xe}, 0x48) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x9}], &(0x7f0000000180)='GPL\x00', 0x7cd29b09, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1900, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xf}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xfffff800, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (async) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="a688a7c555b9621e3d00175a9f516f393a1098313845a61483f110f2fd5fb82ed3132fa7ce37bdc424532f3147a5f0b3bc050e5f2cf932ca18f01524abc9ec6cbbca55eb9ab02691445d93762b3f9e883c3094b86764265f4311b138d8725771642c6d4b1bed0ccf4a4290f29b59a442a5b5e8ab708350e93a8703f907de63c1dc4b47c0f44f6333ee78e91758faa45c520916ac8e1af59f1a13f75df72a573dfee91de3162675424c5fd255edda20393607971754e6c532193f03458ebd1708bb25153819c423a23e734160069cadcf316d5bd48cfd") (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) (rerun: 32) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x9}], &(0x7f0000000180)='GPL\x00', 0x7cd29b09, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1a00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x10}, 0x48) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1c00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) 07:55:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x9}], &(0x7f0000000180)='GPL\x00', 0x7cd29b09, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x11}, 0x48) 07:55:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x12}, 0x48) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1d00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x0, 0x3, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0xae, 0x200}, {0x200, 0x3}, {0x7b7a, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x81, 0x7f}, {0x5, 0x3d, 0x3, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x5, 0x3f, 0x9}, {0x80, 0x5, 0x0, 0x7fff}, {0x200, 0x5, 0xff, 0x5}, {0x6, 0x20, 0x9, 0x4}, {0xe065, 0x5, 0x3f, 0x2}, {0x7, 0x8, 0x0, 0xfe1b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) getsockname$packet(r0, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x8, 0x5, 0x800, 0x6595861}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000001c00)='syzkaller\x00', 0x6, 0x27, &(0x7f0000001c40)=""/39, 0x40f00, 0x1, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x2, 0x4, 0x553f, 0x7}, 0x10}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x13}, 0x48) 07:55:26 executing program 0: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1e00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x0, 0x3, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0xae, 0x200}, {0x200, 0x3}, {0x7b7a, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x81, 0x7f}, {0x5, 0x3d, 0x3, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x5, 0x3f, 0x9}, {0x80, 0x5, 0x0, 0x7fff}, {0x200, 0x5, 0xff, 0x5}, {0x6, 0x20, 0x9, 0x4}, {0xe065, 0x5, 0x3f, 0x2}, {0x7, 0x8, 0x0, 0xfe1b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async) getsockname$packet(r0, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x8, 0x5, 0x800, 0x6595861}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000001c00)='syzkaller\x00', 0x6, 0x27, &(0x7f0000001c40)=""/39, 0x40f00, 0x1, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x2, 0x4, 0x553f, 0x7}, 0x10}, 0x80) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) 07:55:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) (async) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) (async) 07:55:26 executing program 0: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x14}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 07:55:26 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x0, 0x3, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0xae, 0x200}, {0x200, 0x3}, {0x7b7a, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x81, 0x7f}, {0x5, 0x3d, 0x3, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x5, 0x3f, 0x9}, {0x80, 0x5, 0x0, 0x7fff}, {0x200, 0x5, 0xff, 0x5}, {0x6, 0x20, 0x9, 0x4}, {0xe065, 0x5, 0x3f, 0x2}, {0x7, 0x8, 0x0, 0xfe1b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x8, 0x5, 0x800, 0x6595861}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000001c00)='syzkaller\x00', 0x6, 0x27, &(0x7f0000001c40)=""/39, 0x40f00, 0x1, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x2, 0x4, 0x553f, 0x7}, 0x10}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 0: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x15}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2100, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x16}, 0x48) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2200, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) (async) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x17}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{0x140b, 0xe7}, {0xc9, 0x7, 0x7f, "2ffef44eb33cfd06ee5f527e6257dd5d66ecda9f9709600f7d0d112f2f0e245e844e7ad80c51ff79eeb6d3856a15722254d1ec5c4e28d9abaca757c90316ff518d1e567a25ca0087000614869fa701f3b503d3f0078fc287b1f3e13f6a81029abee3752de61fed4bd95bb58dc973bce55742e733aeac0e60cee054f2af8954b0be4218f43a9de7097bb13877c23b5a8b749106f2d8623417a7d79f19ae30e23f482105087f7aa073aee05ecc7669b01cd9107c42901accf1dbacea916735428448d6ecf1ba02d37a620921bd1d105d0144664cf5d6070c6590ee65d1e0c168912564"}}}, 0xeb) 07:55:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) (async) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2400, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x18}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{0x140b, 0xe7}, {0xc9, 0x7, 0x7f, "2ffef44eb33cfd06ee5f527e6257dd5d66ecda9f9709600f7d0d112f2f0e245e844e7ad80c51ff79eeb6d3856a15722254d1ec5c4e28d9abaca757c90316ff518d1e567a25ca0087000614869fa701f3b503d3f0078fc287b1f3e13f6a81029abee3752de61fed4bd95bb58dc973bce55742e733aeac0e60cee054f2af8954b0be4218f43a9de7097bb13877c23b5a8b749106f2d8623417a7d79f19ae30e23f482105087f7aa073aee05ecc7669b01cd9107c42901accf1dbacea916735428448d6ecf1ba02d37a620921bd1d105d0144664cf5d6070c6590ee65d1e0c168912564"}}}, 0xeb) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0xf7a235407fa63c04}, 0x6) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2500, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x19}, 0x48) 07:55:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) r1 = memfd_secret(0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0xf7a235407fa63c04}, 0x6) (rerun: 64) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1a}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{0x140b, 0xe7}, {0xc9, 0x7, 0x7f, "2ffef44eb33cfd06ee5f527e6257dd5d66ecda9f9709600f7d0d112f2f0e245e844e7ad80c51ff79eeb6d3856a15722254d1ec5c4e28d9abaca757c90316ff518d1e567a25ca0087000614869fa701f3b503d3f0078fc287b1f3e13f6a81029abee3752de61fed4bd95bb58dc973bce55742e733aeac0e60cee054f2af8954b0be4218f43a9de7097bb13877c23b5a8b749106f2d8623417a7d79f19ae30e23f482105087f7aa073aee05ecc7669b01cd9107c42901accf1dbacea916735428448d6ecf1ba02d37a620921bd1d105d0144664cf5d6070c6590ee65d1e0c168912564"}}}, 0xeb) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2600, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) 07:55:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1b}, 0x48) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1c}, 0x48) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x278b, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0xf7a235407fa63c04}, 0x6) 07:55:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1d}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1409, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x24000044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2800, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1e}, 0x48) 07:55:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1409, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x24000044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x21}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1409, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x24000044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x6000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") (async) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x8b27, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x22}, 0x48) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x23}, 0x48) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) (async) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x93, &(0x7f00000000c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x2, 0x3d2b}, 0x10}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x180}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x300}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x93, &(0x7f00000000c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x2, 0x3d2b}, 0x10}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992, 0x67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) write$tcp_congestion(r1, &(0x7f0000000000)='nv\x00', 0x3) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x3000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x500}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x93, &(0x7f00000000c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x2, 0x3d2b}, 0x10}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992, 0x67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) write$tcp_congestion(r1, &(0x7f0000000000)='nv\x00', 0x3) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x4000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x600}, 0x48) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x700}, 0x48) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_secret(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x800}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/235) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992, 0x67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) write$tcp_congestion(r1, &(0x7f0000000000)='nv\x00', 0x3) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x6000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x800}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/235) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x8000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x900}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xa00}, 0x48) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_secret(0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x800}) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/235) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xf000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x785cd2e8, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xb00}, 0x48) 07:55:26 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/60) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x785cd2e8, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 07:55:26 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="613350fe9bda08d960754b830653f102a508e0c7279953e07190d0df4f2ad975242789bac661c0464d43a93ebee6eb0e8e3a1cfbe21dcc20bf1ce4f3c6f8f60cb0b938bb08e9871a3a389c0c2c8a6103fbee8d805620f5eb6b4a9eb7c5f3a94755c027d07eabdc956b7a00b820ebfe04344716bb27b62f232baaf16b0421cbe0445d125f3b431297339d9e5c9e2e87aa8c3ca1fd8c220c15b66b0af107aa60319cc19570bc301342d1eb365325e4e842e0a7fb0a973c5b9595be34d591f21b7e19284b83e6bd66bb8d1cadd494569d62d2e67bd7bbd83e1418d720f824792c8b1b53df7769ce92ee09", &(0x7f0000000000)=""/36}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x10000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xc00}, 0x48) 07:55:26 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/60) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x785cd2e8, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xd00}, 0x48) 07:55:26 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="613350fe9bda08d960754b830653f102a508e0c7279953e07190d0df4f2ad975242789bac661c0464d43a93ebee6eb0e8e3a1cfbe21dcc20bf1ce4f3c6f8f60cb0b938bb08e9871a3a389c0c2c8a6103fbee8d805620f5eb6b4a9eb7c5f3a94755c027d07eabdc956b7a00b820ebfe04344716bb27b62f232baaf16b0421cbe0445d125f3b431297339d9e5c9e2e87aa8c3ca1fd8c220c15b66b0af107aa60319cc19570bc301342d1eb365325e4e842e0a7fb0a973c5b9595be34d591f21b7e19284b83e6bd66bb8d1cadd494569d62d2e67bd7bbd83e1418d720f824792c8b1b53df7769ce92ee09", &(0x7f0000000000)=""/36}, 0x20) (rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x11000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/60) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x12000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xe00}, 0x48) 07:55:27 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="613350fe9bda08d960754b830653f102a508e0c7279953e07190d0df4f2ad975242789bac661c0464d43a93ebee6eb0e8e3a1cfbe21dcc20bf1ce4f3c6f8f60cb0b938bb08e9871a3a389c0c2c8a6103fbee8d805620f5eb6b4a9eb7c5f3a94755c027d07eabdc956b7a00b820ebfe04344716bb27b62f232baaf16b0421cbe0445d125f3b431297339d9e5c9e2e87aa8c3ca1fd8c220c15b66b0af107aa60319cc19570bc301342d1eb365325e4e842e0a7fb0a973c5b9595be34d591f21b7e19284b83e6bd66bb8d1cadd494569d62d2e67bd7bbd83e1418d720f824792c8b1b53df7769ce92ee09", &(0x7f0000000000)=""/36}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x1, 0x1, 0x5ab7cb514f5c05e0, 0x6, 0x16, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0x4, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xb, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2f7, 0x2000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xf00}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x14000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x1, 0x1, 0x5ab7cb514f5c05e0, 0x6, 0x16, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0x4, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xb, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x30}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x8000}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/86) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x15000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1100}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x30}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x8000}) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/86) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2f7, 0x2000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x16000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x30}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x8000}) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/86) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x1, 0x1, 0x5ab7cb514f5c05e0, 0x6, 0x16, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0x4, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xb, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 32) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1200}, 0x48) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2f7, 0x2000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x18000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1300}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116ff182000000000000000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x1, "6a84030cc7bd37b5dfbf0dee8b81c5e15a5ffe0359ee468b9e072d1efdd4b2"}}}, 0x24) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1400}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x19000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116ff182000000000000000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x1, "6a84030cc7bd37b5dfbf0dee8b81c5e15a5ffe0359ee468b9e072d1efdd4b2"}}}, 0x24) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1500}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1a000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116ff182000000000000000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x1, "6a84030cc7bd37b5dfbf0dee8b81c5e15a5ffe0359ee468b9e072d1efdd4b2"}}}, 0x24) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x11, 0xc, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1600}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1c000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: r0 = socket(0x1a, 0x8080c, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x995}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x7, 0x4, 0x5, 0x1, 0x5, 0x3}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001d00)=ANY=[@ANYBLOB="500000000914020029bd7000fce8df25080001000100000008000100000000000800010000000000080001000000000008000100080001000000000008000100000000000800010000000000e2c43e90500ea3d125f1b6c91c9944e84400000000a6c60a1a51f51652f01d2375298eb65816656d5641b7434f6a06ab3f667215c7f99f4b9cc40c5745b5f9bd421274fef779762b8d0848617d7deee5f9f2ba3578963a3c6779c12b23788571045faae53dc3823e3bc0ffeb649a6d725a26cac6d89dc686b83c238f3b8222d82eeceec0058b98790b2282a483dc9339d78b87d0b5a38b6d"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4048001) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x8, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1d000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1700}, 0x48) 07:55:27 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) (async) add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) (async) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1800}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x11, 0xc, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) socket(0x11, 0xc, 0x7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1e000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: r0 = socket(0x1a, 0x8080c, 0x6) (async) r1 = memfd_secret(0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x995}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x7, 0x4, 0x5, 0x1, 0x5, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001d00)=ANY=[@ANYBLOB="500000000914020029bd7000fce8df25080001000100000008000100000000000800010000000000080001000000000008000100080001000000000008000100000000000800010000000000e2c43e90500ea3d125f1b6c91c9944e84400000000a6c60a1a51f51652f01d2375298eb65816656d5641b7434f6a06ab3f667215c7f99f4b9cc40c5745b5f9bd421274fef779762b8d0848617d7deee5f9f2ba3578963a3c6779c12b23788571045faae53dc3823e3bc0ffeb649a6d725a26cac6d89dc686b83c238f3b8222d82eeceec0058b98790b2282a483dc9339d78b87d0b5a38b6d"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4048001) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x8, 0x4) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x11, 0xc, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) socket(0x11, 0xc, 0x7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1900}, 0x48) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1a00}, 0x48) 07:55:27 executing program 2: r0 = socket(0x1a, 0x8080c, 0x6) (async) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x995}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x7, 0x4, 0x5, 0x1, 0x5, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001d00)=ANY=[@ANYBLOB="500000000914020029bd7000fce8df25080001000100000008000100000000000800010000000000080001000000000008000100080001000000000008000100000000000800010000000000e2c43e90500ea3d125f1b6c91c9944e84400000000a6c60a1a51f51652f01d2375298eb65816656d5641b7434f6a06ab3f667215c7f99f4b9cc40c5745b5f9bd421274fef779762b8d0848617d7deee5f9f2ba3578963a3c6779c12b23788571045faae53dc3823e3bc0ffeb649a6d725a26cac6d89dc686b83c238f3b8222d82eeceec0058b98790b2282a483dc9339d78b87d0b5a38b6d"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4048001) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x8, 0x4) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x20000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1b00}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x21000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x22000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1c00}, 0x48) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1d00}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x24000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="9cbce0dbc91dabb5c9bdea") r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x1}], 0x4e, 0x0, &(0x7f0000000200)="41c0204aa4c852187985495acab91188ca8a9b9b412fd961dc33b7cdf9e1d599f5b360726d8ba92a21ae51cbc3d32d835d8428db26c5a1eafe62dbe469d9f993be08f2e70ed6e3ab11cf29fbe700"}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x25000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1e00}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="9cbce0dbc91dabb5c9bdea") (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x1}], 0x4e, 0x0, &(0x7f0000000200)="41c0204aa4c852187985495acab91188ca8a9b9b412fd961dc33b7cdf9e1d599f5b360726d8ba92a21ae51cbc3d32d835d8428db26c5a1eafe62dbe469d9f993be08f2e70ed6e3ab11cf29fbe700"}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x3, 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x26000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1f00}, 0x48) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="9cbce0dbc91dabb5c9bdea") r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x1}], 0x4e, 0x0, &(0x7f0000000200)="41c0204aa4c852187985495acab91188ca8a9b9b412fd961dc33b7cdf9e1d599f5b360726d8ba92a21ae51cbc3d32d835d8428db26c5a1eafe62dbe469d9f993be08f2e70ed6e3ab11cf29fbe700"}) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x3, 0x4) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2c, 0x3, 0x732) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) (async, rerun: 64) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2c, 0x3, 0x732) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x2c, 0x3, 0x732) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x28000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116000024ffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="6f3e073e20412839accce58eb1df7882d37d8d69c39e921ef5dd3858288e9a77f8adf723124bbb36dcc12399ccee1bc9a7aa9656d73b401f11ea26be5e4bb4de16c54c434820951f14d41dc6c846f65782c1776efbd8e09124a4053ccdfa129eadfbdb7a8c072026ca16e85f2ea8459697908451ee677e265dd778faa75da634c13a3febb33c5b7cc98be5c1cee3434fb5da83aaf91a3b16f3c849217829d6d08aa276a58e5d196990e14ddf68f7fb85a0b1ee74b7d0b887f8b5cf6e54b848c62b41fd4f4209de27ea2d77c0e366899c51686b") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) r3 = memfd_secret(0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2c, 0x3, 0x732) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2100}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x60000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116000024ffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="6f3e073e20412839accce58eb1df7882d37d8d69c39e921ef5dd3858288e9a77f8adf723124bbb36dcc12399ccee1bc9a7aa9656d73b401f11ea26be5e4bb4de16c54c434820951f14d41dc6c846f65782c1776efbd8e09124a4053ccdfa129eadfbdb7a8c072026ca16e85f2ea8459697908451ee677e265dd778faa75da634c13a3febb33c5b7cc98be5c1cee3434fb5da83aaf91a3b16f3c849217829d6d08aa276a58e5d196990e14ddf68f7fb85a0b1ee74b7d0b887f8b5cf6e54b848c62b41fd4f4209de27ea2d77c0e366899c51686b") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) r3 = memfd_secret(0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2200}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x8b270000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116000024ffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="6f3e073e20412839accce58eb1df7882d37d8d69c39e921ef5dd3858288e9a77f8adf723124bbb36dcc12399ccee1bc9a7aa9656d73b401f11ea26be5e4bb4de16c54c434820951f14d41dc6c846f65782c1776efbd8e09124a4053ccdfa129eadfbdb7a8c072026ca16e85f2ea8459697908451ee677e265dd778faa75da634c13a3febb33c5b7cc98be5c1cee3434fb5da83aaf91a3b16f3c849217829d6d08aa276a58e5d196990e14ddf68f7fb85a0b1ee74b7d0b887f8b5cf6e54b848c62b41fd4f4209de27ea2d77c0e366899c51686b") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) r3 = memfd_secret(0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2300}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x9effffff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) memfd_secret(0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) (async) openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2000000}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xefffffff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r2, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x4}}}, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xf0ffffff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x3000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x4}}}, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (rerun: 64) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffff7f, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x4000000}, 0x48) 07:55:27 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffff9e, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x4}}}, 0x5) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x5000000}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) 07:55:27 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffef, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: pipe2$watch_queue(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r4 = memfd_secret(0x0) r5 = syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) r8 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x6000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f0000001300), 0x80) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = memfd_secret(0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00) (async) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (rerun: 32) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xfffffff0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: pipe2$watch_queue(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r4 = memfd_secret(0x0) r5 = syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) r8 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) pipe2$watch_queue(&(0x7f0000001bc0), 0x80) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) memfd_secret(0x0) (async) syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) (async) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x7000000}, 0x48) 07:55:27 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400}, 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="db0200407113157e"], 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x0}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x8000000}, 0x48) 07:55:27 executing program 2: pipe2$watch_queue(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r4 = memfd_secret(0x0) r5 = syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) r8 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) pipe2$watch_queue(&(0x7f0000001bc0), 0x80) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) memfd_secret(0x0) (async) syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) (async) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x9000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00) (async) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x2}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="db0200407113157e"], 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xa000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) r1 = memfd_secret(0x0) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x8}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xb000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="db0200407113157e"], 0xb) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) memfd_secret(0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xc000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) (async) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x19}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214000829bd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000009a355a0f9e2dad6e1cd7030d701ebae89e9a7b7e3b8f4bc3149e93b6dc98fddfcd8be1a0a04c0cebd0efb9e09ebb7588036a62c4d628664d5dbc6da62dccea135be20f012af991c604deeca2e5cb98572ea0eef0bad94cf954c59a14a96cd9e5ab87ca3aa458e3fb9f99074cc918e532f4e20cbe8af24161f597399f"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r4 = memfd_secret(0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x6, 0x1, 0x2, 0x100, 0x2, 0x3f}) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:55:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214000829bd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000009a355a0f9e2dad6e1cd7030d701ebae89e9a7b7e3b8f4bc3149e93b6dc98fddfcd8be1a0a04c0cebd0efb9e09ebb7588036a62c4d628664d5dbc6da62dccea135be20f012af991c604deeca2e5cb98572ea0eef0bad94cf954c59a14a96cd9e5ab87ca3aa458e3fb9f99074cc918e532f4e20cbe8af24161f597399f"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async, rerun: 32) r4 = memfd_secret(0x0) (rerun: 32) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x6, 0x1, 0x2, 0x100, 0x2, 0x3f}) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xd000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) (async) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xe000000}, 0x48) 07:55:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214000829bd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000009a355a0f9e2dad6e1cd7030d701ebae89e9a7b7e3b8f4bc3149e93b6dc98fddfcd8be1a0a04c0cebd0efb9e09ebb7588036a62c4d628664d5dbc6da62dccea135be20f012af991c604deeca2e5cb98572ea0eef0bad94cf954c59a14a96cd9e5ab87ca3aa458e3fb9f99074cc918e532f4e20cbe8af24161f597399f"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async) r4 = memfd_secret(0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x6, 0x1, 0x2, 0x100, 0x2, 0x3f}) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xf000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd88) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01960000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="0000000005005aacc8885929b3e6a11f45d7604e485b43d68b66582d4940caea798ff53fcfe79c4cb404e5d030f1286d3589abcd5f75ebc1e67c3918a8be7a452e826758467b4d427505dd34f998c24e4a442ceaa85ec26ffd61b4c630a2c7c0c9", @ANYRES32, @ANYBLOB="00000000000000004000060001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x403, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x2, 0x4}}}, 0xa) r2 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x5, 0x5, 0x108c, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x10000000}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x11000000}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)}, 0x10) (async) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) (async) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd88) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01960000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="0000000005005aacc8885929b3e6a11f45d7604e485b43d68b66582d4940caea798ff53fcfe79c4cb404e5d030f1286d3589abcd5f75ebc1e67c3918a8be7a452e826758467b4d427505dd34f998c24e4a442ceaa85ec26ffd61b4c630a2c7c0c9", @ANYRES32, @ANYBLOB="00000000000000004000060001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x403, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x2, 0x4}}}, 0xa) (async) r2 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x5, 0x5, 0x108c, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd88) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x12000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01960000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="0000000005005aacc8885929b3e6a11f45d7604e485b43d68b66582d4940caea798ff53fcfe79c4cb404e5d030f1286d3589abcd5f75ebc1e67c3918a8be7a452e826758467b4d427505dd34f998c24e4a442ceaa85ec26ffd61b4c630a2c7c0c9", @ANYRES32, @ANYBLOB="00000000000000004000060001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x403, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x2, 0x4}}}, 0xa) (async) r2 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x5, 0x5, 0x108c, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/25) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)="9e99128fffffe2c3161bc3068bb05dfe2083f9a44f9749cb8195e39c7881c0ec9aeddb453c6e130e1fee3707601a184a13c10d35a535f984f33c4c0a49d0a53498fd5fe86d073a47aed263b9ce43c8dc8c01139b6c479a974258338217e7a9b14bef2d0fb1543d2e", 0x68) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000000c0)=""/249) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000280)=""/199) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x13000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") (async) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) (async) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="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") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000}) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/25) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)="9e99128fffffe2c3161bc3068bb05dfe2083f9a44f9749cb8195e39c7881c0ec9aeddb453c6e130e1fee3707601a184a13c10d35a535f984f33c4c0a49d0a53498fd5fe86d073a47aed263b9ce43c8dc8c01139b6c479a974258338217e7a9b14bef2d0fb1543d2e", 0x68) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000000c0)=""/249) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000280)=""/199) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x14000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000}) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/25) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)="9e99128fffffe2c3161bc3068bb05dfe2083f9a44f9749cb8195e39c7881c0ec9aeddb453c6e130e1fee3707601a184a13c10d35a535f984f33c4c0a49d0a53498fd5fe86d073a47aed263b9ce43c8dc8c01139b6c479a974258338217e7a9b14bef2d0fb1543d2e", 0x68) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000000c0)=""/249) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000280)=""/199) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x15000000}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="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") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x16000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x11}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 64) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (async) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="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") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x17000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r4 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/169, &(0x7f0000001140)="563520c4e6725eb8b058481c57e5b8f9a20238b21acd07327f6b509e2cd6a22e1a1c77ec0fae7677ed9ec5be6e0cc34e5c37a74e379f16e672b29258f0b2cab5d2f5e89a1956e44d499fb01f74ad88b84219bd32b3439ed6141343776f8783ee220cd23c35e14693835a0cc0a8436362717ca05b92235d4f39550de10d55c67c1fdb75bc4675efd6dab99eef", &(0x7f0000001200)="52596a9bc2cb4c944c57d34b124ab5d035d8bda4f602fd96adf229d81b0fca6bba70c0e8bc4340fbbc20c28ba22b5d308666345d61ed77bfc060a0321088dc859e99de41f59faf945196cb2c3b8c2160a0a8a54219e0c34ddbf87e7e31d488d5583810cca028522e98a9ddaf", 0x3, r1, 0x4}, 0x38) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x4) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x12}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: getgid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x18000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x19000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/169, &(0x7f0000001140)="563520c4e6725eb8b058481c57e5b8f9a20238b21acd07327f6b509e2cd6a22e1a1c77ec0fae7677ed9ec5be6e0cc34e5c37a74e379f16e672b29258f0b2cab5d2f5e89a1956e44d499fb01f74ad88b84219bd32b3439ed6141343776f8783ee220cd23c35e14693835a0cc0a8436362717ca05b92235d4f39550de10d55c67c1fdb75bc4675efd6dab99eef", &(0x7f0000001200)="52596a9bc2cb4c944c57d34b124ab5d035d8bda4f602fd96adf229d81b0fca6bba70c0e8bc4340fbbc20c28ba22b5d308666345d61ed77bfc060a0321088dc859e99de41f59faf945196cb2c3b8c2160a0a8a54219e0c34ddbf87e7e31d488d5583810cca028522e98a9ddaf", 0x3, r1, 0x4}, 0x38) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1}, 0x6) (rerun: 32) 07:55:28 executing program 0: getgid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) getgid() (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) (async) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1a000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x14}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/169, &(0x7f0000001140)="563520c4e6725eb8b058481c57e5b8f9a20238b21acd07327f6b509e2cd6a22e1a1c77ec0fae7677ed9ec5be6e0cc34e5c37a74e379f16e672b29258f0b2cab5d2f5e89a1956e44d499fb01f74ad88b84219bd32b3439ed6141343776f8783ee220cd23c35e14693835a0cc0a8436362717ca05b92235d4f39550de10d55c67c1fdb75bc4675efd6dab99eef", &(0x7f0000001200)="52596a9bc2cb4c944c57d34b124ab5d035d8bda4f602fd96adf229d81b0fca6bba70c0e8bc4340fbbc20c28ba22b5d308666345d61ed77bfc060a0321088dc859e99de41f59faf945196cb2c3b8c2160a0a8a54219e0c34ddbf87e7e31d488d5583810cca028522e98a9ddaf", 0x3, r1, 0x4}, 0x38) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x4) (rerun: 32) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) [ 3271.389917][T21184] selinux_netlink_send: 100 callbacks suppressed [ 3271.389933][T21184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21184 comm=syz-executor.1 07:55:28 executing program 0: getgid() (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) (async) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1b000000}, 0x48) 07:55:28 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000101410002abd7000ffdbdf2508004a000000000008004f000200000008004b00130000db08004c000100000008004f0000000000080003000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x5) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xf, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b980000}, @jmp={0x5, 0x0, 0x8, 0x6, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd2d}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0x18, 0x1}, @ldst={0x2, 0x0, 0x3, 0x5, 0x3, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001340)={0xfffffff7, 0x7, 0xafd9, 0x1, 0x9, 0x734}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x2}, 0x3c) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1c000000}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_RMID(r1, 0x0) 07:55:28 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000101410002abd7000ffdbdf2508004a000000000008004f000200000008004b00130000db08004c000100000008004f0000000000080003000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x5) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x15}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) [ 3271.450710][T21221] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21221 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xf, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b980000}, @jmp={0x5, 0x0, 0x8, 0x6, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd2d}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0x18, 0x1}, @ldst={0x2, 0x0, 0x3, 0x5, 0x3, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001340)={0xfffffff7, 0x7, 0xafd9, 0x1, 0x9, 0x734}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x2}, 0x3c) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) msgget$private(0x0, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1d000000}, 0x48) 07:55:28 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000101410002abd7000ffdbdf2508004a000000000008004f000200000008004b00130000db08004c000100000008004f0000000000080003000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1e000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xf, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b980000}, @jmp={0x5, 0x0, 0x8, 0x6, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd2d}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0x18, 0x1}, @ldst={0x2, 0x0, 0x3, 0x5, 0x3, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001340)={0xfffffff7, 0x7, 0xafd9, 0x1, 0x9, 0x734}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x2}, 0x3c) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x27, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x16}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1f000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) [ 3271.530393][T21258] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21258 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x27, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x20000000}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x21000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) (async) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x27, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x18}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) [ 3271.604219][T21294] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21294 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x22000000}, 0x48) 07:55:28 executing program 2: r0 = memfd_secret(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x400002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendto$packet(r0, &(0x7f0000000080)="4af78cba9b592c17d1fc38b6d4f2973aec8b9e07da153c886872fe690cb2ec2778f8e939fa2be09c277e5e488f5d8f8fcd83193862d13ebd24b16901b799428d4e7840c0e6c45c4c8ee26d8dbfbc56864f9bd636a5e8041b10fbbdb85f5de02c453b9dca50b6024a3ef9d918560c31a00a19f42765e67619761923bb4ee09e31f6bd13057bc181c3c5a3d984f7fa0b84937438ba00dca5ec5565377bf99afbdd92b7ab1049d5fe5ad3836403a10c6726a7dbe351524fc7215b4293f310483899aebb", 0xc2, 0x40050, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x3}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x16100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x19}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = memfd_secret(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x400002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendto$packet(r0, &(0x7f0000000080)="4af78cba9b592c17d1fc38b6d4f2973aec8b9e07da153c886872fe690cb2ec2778f8e939fa2be09c277e5e488f5d8f8fcd83193862d13ebd24b16901b799428d4e7840c0e6c45c4c8ee26d8dbfbc56864f9bd636a5e8041b10fbbdb85f5de02c453b9dca50b6024a3ef9d918560c31a00a19f42765e67619761923bb4ee09e31f6bd13057bc181c3c5a3d984f7fa0b84937438ba00dca5ec5565377bf99afbdd92b7ab1049d5fe5ad3836403a10c6726a7dbe351524fc7215b4293f310483899aebb", 0xc2, 0x40050, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x3}, 0x14) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x16100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) [ 3271.666690][T21332] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21332 comm=syz-executor.1 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = memfd_secret(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x400002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendto$packet(r0, &(0x7f0000000080)="4af78cba9b592c17d1fc38b6d4f2973aec8b9e07da153c886872fe690cb2ec2778f8e939fa2be09c277e5e488f5d8f8fcd83193862d13ebd24b16901b799428d4e7840c0e6c45c4c8ee26d8dbfbc56864f9bd636a5e8041b10fbbdb85f5de02c453b9dca50b6024a3ef9d918560c31a00a19f42765e67619761923bb4ee09e31f6bd13057bc181c3c5a3d984f7fa0b84937438ba00dca5ec5565377bf99afbdd92b7ab1049d5fe5ad3836403a10c6726a7dbe351524fc7215b4293f310483899aebb", 0xc2, 0x40050, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x3}, 0x14) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x23000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) (async) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x80010000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x16100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) [ 3271.720062][T21349] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21349 comm=syz-executor.1 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1a}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:28 executing program 2: r0 = getgid() r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x400}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) 07:55:28 executing program 2: r0 = getgid() r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) getgid() (async) getgid() (async) setresgid(0xffffffffffffffff, r0, r1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) (async) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x400}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) msgctl$IPC_RMID(r2, 0x0) (async) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) (async) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x3}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1c}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x400}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) 07:55:28 executing program 2: r0 = getgid() (async) r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) [ 3271.809418][T21397] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21397 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) msgget$private(0x0, 0x0) (async) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) (async) msgctl$IPC_RMID(r2, 0x0) (async) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) (async) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x5}, 0x48) [ 3271.885614][T21437] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21437 comm=syz-executor.1 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) (async) 07:55:29 executing program 0: pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="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", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) r7 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) r8 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1d}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x6}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x16, 0xa1, &(0x7f0000000080)="0dc71a507f4d24d0ae144256b69c392b7707ff3712706e9f09b93f01e6075440560c14ccb74aefc14145200ce2fff00aed9f77c7e8563c058c0e940d4bd1cda45f560e94c765ee7826c2913afa6aa27ac88b8b4d6ee4738344c7f81712d8ee4c5ad0f8ceb6d305555ecbc7e62ff99e25339e268055f69510102b1759d2240dddcc2a5e0afc8db003f051778bbfaeb5fee0569c2fd3fffcd6205158d12872b10a59"}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x16, 0xa1, &(0x7f0000000080)="0dc71a507f4d24d0ae144256b69c392b7707ff3712706e9f09b93f01e6075440560c14ccb74aefc14145200ce2fff00aed9f77c7e8563c058c0e940d4bd1cda45f560e94c765ee7826c2913afa6aa27ac88b8b4d6ee4738344c7f81712d8ee4c5ad0f8ceb6d305555ecbc7e62ff99e25339e268055f69510102b1759d2240dddcc2a5e0afc8db003f051778bbfaeb5fee0569c2fd3fffcd6205158d12872b10a59"}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x7}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 0: pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="ec8a824215508defb3886d2c8f3925bf974101fcffff3b1eaf71e35ef76c7ee61cae599a1bb576530a2fe91ea8945eef324f836a80177b645efa22c83212608099d7e4763c008c07b52f63763f3f0c7edd7bfd8753a1b330fcac81280816d9bcac4481b27e63a5abd9a32584b560c917401f35c014edf4e405cc2858f618668a1cea6c8d458ae23233f556fd73935a0873a55445e564bd7619345aade0b9adc24dfdfc6daf891c0a21550c7bd52fbc18733ea3a52f3f77a565f32fd49497e5e7d3d2afdf75d0ea5ab0a0028e2b2562656ca62402a16af882270e3578c58874748b2ca808edbcc003ab10b0966f2666658a578dc1eaaa86ed1f1af9ba10f0d7ace24030aedce6937d9699a85554801083e80498853a861605b4f994fb71ddd9d46184f0d2fdfa5a6c07dfcf74aebfbccba294d59a2a1762fb5b3967e85e9a65f7bd26aa8cff5f43b992680c0c7c3a794c1c2f37fd06175471dd9a42008bfd0c12fcc5b81332f603f4f56ddea3d929fbc240ecbff9a3d33181fee32dd440213b931c149080c504f3c82eeb", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) r7 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) r8 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) pipe2$watch_queue(&(0x7f0000000600), 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="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", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) (async) syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) (async) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x8}, 0x48) 07:55:29 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1e}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x16, 0xa1, &(0x7f0000000080)="0dc71a507f4d24d0ae144256b69c392b7707ff3712706e9f09b93f01e6075440560c14ccb74aefc14145200ce2fff00aed9f77c7e8563c058c0e940d4bd1cda45f560e94c765ee7826c2913afa6aa27ac88b8b4d6ee4738344c7f81712d8ee4c5ad0f8ceb6d305555ecbc7e62ff99e25339e268055f69510102b1759d2240dddcc2a5e0afc8db003f051778bbfaeb5fee0569c2fd3fffcd6205158d12872b10a59"}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 3271.977258][T21477] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21477 comm=syz-executor.1 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x9}, 0x48) 07:55:29 executing program 0: pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="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", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) r7 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) r8 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) pipe2$watch_queue(&(0x7f0000000600), 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="ec8a824215508defb3886d2c8f3925bf974101fcffff3b1eaf71e35ef76c7ee61cae599a1bb576530a2fe91ea8945eef324f836a80177b645efa22c83212608099d7e4763c008c07b52f63763f3f0c7edd7bfd8753a1b330fcac81280816d9bcac4481b27e63a5abd9a32584b560c917401f35c014edf4e405cc2858f618668a1cea6c8d458ae23233f556fd73935a0873a55445e564bd7619345aade0b9adc24dfdfc6daf891c0a21550c7bd52fbc18733ea3a52f3f77a565f32fd49497e5e7d3d2afdf75d0ea5ab0a0028e2b2562656ca62402a16af882270e3578c58874748b2ca808edbcc003ab10b0966f2666658a578dc1eaaa86ed1f1af9ba10f0d7ace24030aedce6937d9699a85554801083e80498853a861605b4f994fb71ddd9d46184f0d2fdfa5a6c07dfcf74aebfbccba294d59a2a1762fb5b3967e85e9a65f7bd26aa8cff5f43b992680c0c7c3a794c1c2f37fd06175471dd9a42008bfd0c12fcc5b81332f603f4f56ddea3d929fbc240ecbff9a3d33181fee32dd440213b931c149080c504f3c82eeb", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) (async) syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) (async) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) memfd_secret(0x0) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) 07:55:29 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xa}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) memfd_secret(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) (async) memfd_secret(0x0) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xb}, 0x48) [ 3272.061425][T21520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21520 comm=syz-executor.1 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x21}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) (async) 07:55:29 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) (async) memfd_secret(0x0) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xc}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/37) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xd}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1f, 0x1, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x22}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xe}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1f, 0x1, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x1f, 0x1, 0x1000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/37) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x24}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xf}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1f, 0x1, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x1f, 0x1, 0x1000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/37) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x25}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x10}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x26}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x11}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x28}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 5: getitimer(0x0, &(0x7f0000000240)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x12}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x60}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x13}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 07:55:29 executing program 5: getitimer(0x0, &(0x7f0000000240)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) getitimer(0x0, &(0x7f0000000240)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) (async) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4040008}, 0x2400c084) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: getitimer(0x0, &(0x7f0000000240)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) getitimer(0x0, &(0x7f0000000240)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) (async) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x14}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4040008}, 0x2400c084) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x15}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8017ad9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x14}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="500100000314ec3c26bd70009df7229250e3d42a19fedbdf250900020073797a300000000008004100736977001400330076657468315f746f5f627269646765000900020073797a320000000008004100736977001400330074756e6c3000000000000000000000000900020073797a300000000008004100727865001400330070696d726567310000000000000000000900020073797a3100000000080041007278650014003300766c616e3000000000000000000000000900020073797a320000000008004100727865001400330076657468305f766c616e0000000000000900020073797a31000000000800410072786500140033006d6163766c616e3000000000000000bcca14c2000900020373797a3200000000080041007369770014003300766972745f77696669300000000000000900020073797a3000000000080041007278650014003300786672"], 0x150}, 0x1, 0x0, 0x0, 0x4040008}, 0x2400c084) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080), 0x80) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1000, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x16}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8017ad9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x14}, 0x10) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xd2e, 0x9, 0x2, 0x3}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) memfd_secret(0x80000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="013004260000000000004d9a2bb5ea3a7e37f2416a56e43b190139080000000000000018d20065471cd3b0a3e39b6a4875548d8c910045ff4d41195b9e83d1634adfa08e9b812017ab0c1f2031c754845d2b798a2c27c3c7f77b1d308c1a8ec387ac491a264c39874195310789b40ea1b63a1b5257e3a60d984ed8ed3fdde27f4b6bff1b10523c84c2f92e"], 0x2a) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 64) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) (rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x17}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x18}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1000, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8017ad9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x14}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xd2e, 0x9, 0x2, 0x3}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) memfd_secret(0x80000) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="013004260000000000004d9a2bb5ea3a7e37f2416a56e43b190139080000000000000018d20065471cd3b0a3e39b6a4875548d8c910045ff4d41195b9e83d1634adfa08e9b812017ab0c1f2031c754845d2b798a2c27c3c7f77b1d308c1a8ec387ac491a264c39874195310789b40ea1b63a1b5257e3a60d984ed8ed3fdde27f4b6bff1b10523c84c2f92e"], 0x2a) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x2}], 0xc, 0x0, &(0x7f0000000080)="0919d32cbf3f448b714aa3bf"}) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1000, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x19}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xd2e, 0x9, 0x2, 0x3}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) memfd_secret(0x80000) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="013004260000000000004d9a2bb5ea3a7e37f2416a56e43b190139080000000000000018d20065471cd3b0a3e39b6a4875548d8c910045ff4d41195b9e83d1634adfa08e9b812017ab0c1f2031c754845d2b798a2c27c3c7f77b1d308c1a8ec387ac491a264c39874195310789b40ea1b63a1b5257e3a60d984ed8ed3fdde27f4b6bff1b10523c84c2f92e"], 0x2a) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x2}], 0xc, 0x0, &(0x7f0000000080)="0919d32cbf3f448b714aa3bf"}) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x2}], 0xc, 0x0, &(0x7f0000000080)="0919d32cbf3f448b714aa3bf"}) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1a}, 0x48) 07:55:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0xa}, 0xfffffe96) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x8) 07:55:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0xa}, 0xfffffe96) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0xf}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1b}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x8) (rerun: 64) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0xa}, 0xfffffe96) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x10}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1c}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x8001]) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (rerun: 32) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x8) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1d}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x11}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x8001]) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x12}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1e}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x5, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8000, [0xaa10, 0x81a], 0x7}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x8001]) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x14}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x21}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x15}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) r1 = memfd_secret(0x0) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x5, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8000, [0xaa10, 0x81a], 0x7}, 0x10) 07:55:29 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0xabcc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x418440, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0xff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x22}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0x8], 0x7}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x23}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x16}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x5, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8000, [0xaa10, 0x81a], 0x7}, 0x10) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0x8], 0x7}, 0x10) 07:55:29 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0xabcc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x418440, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0xff}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x18}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0x8], 0x7}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x180}, 0x48) 07:55:29 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0xabcc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x418440, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0xff}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x19}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x300}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1a}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) (async) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x500}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1c}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) (async) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1d}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x600}, 0x48) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1800, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x150, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fda={0x66646185, 0x6, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x6, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x400}], 0x5b, 0x0, &(0x7f0000000600)="a5bef770faf3c8bf1e59f6f25007500c6833ebbb8ffc496e45683cdd274f46fb4a607d025601a3cf10bf2ec98f3eda4f52306bde2c408a9bc90ff750569600e8bde9ee7220d778e3395da2fed9526602d6cad90e2298caacf766a6"}) getpeername$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0xa}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x4) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r2, &(0x7f0000001400)={0x11, 0x0, 0x0}, &(0x7f0000001440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1e}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x700}, 0x48) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1800, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x150, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fda={0x66646185, 0x6, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x6, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x400}], 0x5b, 0x0, &(0x7f0000000600)="a5bef770faf3c8bf1e59f6f25007500c6833ebbb8ffc496e45683cdd274f46fb4a607d025601a3cf10bf2ec98f3eda4f52306bde2c408a9bc90ff750569600e8bde9ee7220d778e3395da2fed9526602d6cad90e2298caacf766a6"}) (async, rerun: 32) getpeername$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0xa}, 0x6) 07:55:30 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f727e3cb9c76614e0c45c57b6cfdb27ab1a095a08a9d20c0ba02d0ed3edfaa983de1b6775e06c44cb6fa8cc832ab059e890a924aeacd2a302dec9d800af1165f1e7e09c720a079e25b97ac64bad6c02384f4ecb2ba28e90e1923154cddec513e2e16", &(0x7f0000000100)=""/131, 0x4}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x900}, 0x48) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1800, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x150, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fda={0x66646185, 0x6, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x6, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x400}], 0x5b, 0x0, &(0x7f0000000600)="a5bef770faf3c8bf1e59f6f25007500c6833ebbb8ffc496e45683cdd274f46fb4a607d025601a3cf10bf2ec98f3eda4f52306bde2c408a9bc90ff750569600e8bde9ee7220d778e3395da2fed9526602d6cad90e2298caacf766a6"}) getpeername$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0xa}, 0x6) (rerun: 32) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r2, &(0x7f0000001400)={0x11, 0x0, 0x0}, &(0x7f0000001440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getpeername$packet(r2, &(0x7f0000001400), &(0x7f0000001440)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xa00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x21}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x4) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async, rerun: 32) getpeername$packet(r2, &(0x7f0000001400)={0x11, 0x0, 0x0}, &(0x7f0000001440)=0x14) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) (async, rerun: 32) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x22}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x4) 07:55:30 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f727e3cb9c76614e0c45c57b6cfdb27ab1a095a08a9d20c0ba02d0ed3edfaa983de1b6775e06c44cb6fa8cc832ab059e890a924aeacd2a302dec9d800af1165f1e7e09c720a079e25b97ac64bad6c02384f4ecb2ba28e90e1923154cddec513e2e16", &(0x7f0000000100)=""/131, 0x4}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xb00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f727e3cb9c76614e0c45c57b6cfdb27ab1a095a08a9d20c0ba02d0ed3edfaa983de1b6775e06c44cb6fa8cc832ab059e890a924aeacd2a302dec9d800af1165f1e7e09c720a079e25b97ac64bad6c02384f4ecb2ba28e90e1923154cddec513e2e16", &(0x7f0000000100)=""/131, 0x4}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xc00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x24}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xa1, &(0x7f0000001300)=""/161, 0x41000, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x6, 0x1, 0x2}, 0x10}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) sendto$packet(r1, &(0x7f00000014c0)="f6fb3d59a15ead26825972b49b9fbfa91d79a900ae9be118dbecbf6af2a932db64b2a01d76a7bf4ffd9f3491b721692ebf75511a9cf0cb", 0x37, 0x888, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xd00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x25}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async, rerun: 32) r3 = memfd_secret(0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xa1, &(0x7f0000001300)=""/161, 0x41000, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x6, 0x1, 0x2}, 0x10}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendto$packet(r1, &(0x7f00000014c0)="f6fb3d59a15ead26825972b49b9fbfa91d79a900ae9be118dbecbf6af2a932db64b2a01d76a7bf4ffd9f3491b721692ebf75511a9cf0cb", 0x37, 0x888, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) (async) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x26}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xe00}, 0x48) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f00000000c0), 0x80) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='bbr\x00', 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) (async) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x28}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xa1, &(0x7f0000001300)=""/161, 0x41000, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x6, 0x1, 0x2}, 0x10}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendto$packet(r1, &(0x7f00000014c0)="f6fb3d59a15ead26825972b49b9fbfa91d79a900ae9be118dbecbf6af2a932db64b2a01d76a7bf4ffd9f3491b721692ebf75511a9cf0cb", 0x37, 0x888, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async, rerun: 32) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='bbr\x00', 0x4) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xf00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x26, 0x6, 0x80000001) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x6e, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200013}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40814) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x60}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f00000000c0), 0x80) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='bbr\x00', 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1100}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1200}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x300}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket(0x26, 0x6, 0x80000001) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x6e, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200013}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40814) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x600}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1300}, 0x48) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0xf00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x26, 0x6, 0x80000001) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x6e, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200013}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40814) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (rerun: 64) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1400}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1100}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:30 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1500}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x9, 0x3ff, 0x0, "73a7079e1141df282a25559ec6a73e397b2121f9b8e394f7ecc9c6f7ec7bcba0"}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 07:55:30 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1200}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async, rerun: 32) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x9, 0x3ff, 0x0, "73a7079e1141df282a25559ec6a73e397b2121f9b8e394f7ecc9c6f7ec7bcba0"}) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1600}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x9, 0x3ff, 0x0, "73a7079e1141df282a25559ec6a73e397b2121f9b8e394f7ecc9c6f7ec7bcba0"}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1400}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1700}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1800}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1500}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x80, [0x5, 0x1000], 0x1ff}, 0x10) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1900}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1600}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x80, [0x5, 0x1000], 0x1ff}, 0x10) 07:55:30 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1a00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1800}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x80, [0x5, 0x1000], 0x1ff}, 0x10) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1b00}, 0x48) 07:55:30 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1900}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1c00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1a00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1d00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1c00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x300, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x28080}, 0x8) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1d00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1e00}, 0x48) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x300, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x28080}, 0x8) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) [ 3273.728245][T11456] ================================================================== [ 3273.736341][T11456] BUG: KCSAN: data-race in ps2_do_sendbyte / ps2_handle_ack [ 3273.743641][T11456] [ 3273.745967][T11456] write to 0xffff888103815840 of 8 bytes by interrupt on cpu 1: [ 3273.753597][T11456] ps2_handle_ack+0x1b3/0x320 [ 3273.758274][T11456] atkbd_interrupt+0xa5b/0xc30 [ 3273.763026][T11456] serio_interrupt+0x5d/0xe0 [ 3273.767620][T11456] i8042_interrupt+0x380/0x710 [ 3273.772374][T11456] __handle_irq_event_percpu+0x92/0x400 [ 3273.777929][T11456] handle_irq_event+0x60/0xf0 [ 3273.782611][T11456] handle_edge_irq+0x17e/0x5a0 [ 3273.787364][T11456] __common_interrupt+0x60/0x100 [ 3273.792317][T11456] common_interrupt+0x9a/0xc0 [ 3273.796990][T11456] asm_common_interrupt+0x22/0x40 [ 3273.802008][T11456] __tsan_read8+0x11f/0x180 [ 3273.806502][T11456] unlock_page_memcg+0x2d/0x110 [ 3273.811341][T11456] page_add_file_rmap+0x5e/0x1b0 [ 3273.816280][T11456] do_set_pte+0x258/0x500 [ 3273.820598][T11456] filemap_map_pages+0x595/0xae0 [ 3273.825543][T11456] do_fault+0x433/0xb20 [ 3273.829701][T11456] handle_mm_fault+0x889/0xa90 [ 3273.834455][T11456] do_user_addr_fault+0x4a1/0x980 [ 3273.839471][T11456] exc_page_fault+0x60/0x160 [ 3273.844048][T11456] asm_exc_page_fault+0x22/0x30 [ 3273.848892][T11456] [ 3273.851201][T11456] read to 0xffff888103815840 of 8 bytes by task 11456 on cpu 0: [ 3273.858817][T11456] ps2_do_sendbyte+0x1ae/0x380 [ 3273.863571][T11456] __ps2_command+0x35e/0x8c0 [ 3273.868151][T11456] ps2_command+0x51/0x90 [ 3273.872385][T11456] atkbd_event_work+0x2a8/0x2e0 [ 3273.877247][T11456] process_one_work+0x3d3/0x720 [ 3273.882089][T11456] worker_thread+0x618/0xa70 [ 3273.886667][T11456] kthread+0x1a9/0x1e0 [ 3273.890721][T11456] ret_from_fork+0x1f/0x30 [ 3273.895141][T11456] [ 3273.897451][T11456] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 3273.904541][T11456] [ 3273.906851][T11456] Reported by Kernel Concurrency Sanitizer on: [ 3273.912985][T11456] CPU: 0 PID: 11456 Comm: kworker/0:3 Not tainted 5.19.0-syzkaller-13616-gf41445645ab5-dirty #0 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1e00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x300, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x28080}, 0x8) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x2}, 0x48) 07:55:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x41, 0x5, 0xe28b) bind$bt_hci(r1, &(0x7f0000000080), 0x6ca7b4cf5d86f6dd) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) [ 3273.923385][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3273.933428][T11456] Workqueue: events atkbd_event_work [ 3273.938705][T11456] ================================================================== 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1f00}, 0x48) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x2}, 0x48) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/68) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x2b, 0x2, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001380)=0xffffff0f, 0x4) r2 = memfd_secret(0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000013c0)=ANY=[@ANYBLOB="05000000000000001820000034e4fe2f3a7a84f935", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32=r3, @ANYBLOB="00000000000000004000000001000000009a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000001340)=0xce1, 0x4) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'wlan0\x00', 0x200}) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000100)="704e641e04353c4890934613e767e6273ae08b4e2808d78caddb1d98b7c4bc4b47eb9bd78cb828d5490128f007ea5efb961656cefc647b5df8ff766073e0562a064bab91da5fba488a3bdccc0af5f8891917c09123e5401ffc817d6fe79c03c9550f0ca3c9b6eb6305ed02495ea322ed2e13269e2a9d14a39ab10bf94003b1d859e15de941a4efd2df6987b84b19d2398ddd47669ecef64ea3782da29804487f13648d35eaecbd45c007bd8a18ac38c55785fe93b246653cbdae962905870909f35cf7f94c7ea8d87ce8cbd972713e091f34a5cc6651f47188f5fb80ae8c65eef4d782b9c462ea4b167a4f9b52c404406c12e90ddad47e851fdba37536ab536c666fdfabe1bd743ee8c313e0e834269e089663adb70816af15c70c55bfe17ba75d93036a885ffe6b5e33b0e526d2a5558768abf88bc0ea0f02ae85b91d9057adfdac04d1fc6e2c993de469a314ebe65e18d1c7d042656aa89230c97259daf08c7530d73b29602e15623b44b3cde37ea9024bd4dfde779398042830ec7ebcc6b7e791824185a9d5e3ce217cb4b93f3e67793c86e32eed6eacde5ded110da10473febc285158ad86c856a26f516841e5d4b2fca39d35f9dcf5bf420096efad6659880b531671c0f6719dda4606bda858a031b636c73e7dedf56f98127e5a459d24f9e2fea61996ba85effdb5f1c6c7fc5df4b0f49abcd0d291a0bddc83c7439add0addfff74591fef319b651ad9331765d78edfdc5da1ee8caf62eb2b051be5d81daac420d6712250a693480fed241ba2aadc19061ccfb1c7ae8832c588e31637bb7fefdfa3eac519c451ad953969f103667c1ed21f4734d26187dab5cc411dc56ac7defcc067eaefa3bd844b1da40022a6c017f004400ecdcf07fd4fb77892fc6959e226197074ddc9a2d1838d6ddb85dce3d5f7fa60006cde24481ef95106a45b324cd6042e936f9e7bb2af707052a1e8abe4d4b3799cc824ad41257ed6c0a3be3be9f6c54205de1e2c18c5e3a129a956cafa97db485639022a8d4870a6f81b2818f9f776b2d4fcd5ff6505d972d7f2b0140499d7510e45efe1d9f4ef50e470fc281e5de87791592985d48f42fff08f1630871b13daacdbca1b0e056359d3a69ba70e7494483f764b2c10725228fc77cb58079a95e5b83aeff64b42f8b3830ae022f7b54c3b74633f4371e7e1c9271cf8ea00cd7cfbd317177e88f10fee90b77a6466ccede69b236e92b5e9390ebb0e4ed102ba6d41d2ec4c2472e049256e75fbd6f6c075f436c4b10a165fbcd1ddfb72e4096ad2281164f8b1fe636c82d8ab509d20f5cedd39944b24ce895db7b6f83167bf510c6ad91c82ab12d83d2f791a04f61fa77ac65ae2fbe8e87df3b6b150d86b89d7ee4e7b9620912ae0b1a00ca8126eef12e278a6832b19e5d8ec749d6faee0872cd65dad92e2a4c085eff9ca07de72a92a24afcd93a006e6e078fdbe2fa0c661f1ad8636ed5d598f437a2965891fcb61fe271331b6a96e8b79eff8d3e6c1ff03725c7317866fdc540626abfb3c15fb426934019e173abb5557bf78796255ef6ca37249548e6f1d1bae5c1b7707cad8d975168ceb04b28c896234175478464a30c47edc734a8649cdcaf52ed6c8a91301d92b9f92897f8434601464c8195204dd138037cbd54ce3cf9f32d319897b62b3bd45a741e5c6a65727cd6d864f276f7f404cf3bf9b1c25da8aca7b7d21b010647fc8e74a8cca16e6208c3d522fea1ce613e7798429faf9389ff696b31aaaba91a358531c4538f224b84e8d25e98bf866d982e2d574b77328ef39e318e891fbc69b5b69bd4c1e955440f6329ba2b3b3576c93b177e230e13c55c739a17c6b9abd2733b3544519761f62e4a3c2cc440a634d467d5c43e136a6fc20d8040bffcbf68a35216fed75d4e22d78fe9eab501a8519ca32477e0904a034b893e9758a744d551b13a28e14439c5eae5caa8d3841e3ed5fb368a52fb081ecbc07cde01f44ced50cae42ce66a6cc1fe3f196a220a0bd97cee3da827fcac72d13976fa83c59ca294f04aafb18bedbb16859f002738c2030a928be69544fa757166e1500a39e3c5d26e8171e3dd20f13897589cbf2c2cad1b1abd386a14d072f45fab35df6e0dd6c181e4e35240148e571c492260eb41573cb69c815073755814b27287686bcfe25b6bc77109975fc8696e0db5a50415cc2f634764fe7217d81707f5ca0a8d35ac222fea463db196f301c889a79d7e562ab75bf4974d64456c112f14be52b331d45b5ed00876dd70f8360be37b2ec86f8ccd7e2b45292465ac21743066d2e0944a9b987d5f784eff5293276c39a3bfc65eaeb4200ffd79387168803e5ba58aa400b00917a1203ab2a61e59fee9fef12c71b482434b29abaace2bbef3dbc9d6319e1995cfb053dc52276959d09c597a8fd3c62a3931a18246d37dcdf61baeb4cf136bd843d60f5eda1db7e6ad66b4ad452ab39aa22ad680bad0432604e22eef49bf6615425430ae5ad1b940e040562d3f46d93d3f38b28f3a07bb88b5e0d98c2616b1b1d5f8ecb5e6f22eed1665fe5f5fd4b296657934673f0c70214129b6ab4c115ba40b14066dd41f9cec29f46cd8ef7424ba7289f5d03b955c6cfa345347988bb0e82048276fafc955e38dac7dd921c90289b61b7fa86b6396679a6d9aea3125436952ed2f7e6875104b2f5ba208565e86b217a06e8b145cc62d3e33f24f913a9ae4f871a65e7067bba4ad039c4bbe796886cd56b48aa975b49f99bee5bd59d0c3cb801ba878ce815d15a8a9dd7127cd423e0daf419ee09eb1a8f029439d50e08400521a75da4830b84776c9a0ccf2a50fa26295d2177ca6dd34c5ae5b009b95f598c689944241b8105d9026ed3ac9c5ada4bd6951dd202c0b2f3b6305f2d0d43723edf1c4a04a508d5a89dc189b8f31a83d976a3de62a5758103d209ee125324234084857545878a4c8be0155e358672c18dc7629d6e0c97f4821096279afb0f6089ec4ca095f93b2a68f5b1f949ed5424d6a70bb9cc8c37cc86bf5184dbb7c34cafbc0b2df71d5d2a41d3f72b0b760888bce515f46577f7d051539e8d8b4788e70f95452047f152450d5dbb1497a49968e7c46d5ebcb8296d063ffb6ce201ad8398e43332583df80971ac886554a274eef11aa3f0d24f0f68e7c7b8971bcc365bf9e85fe40f173c51ee194e809fcfe95a50f4f93ae4cb1b1f7a31c5344cda3ae274383cf85be9bffdc1dc39f8772501738e3f0353e116d76043859fd1ed8e35b7c541146a4058985dbcb95de95c596fe70548f740a73c71d83753891e8affb09eb14a7c81804e23e0677f2cee30cd8cce55edfc811259b9ea8abecf19fa2bf7d6e6d0d2484a8990a5f897837a1c089ee3541515404111b1c688668e745ab4f8618465625a18ff6b0922d695577216e1399442f27f2ece2f714cdd3eabec2120493a0d4bf3466f46ca7f98112d74cd93300faee258e9adb811f8429224ad42a32b6d6a3b685b52165247de1d9d89723a38e540eec9f891a471a05b5b2b77a8d91a1dc4028a783343c25e91e83dfd042767d600c11129cb8a10351d3e37a4496e38e16b6ae041508555efa3f6812be35297c7df70e79fa723a989a0381f957351b98548b6804c06f821fad15cb25eb1b21682c96af2742b73176040e332e754a97518bca69bc3a2c0f944d1604838ebf9d6c81e6be45bee21603b5d2f269790270936ef2210aca36f92fcf9826ba644f643ad8bfeb45b0b3c946c28f6a0775f8acdc2605f19e559e76a6459f047776538c1e82833d50f9e807edb3cc4b7aaa63a21be29c847f6a90abb51523b64326ee2be10ac9aba0fde53d8eb05cfbc18843e2d2c5c4f784224d82107aa3bdc11f17789c2792407e4932e9d11a952e9454ccee9e4f07ee5e755cbe645977656a1702185ff23c878027003a515ed2f638585eb36fd1b3119028c10877df031c5ec3da255fd4eca27a86acd8b95eb10d882c976eb8bfb01d91597b0a54602158cb20a6252d4293998df4b6fdfe9a378788e851dbbfee2ad6a19a07d5120aed182f2d0bf0a7a11f78b66dec23b2b0a05bd1273ce6e0f0506c7de1bdbe33c6545a65b9913b5384a4303378403a3189ccb6ff9dc0ccb84c1e63f0ce368f95dba124309e7369016b9a1065667222ecded688b472803fa0c54b9b423237ee7edf81af5852774900faabada91b093856a206c25903a35c99ef2f4d533a0745c606e8fdbc4a7778232319c909a03eb5097962e96810a62fbef34c33cf75f9c4173b6f0d4f03686632cd76f9da406c708b384436287d1c96b934b270ee7594a734d370aa43128b5fad5df741ac6caae08da0024df188f591fb028b72589cecd0559a3789a5accf26c3c7ac50a6aba1950f0a13d8d358b247026d6b3b1cc130dbe71d1e1657cb5ece3bcc003d73593c0a27e5ee675dc61099065d50238dbec34a1ef219b2190751b863d8feca67f01b565937484eb19bd5298fdeeca8f0a2fb5fe74655f1a21bbf29f84ffc45a5a700ac93a30ecf9a7b35c5f4ccd5574b9176076f02e25a167310edc08784915a24483aa350d2eb295ac30ab7f21cb578e0143807eec9c127a967de3558da74fe06034d075571f072b4f7539f2915b81ea816e5fba87dd960bc9dc5b242319d2db87ce777e386e9b7b3a58449cf51f6646aeb2185afef885c16a9fea182df526dd4b2235890cf323286f45d2471557c64f9eeba5b315ec36d090191b88e420abb8a85bdebebc9ccde729a6e75cab60bc5026a06ef876f7ef0d67111393ef5ec631dfc823ab914566fb57ecda0efde90653562b3ea2a024c2a37eb6f6ef3ffcaaa3a967da9cf00a1dfb176097814f59023e2fb70b77a90136f58c0036c2278799da79ffafa1ecdddd9f3f67f1823269de0ac7d13b781bc3efda56bdd6613448bc537b529b8105db4815259f0dd11f4027217e37c01f8aa38a4ba95178e5c23502db81a46c2d4a5c95fe775202a53bbcb4334959829a97aa18fe61df9bf39397a1f91ca02c4d130314be0fc3e8bfedd73cf64a6fbc7f993de3c2efca57ff47dfb116da341c38c71488c007342edd0d0338c7519782a418d8b7daaff17813e3b5e1ca3aff834bd1ac7d41439bf8505c2127fb54e9cf95af819cf46d8cd3bebc4914b3173f63e34be97fb0c6d2a46ebaee361f7c53056ab635769fa152c2b98308afd0f16ef54ec78f3d51fc9e772f9655866960aec17e058a64daed739d125649c3cc4780b7acb52636c219fc271d75d943bcd828617193525a838c2324c186099f61db7a4f9a6e819040e3e723ab637d24a8982d31cd1c377bcd20bbdc9dcdc5bf38e6e3cb34a475cd37ae424f67b0413f22818028c17c647e41e116e6f2799607343e0293c3779141cc5ab12c59591840c95983904a72b47a55bcebcc5108f3797189f4a4b9ae4bc390038b4989ba9f5db26a6ab308d4d98f2f4dfa89ac745ce3990c321ce9b32004075fd9e4096f659063288aaa0b1967a8371d9eb01b6a2efcafc9dc6807f44afcc75ca219c8de228fc3752f9a52ebd1baea40a0ead263e1cb7131b1ec125dd96de5d583a9e80149584ecca7120b2afe5fcd6b18275b40321e2ec54f6d7e0ac3718e81c4d048830299fa6ca6793ea49433ade33d90066c4c0b13750bd402b70a4db270663212aa9c5cf59d1a1cffbf21251ef7ead653a81e10ce0062ba31c73a22832dc84d1be6dff3deefe25b7445db6b4937d50466ef4a1bb922213215af49f3ada9e299295c47a0df05798aaf97676ba87a212250a2056bbc1be504a615bac") ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000001440)=""/88) 07:55:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = socket(0x41, 0x5, 0xe28b) bind$bt_hci(r1, &(0x7f0000000080), 0x6ca7b4cf5d86f6dd) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2000}, 0x48) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x2}, 0x48) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2100}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/68) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = socket(0x2b, 0x2, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001380)=0xffffff0f, 0x4) (async) r2 = memfd_secret(0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000013c0)=ANY=[@ANYBLOB="05000000000000001820000034e4fe2f3a7a84f935", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32=r3, @ANYBLOB="00000000000000004000000001000000009a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r4 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000001340)=0xce1, 0x4) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'wlan0\x00', 0x200}) (async) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000100)="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") (async, rerun: 64) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000001440)=""/88) (rerun: 64) 07:55:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) r1 = socket(0x41, 0x5, 0xe28b) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000080), 0x6ca7b4cf5d86f6dd) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000508c45518200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="24c4cde72096c7aa8689c0701c563b45f10acf29656b52e23220687d2d4834f17ba649c3d3815e6e0fa3de8007907cc27df3496794e8c9e6ad11e9a9f94c09e8ea3141875df883c3e76aee7667b37f8391cdb381abd59fa4a08da414f64394b9f5b1d0b9777ec9483d42021fdd11c7efde7600200012730ea82b51f496f29e91e961f022697e0ecaac5c0f81edd9101f53f6c7426d78b14e806d2c5b124e89eaaec3ddc6da832f15d17956ba87d8d0ab7bf9a7014b4843c68a3e250dec60468cb70b837aebb80bbdef86cd60cd632b1823bfecc0e3923cffb0125fbb4ae18d3637cd89848013754f70ddea61", 0xec) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="01162412a1fbffff1820000019e5c754ccc894a00bc4943992326319", @ANYRES32=r3, @ANYBLOB="000000000500000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r4, 0x7}) r5 = memfd_secret(0x80000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x9a, &(0x7f0000001380)=""/154, 0x41100, 0xc, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x14b53, r6}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001980)={0x59c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e468c06}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b0}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff9, 0xee, 0x5, 0x80100}, {0x400, 0x0, 0x6, 0x6}, {0x893c, 0xb1, 0x7}, {0x8, 0x3, 0x7}, {0x5, 0x80, 0x1, 0x9}, {0x8000, 0x20, 0x5, 0x1}, {0x20, 0xf8, 0x40, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x3f, 0x40, 0x200}, {0x5, 0x20, 0x1, 0x8}, {0x1, 0x5, 0x81, 0x5}, {0x2ffe, 0x2, 0x5, 0x6}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3f, 0x4, 0x0, 0x8}, {0x8, 0x3, 0x0, 0xdb2d}, {0x9, 0x1, 0x6}, {0x1, 0x1, 0x3f, 0x10000}, {0x3, 0x2, 0x64, 0x7fff}, {0x8000, 0x8, 0x9, 0x191}, {0x6, 0x8, 0x4, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008040) select(0x40, &(0x7f0000001640)={0x2, 0x1f, 0x1, 0x6c, 0x8, 0x1ff, 0x7ff, 0x8}, &(0x7f0000001680)={0x92, 0x5, 0x8, 0x20, 0x1f, 0x47c9, 0x7ff, 0x4}, &(0x7f00000016c0)={0x3, 0xfffffffffffffff7, 0x6, 0x401, 0x6, 0x1, 0x4, 0x66}, &(0x7f0000001700)={0x77359400}) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:31 executing program 5: r0 = memfd_secret(0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00fcff0000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000001300)="c01cbe91fca1427fed73bd17dae0a0a4e2ae86b4064c0f568cfdb2b59faa0e6c1e4af3e2a0786de2b05c3c64c38e76c8787f423712b75ccb48d674dd388a6ac7a765de25882fdce3ef838e8befd9768a8533da35ac8fa0da3b174aa1e8a42f318b84b6079453e75d95551a37925d81d8af8208b798ec23fd14059725435e9111f315860dbd81ead88d48ef278b085d", &(0x7f00000013c0)=""/250, 0x4}, 0x20) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/68) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x2b, 0x2, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000001380)=0xffffff0f, 0x4) r2 = memfd_secret(0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000013c0)=ANY=[@ANYBLOB="05000000000000001820000034e4fe2f3a7a84f935", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32=r3, @ANYBLOB="00000000000000004000000001000000009a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000001340)=0xce1, 0x4) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'wlan0\x00', 0x200}) (async) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000100)="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") (async) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000001440)=""/88) 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2100}, 0x48) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2200}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000508c45518200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="24c4cde72096c7aa8689c0701c563b45f10acf29656b52e23220687d2d4834f17ba649c3d3815e6e0fa3de8007907cc27df3496794e8c9e6ad11e9a9f94c09e8ea3141875df883c3e76aee7667b37f8391cdb381abd59fa4a08da414f64394b9f5b1d0b9777ec9483d42021fdd11c7efde7600200012730ea82b51f496f29e91e961f022697e0ecaac5c0f81edd9101f53f6c7426d78b14e806d2c5b124e89eaaec3ddc6da832f15d17956ba87d8d0ab7bf9a7014b4843c68a3e250dec60468cb70b837aebb80bbdef86cd60cd632b1823bfecc0e3923cffb0125fbb4ae18d3637cd89848013754f70ddea61", 0xec) r2 = memfd_secret(0x0) (async) r3 = memfd_secret(0x0) (async) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="01162412a1fbffff1820000019e5c754ccc894a00bc4943992326319", @ANYRES32=r3, @ANYBLOB="000000000500000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r4, 0x7}) (async, rerun: 64) r5 = memfd_secret(0x80000) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x9a, &(0x7f0000001380)=""/154, 0x41100, 0xc, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x14b53, r6}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001980)={0x59c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e468c06}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b0}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff9, 0xee, 0x5, 0x80100}, {0x400, 0x0, 0x6, 0x6}, {0x893c, 0xb1, 0x7}, {0x8, 0x3, 0x7}, {0x5, 0x80, 0x1, 0x9}, {0x8000, 0x20, 0x5, 0x1}, {0x20, 0xf8, 0x40, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x3f, 0x40, 0x200}, {0x5, 0x20, 0x1, 0x8}, {0x1, 0x5, 0x81, 0x5}, {0x2ffe, 0x2, 0x5, 0x6}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3f, 0x4, 0x0, 0x8}, {0x8, 0x3, 0x0, 0xdb2d}, {0x9, 0x1, 0x6}, {0x1, 0x1, 0x3f, 0x10000}, {0x3, 0x2, 0x64, 0x7fff}, {0x8000, 0x8, 0x9, 0x191}, {0x6, 0x8, 0x4, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008040) select(0x40, &(0x7f0000001640)={0x2, 0x1f, 0x1, 0x6c, 0x8, 0x1ff, 0x7ff, 0x8}, &(0x7f0000001680)={0x92, 0x5, 0x8, 0x20, 0x1f, 0x47c9, 0x7ff, 0x4}, &(0x7f00000016c0)={0x3, 0xfffffffffffffff7, 0x6, 0x401, 0x6, 0x1, 0x4, 0x66}, &(0x7f0000001700)={0x77359400}) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x42, 0x40, 0x9, 0x2, "fa79f10aa7c9d75456ee28a402306f3e193a2c577f9dd8fd0dea42f22fbb97"}}}, 0x27) pipe2$watch_queue(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001280)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/104, &(0x7f0000001100)="86287faaa77c46", &(0x7f0000001140)="746071816bb8940e6f04afe1d2993e082f829d69ed3b3ffbad43f84c9fdb2f0ff12404de02b0909f9deec192a34931331c8cbd14bc82093255d00d17f987242fbdd377b29c229a40273abc68386dc1192f6bd246cfeeaf0bf53824489b3f51787a59908173b8c37208df69f7ef8a1e87dbb6aa178aa552f3c12b687042fe7540ae52dcd114d101984f455350d883635a8e6578e6de55ef785a742c0f20f82ddff2486969ea0c50622e971d743c2594bbfba1005ca2d8ab09322a1617da77274000c6037eb7574b40c3d0b48f3d0bb90ecb043f5cb3a110817f0ecfca4b1ace6c240daea6ae046cc7bde7ccfe", 0x400, r2}, 0x38) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2200}, 0x48) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2400}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 5: r0 = memfd_secret(0x0) (async, rerun: 32) r1 = memfd_secret(0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00fcff0000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000001300)="c01cbe91fca1427fed73bd17dae0a0a4e2ae86b4064c0f568cfdb2b59faa0e6c1e4af3e2a0786de2b05c3c64c38e76c8787f423712b75ccb48d674dd388a6ac7a765de25882fdce3ef838e8befd9768a8533da35ac8fa0da3b174aa1e8a42f318b84b6079453e75d95551a37925d81d8af8208b798ec23fd14059725435e9111f315860dbd81ead88d48ef278b085d", &(0x7f00000013c0)=""/250, 0x4}, 0x20) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2300}, 0x48) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x42, 0x40, 0x9, 0x2, "fa79f10aa7c9d75456ee28a402306f3e193a2c577f9dd8fd0dea42f22fbb97"}}}, 0x27) (async) pipe2$watch_queue(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001280)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/104, &(0x7f0000001100)="86287faaa77c46", &(0x7f0000001140)="746071816bb8940e6f04afe1d2993e082f829d69ed3b3ffbad43f84c9fdb2f0ff12404de02b0909f9deec192a34931331c8cbd14bc82093255d00d17f987242fbdd377b29c229a40273abc68386dc1192f6bd246cfeeaf0bf53824489b3f51787a59908173b8c37208df69f7ef8a1e87dbb6aa178aa552f3c12b687042fe7540ae52dcd114d101984f455350d883635a8e6578e6de55ef785a742c0f20f82ddff2486969ea0c50622e971d743c2594bbfba1005ca2d8ab09322a1617da77274000c6037eb7574b40c3d0b48f3d0bb90ecb043f5cb3a110817f0ecfca4b1ace6c240daea6ae046cc7bde7ccfe", 0x400, r2}, 0x38) 07:55:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2500}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 5: r0 = memfd_secret(0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00fcff0000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, &(0x7f0000001300)="c01cbe91fca1427fed73bd17dae0a0a4e2ae86b4064c0f568cfdb2b59faa0e6c1e4af3e2a0786de2b05c3c64c38e76c8787f423712b75ccb48d674dd388a6ac7a765de25882fdce3ef838e8befd9768a8533da35ac8fa0da3b174aa1e8a42f318b84b6079453e75d95551a37925d81d8af8208b798ec23fd14059725435e9111f315860dbd81ead88d48ef278b085d", &(0x7f00000013c0)=""/250, 0x4}, 0x20) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000508c45518200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="24c4cde72096c7aa8689c0701c563b45f10acf29656b52e23220687d2d4834f17ba649c3d3815e6e0fa3de8007907cc27df3496794e8c9e6ad11e9a9f94c09e8ea3141875df883c3e76aee7667b37f8391cdb381abd59fa4a08da414f64394b9f5b1d0b9777ec9483d42021fdd11c7efde7600200012730ea82b51f496f29e91e961f022697e0ecaac5c0f81edd9101f53f6c7426d78b14e806d2c5b124e89eaaec3ddc6da832f15d17956ba87d8d0ab7bf9a7014b4843c68a3e250dec60468cb70b837aebb80bbdef86cd60cd632b1823bfecc0e3923cffb0125fbb4ae18d3637cd89848013754f70ddea61", 0xec) (async, rerun: 64) r2 = memfd_secret(0x0) (async, rerun: 64) r3 = memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="01162412a1fbffff1820000019e5c754ccc894a00bc4943992326319", @ANYRES32=r3, @ANYBLOB="000000000500000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r4, 0x7}) (async, rerun: 32) r5 = memfd_secret(0x80000) (async, rerun: 32) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x9a, &(0x7f0000001380)=""/154, 0x41100, 0xc, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x14b53, r6}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) (rerun: 32) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001980)={0x59c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e468c06}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b0}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff9, 0xee, 0x5, 0x80100}, {0x400, 0x0, 0x6, 0x6}, {0x893c, 0xb1, 0x7}, {0x8, 0x3, 0x7}, {0x5, 0x80, 0x1, 0x9}, {0x8000, 0x20, 0x5, 0x1}, {0x20, 0xf8, 0x40, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x3f, 0x40, 0x200}, {0x5, 0x20, 0x1, 0x8}, {0x1, 0x5, 0x81, 0x5}, {0x2ffe, 0x2, 0x5, 0x6}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3f, 0x4, 0x0, 0x8}, {0x8, 0x3, 0x0, 0xdb2d}, {0x9, 0x1, 0x6}, {0x1, 0x1, 0x3f, 0x10000}, {0x3, 0x2, 0x64, 0x7fff}, {0x8000, 0x8, 0x9, 0x191}, {0x6, 0x8, 0x4, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008040) (async) select(0x40, &(0x7f0000001640)={0x2, 0x1f, 0x1, 0x6c, 0x8, 0x1ff, 0x7ff, 0x8}, &(0x7f0000001680)={0x92, 0x5, 0x8, 0x20, 0x1f, 0x47c9, 0x7ff, 0x4}, &(0x7f00000016c0)={0x3, 0xfffffffffffffff7, 0x6, 0x401, 0x6, 0x1, 0x4, 0x66}, &(0x7f0000001700)={0x77359400}) 07:55:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000508c45518200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="24c4cde72096c7aa8689c0701c563b45f10acf29656b52e23220687d2d4834f17ba649c3d3815e6e0fa3de8007907cc27df3496794e8c9e6ad11e9a9f94c09e8ea3141875df883c3e76aee7667b37f8391cdb381abd59fa4a08da414f64394b9f5b1d0b9777ec9483d42021fdd11c7efde7600200012730ea82b51f496f29e91e961f022697e0ecaac5c0f81edd9101f53f6c7426d78b14e806d2c5b124e89eaaec3ddc6da832f15d17956ba87d8d0ab7bf9a7014b4843c68a3e250dec60468cb70b837aebb80bbdef86cd60cd632b1823bfecc0e3923cffb0125fbb4ae18d3637cd89848013754f70ddea61", 0xec) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="01162412a1fbffff1820000019e5c754ccc894a00bc4943992326319", @ANYRES32=r3, @ANYBLOB="000000000500000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r4, 0x7}) r5 = memfd_secret(0x80000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x9a, &(0x7f0000001380)=""/154, 0x41100, 0xc, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x14b53, r6}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001980)={0x59c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e468c06}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b0}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff9, 0xee, 0x5, 0x80100}, {0x400, 0x0, 0x6, 0x6}, {0x893c, 0xb1, 0x7}, {0x8, 0x3, 0x7}, {0x5, 0x80, 0x1, 0x9}, {0x8000, 0x20, 0x5, 0x1}, {0x20, 0xf8, 0x40, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x3f, 0x40, 0x200}, {0x5, 0x20, 0x1, 0x8}, {0x1, 0x5, 0x81, 0x5}, {0x2ffe, 0x2, 0x5, 0x6}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3f, 0x4, 0x0, 0x8}, {0x8, 0x3, 0x0, 0xdb2d}, {0x9, 0x1, 0x6}, {0x1, 0x1, 0x3f, 0x10000}, {0x3, 0x2, 0x64, 0x7fff}, {0x8000, 0x8, 0x9, 0x191}, {0x6, 0x8, 0x4, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008040) select(0x40, &(0x7f0000001640)={0x2, 0x1f, 0x1, 0x6c, 0x8, 0x1ff, 0x7ff, 0x8}, &(0x7f0000001680)={0x92, 0x5, 0x8, 0x20, 0x1f, 0x47c9, 0x7ff, 0x4}, &(0x7f00000016c0)={0x3, 0xfffffffffffffff7, 0x6, 0x401, 0x6, 0x1, 0x4, 0x66}, &(0x7f0000001700)={0x77359400}) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2600}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1000000}, 0x48) 07:55:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_data={{0x2037, 0x23}, {0x42, 0x40, 0x9, 0x2, "fa79f10aa7c9d75456ee28a402306f3e193a2c577f9dd8fd0dea42f22fbb97"}}}, 0x27) (async) pipe2$watch_queue(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001280)={&(0x7f0000000080)="0790bdb748eb8a53a5045bf30d4215cfde00c6f8f97f461d3acb91d7843196b706cce4f96524435d5986937034526afe1cab820a39f3a719883d293d75767917c28af3bb43ffa4d09782167eb3e5bf0e651a3d4baaa4d3ae693dfac981c0254c935b55f25be0914ff1d03e7cb56f6f32e563c0df85b0c5b5fef5d32197ed2a26918074f709cd957ec6f1481351e61af115b3ad0c4237596c30ea5ab6b69f03cb0239d39529cb453a6136f72af1b20fe739939e5769d83d2ceb9fe29d4ca5aaec75d4cd0da4ffb833dba96d4c7035da5efa518e1d8d633b4de2a80a2d5755ec65b468bffb59659cfb5bc4de602e15ebb7ff146966644c31a5646a03a65f18493eea4be66938f795af014a5b2a8dd4f6aa52f58ee36e8c4841083982ac3a7b37b68a7123d91a5474e657156abb691af510c4f7237ca45e9aba17e128a5963f73c0bade6ad3559b4f53b3878ad50b2f897b673d1f94ff3ad22d476699de8f6fd197bc5b87a5cb7ffa7f2fd15205c6d753ad50638342bca41d5337503efb552f7f851cb6980d5b5793a7107ea5380b77179c7a0277d9b71d2c175c900d92296b6f0e87b42dc49158aea28751d1539535f8ce5dd3c618f5787da07a3fabd0a2ca91401f6d789d86a352c22620351924846c2dc3a65e1b5e73f935b1cd5ec685394f57b80dee97b9dee5809d89b184f2069f121e2bd06663fde9759b4b18105b80ca928ce45c8ef5ac3af9d77f41f44c2bab31b60118047534bb550001b608d4c22fa16e08f007d4783412195c8f70d4de7e6826c88a5d0671d411be552255fd5b4ab0a8898c74ba3771153f10db066df21cdda1f87345f5627467d259439f5fb645900b24f4687f8a8d7732a359a721a43eb09882548025119c344bc0a8d6365c8f597a345de966ff0276d9cac0734dbf2e9c319fc1d10102701ce53abb1baf848ed9266dbebbd85beec499730fc077e97ad429c400d768650717e0821b5313ba828b29b3c522f987c86e70b8bc614012fc76a3e04cfd4d4b5951b7f941cd074eabfead379d68e8f4f2bf27f9e0b0ada02a640a661930ce124a156bf83f6823f5d2a14bf1c1fa32a9374aac927609c26b6803262b3cc56733d92699b91c8e99f6182006830fbd032e6797ff6e4e273eaf202af2fd267d6b10c617bb2389e7c6c14433d0e6c4e3c3a26d2fd69db5516ae91349c511f0f1c0ebddd67f42b63b1eb73106298761ac3d8a1175b12d84d074556198869a0863f5c8cb95b1b44f9323585bc921bb5c6ed49af7f44ab57c11f12c6d53509eb0014801b91957026f57b2c180e87a9b73166d505623a46f10c74b3800f5164601bef5aa89352b33519e3049803630b06acb5662e536e83287e12b6668d2efadf581c616da00beafb41191c097192d3beea754e1f36acf5d324c451feb250125115585150c4f50348b0a1c1cafb119372aab897db5d2673c4bd59d1cc43074120ab673af4ab18a576319d353ab87709ec9c269baf5ff46cfd341130624dcc6649e6e30fd6419645d35d3608d06d938e094df5b509063a06ca87bed65d3625fa04c27e0ac18087aeead11d1347ca02e22a0e59dfbe5b456c1360366c9e8e708418cd7e1f8e0127668365893a3f6cfa077a2dddc2adbe4f141242372a1c08192ab1962e0a8acb5496c0b7a6d3bdd15dddd136a39ba16f92a3208dd49ce9e21e0eee16979e1b8297de70e6f7d90c90c1a0bae81488222bbd884da73426efa19b984308fdcf39730f79109be3dbac0e3064c965c81c88cb3ca7f2302d1bf5cc8b9ef0defaac5fdd8a48a79e1d1d3f81293bfe0e9b073daa6c25ff503f396f1d876190e92109194955583905e901fa8eee33934033d3c1dbb6a46b9a42bd0ca4f68bd9b160ec30bacf9889cda90be04d11464cc876323bc8b12450ee2748bf2113f511163f2a666fc5be0d5cb71bf071f54209b7fd118f7c49bf0f7707c3a37a2cc6ae8071877217e6e7250d0fa7feaee6b18fe9005498fdf80c48f7508b3cee9ccc7f40deda24196087a28ebe5b6d49168568fdc054dd88253ffbd75648085a227ceced3551790963ce16d27947bd5c8a9429b1ef48a57695601b883c5de2850a6236fa34a1418d36f2818fdcb9e381bd415f3052ad3e8e2e674a2faeaaa0e1081b64edf5d3be2e4b63ad6d5c351a7d7642c057a4000e9a147b451c41ad1c90f58957ed6943aa905d914fe254d74cc2188e0e465f5f5c87dc7dd64bbc4f8f2979bd9bbfb19173cdc6b1e584a64c3eaf88a5664f0f7012dda0a2bd4e2f97be406f725b9519d70730dbf9e4f2afe233d0b496afc9be0a778ce38a6b573e736f07c325fd60e2e1bc9811cff0acbc428c2a841952c51c20e76684d41b463d61e5bb0520a872f8d6962f43db598f0030f8d06c961a7505e7e06e103b0f61551b8193431b57e70891e55527101108faae021b3c4c7b46ccf3bcbe75872e5d4f07d62dd0a35197c16d49dced28d5a4b26bbaec9c748004ccd26f90914944b8a9f8c20cac7ed78d3aed689324ef1ee0f36c7c0ebee9421889974340d16bf1820a4617387c645957f5cf82966895624cf55e4dde41b0617c658b6f68289b4874094478d85a6b970c1598d26c00ed09ba27585dcf8e332353cc4a6cb075c8e202909c18ba3e798460fb6f5dad165830da6b5f28d77c5d70e6ac57716356db5a242c0f0fbb32557fd0d2c753dce51c90546929024d3b66662144a4cd634c8d5a3359c8e772a65dcab3a15cdba6ff0ea1c4422dbf06f141e92ea534af574394b970d7cf520cd58dbc499f6c57a62c1d87c68d558d86d54cd344f8880e2f14369718dc9e283ed1daccfcde3f1b9395aa843df53db6bcef609c61fc5a6b41d93620262fff5a47b90bb56eeee0ebc01843d7f3141741d882156ca7e218659dc310c675290bb6ae8babc68779f2a0b70ef84e6ac9b792a1cca61638a0ab362806741d9e9ae7e3484078baa61da718a65aaa2b153decc63619b99be9a95426f0c34b1cb864d83955daf31119377a68a81423363e37bb199f0d0ed12870f9f972286b74828787f02e50d43aea3a46e7cef4a6bdaefb78d1184940abdf202f5f204abb684ca3f8427bfad71617c2b87294152202008f886860181cacda33c42a8c59bc5cc16bf07e1e794ce702f5ac658b51388759630b90169375476a5416f93b309774b649ec5d50acd2adb626b5202fff04d3535b58b8ac4824afe92db5a59077b0e0c1afeaf8bbed87d395489289af1d32b5306718cfb6edc370cb56df5f0c0b27a53d0e95aa84f3d9fc6549c76d9cade429b1133b16f2eb06f2937b26b1163e3d459d62afe573452e3dd7a5ea781340ec18c00a55c48fbcd08d77887d37a9ffaf62c51e0ff972a4f146d6d711e74befd22c1024d0e6f84f2d0b9aa08acb4a1405a540745ee395f35666c6f8039052079aa869e0c56631eec240a07599bf006a3d2ac6e374413b83e04cb178028b501d54658fa4f1b7d0bf2e2ae2522f78e85d0724a29c9842a6e9ac8d9839917140e49a96c82094d7ea7bfa33835a670fcc56ab5cb36862c6d27c13462a31a7e3ee47c0ebddef4c2998b71303f26ae4286cad59383d1c42cb6f0a12e85136096c94af198522ef5ef1ea0dc6a678c9f7e9dd33d6b38cffc92595449a1d1037ae757b2982ee32829c2c8fc1c71ef4ed47f681c334fcf65f3b69f8cdb7f3c0c296ba56b0b26b4adb195cc4d3e1803a32113c4149611248bf649d7d8b724f7c68744d5ffdc7a276dc6fe87b8801a928ef3cafba6ca657551beb7f62a405a4759d5131ca3252707ef816f0a03c099f07622e2ba6d625394341c40da6ba99785e578e4019ba855268b3b9aa6ae52fc9f6159f035e9b2a1cca67ee5792c3c037626ccad79d1b93356c5da6274fb5bac4fe92330399bc592d1e4020c338ceb6d47dda42360473045a582c398b101317f2765980d83e99b01d8fc631b8246fdd3ac6aaed784d8eaf59c7b584b2e38ba6ed2c156085c650fbeaf1235d7d7b36f4d99c253f734b05cb3016988fdfb90a8bf4613730d9b602ae49281eefecd9527f8d45ba1d77e586a698585f17e7b22d7da121866827220791741b35c3d53a5ca776d8ccbbc059740e9179618f2b8b410c4d964bb7704887a2f4b11c86e4ec558476e2f05cc95d9e96676a8032de6a6996a92fac4e67700787ffd31eed8a45ce79e144f1da417c82fee543991643ca874800f0db9f384fb91d5a7068ad2c4f5c3bf6a1080cdae330c73a41ab4ee696bfcf6ae7fd2814eba2b0d3b9bb314c2aa61c81bcf222850b3464c30dd3a662a1fb0f674a178952a0419ddb4dcc6d651ef06fd96a88d4d0e5930f3fb2718e0267429abf9cf623d5d544b341f650083b9c80094f26bd96a17a50f7b40b95fb47f9657a78340334fbc9e6627e98896f624bdc50b626192b1f2186ee7c38644878a3ec5661f839d27a153ecee3a49b1a86f1c505cee72ae30cc64b9cc4637a27bde300f32040c0b698f420279b9132871460155e2c7534c13299db65d5875d3916b6b37489643ae6de9c829b9cc6a5fa3bac226d576bc65695183272c2cafc7bb26e275ea423662e2b8add9537a4a83693df4cc6b4696528ff26076b8436d05118a4510564d5ddb7c74799881c562d2aa18a9c6444f8393ef2473e132fdbd0bbe178244513e3eb2dc96b206da814d1e15d1d4b636dbed857a30d35a4068ef776c85a3eca55ef098c337c0fafd99790c910d63789fd2c57cdb0e1688a2fafac8747e1575507d159b1306dc37e06043c592406a049e8527649497ede40ba9ac2147f7563cec70fb6f159a8d1947e426a2c6ce881172d1cd5a21008c4988699394dfe02a8b221e447a0a96dc2269de7c0e792f4d7ea9f457033f19ebf504e341112402efc19cf53a61e773548249df4674a02693640ba3371a2dc65432ae3ebde8dac5919c38eedd3ed88acb9b68df88ed1a60f059e3770df2677af997f0ea923c3b1d4eb8a5d0020d57176c90c1c90cdc53d7e38d7e85532a70555ddf0e29c890b950b114593e13690aef9df3df64eb96b01bfe2159a15ce2c9a5c5a15a1312b25bbd4654c54395e00976c1a80246f2c13c62486256b6debe46f643339e174e6775fc095a271fa447ca953924c33dad0e8a1fdfdd9120a03eebc64c2968be9aa9f0b2f161793ffebd8f98b0ca98e870837237fd53d394fe487d6eca81156efc07c93bf7340a42340ab8764bc168ee6a164ea7e1be7d8df7af92b0a55863223e318e1086f501ea28a7c0de8013df8d793836e2c7fa24fe87eb5300e23b45d023cefedfecfa838f405fbc81b3426cf8ef6557f715ed8aaa9c0e0b3d4397e19f8203cc4b70225def827782aa7d7250041304833d733080f91c1537f5cdcae9369d9d48be0e2b24c134c013397f16ac78896b4b7b77878b15a47dbb8d16ca1f8f2ba7bc9291e8638f033e9b777e191ca5967bf0508ab19b5c9624d26aec79ec6f4c044c82739eb0b4925a32bf8fc5f801eaf8801fc34ea9aab2936b3e766c2181496c250d63311bcfd27dd49ecc26aab5ddaf7bc469273c66c578ed62f3f132875fdc081523a3b1c32cc1803e69c71b8f7a8d142cb49706d0bf0f18cffeeebb62b7df95631d323b93280ab56fe786b8a6e8d172f915257a294fbc3eadc28bbc8caec12f8c1fb46a206d9d86e11929206c72ea9c87f05fcc51e9625f48ca3bac008ccf468183380ccf25a7a5e860ad765eaefb3219c91a17b5f2c2906ea081569215370672ff0f26ba5a04898b7717a92faa3dc4db231ace5bdc6187686b2d5569616331dc17", &(0x7f0000001080)=""/104, &(0x7f0000001100)="86287faaa77c46", &(0x7f0000001140)="746071816bb8940e6f04afe1d2993e082f829d69ed3b3ffbad43f84c9fdb2f0ff12404de02b0909f9deec192a34931331c8cbd14bc82093255d00d17f987242fbdd377b29c229a40273abc68386dc1192f6bd246cfeeaf0bf53824489b3f51787a59908173b8c37208df69f7ef8a1e87dbb6aa178aa552f3c12b687042fe7540ae52dcd114d101984f455350d883635a8e6578e6de55ef785a742c0f20f82ddff2486969ea0c50622e971d743c2594bbfba1005ca2d8ab09322a1617da77274000c6037eb7574b40c3d0b48f3d0bb90ecb043f5cb3a110817f0ecfca4b1ace6c240daea6ae046cc7bde7ccfe", 0x400, r2}, 0x38) 07:55:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x278b}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080), 0x80) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000e198004000000001000000000ab36a2b8bffa0"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000508c45518200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="24c4cde72096c7aa8689c0701c563b45f10acf29656b52e23220687d2d4834f17ba649c3d3815e6e0fa3de8007907cc27df3496794e8c9e6ad11e9a9f94c09e8ea3141875df883c3e76aee7667b37f8391cdb381abd59fa4a08da414f64394b9f5b1d0b9777ec9483d42021fdd11c7efde7600200012730ea82b51f496f29e91e961f022697e0ecaac5c0f81edd9101f53f6c7426d78b14e806d2c5b124e89eaaec3ddc6da832f15d17956ba87d8d0ab7bf9a7014b4843c68a3e250dec60468cb70b837aebb80bbdef86cd60cd632b1823bfecc0e3923cffb0125fbb4ae18d3637cd89848013754f70ddea61", 0xec) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="01162412a1fbffff1820000019e5c754ccc894a00bc4943992326319", @ANYRES32=r3, @ANYBLOB="000000000500000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r4, 0x7}) r5 = memfd_secret(0x80000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x9a, &(0x7f0000001380)=""/154, 0x41100, 0xc, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x14b53, r6}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001980)={0x59c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e468c06}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b0}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff9, 0xee, 0x5, 0x80100}, {0x400, 0x0, 0x6, 0x6}, {0x893c, 0xb1, 0x7}, {0x8, 0x3, 0x7}, {0x5, 0x80, 0x1, 0x9}, {0x8000, 0x20, 0x5, 0x1}, {0x20, 0xf8, 0x40, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x3f, 0x40, 0x200}, {0x5, 0x20, 0x1, 0x8}, {0x1, 0x5, 0x81, 0x5}, {0x2ffe, 0x2, 0x5, 0x6}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3f, 0x4, 0x0, 0x8}, {0x8, 0x3, 0x0, 0xdb2d}, {0x9, 0x1, 0x6}, {0x1, 0x1, 0x3f, 0x10000}, {0x3, 0x2, 0x64, 0x7fff}, {0x8000, 0x8, 0x9, 0x191}, {0x6, 0x8, 0x4, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008040) select(0x40, &(0x7f0000001640)={0x2, 0x1f, 0x1, 0x6c, 0x8, 0x1ff, 0x7ff, 0x8}, &(0x7f0000001680)={0x92, 0x5, 0x8, 0x20, 0x1f, 0x47c9, 0x7ff, 0x4}, &(0x7f00000016c0)={0x3, 0xfffffffffffffff7, 0x6, 0x401, 0x6, 0x1, 0x4, 0x66}, &(0x7f0000001700)={0x77359400}) 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="3da3f12145ad8571d7c27d391936bfae8e8da8220ba49652b432923158298fb120774e66d148994682df89a632b6a83e1fca4555b1b2cf6000f76042abbe5a1fabe2547628fd572d9822a3ae966baea3ac46f1b4224ebc07d754e1eb83cbe822b1925cd93ff15e2db365f29128076870b3fbb0e2384463a1fd53533e01cda082f66be486b7e52a980c487aa8f9dfe8b6c8703fa9e5a2266d4fa27122343a238e06be4db20063c2cedd3080ead8b651f888ddaa64bdc620399f4c0443647d2c2a554611f6c48d", &(0x7f0000000180)=""/165, &(0x7f0000000240)="22e7f2057969dd206022fc7729d510846d24360296bb3ee64d38919f37ca60aa3b40dfecc1d03e547ae975136c5210e58dc6c14aa631da740a39ad8bf7b438cbb542dc4aeea1a0ad7d226efab9239fb7d4b1baf311cafa6cd9b1ba9ff8be978dedd6441e221a3410741efd25bef1e735ed2caa68b9e45d0fd875cf33146e668d42cd2964e79a320d3488c877d1bc5c1c1f7fad98d1192008c1e4f94992a7e2d19ee63b5a", &(0x7f0000000300)="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", 0x3ff, 0x1}, 0x38) 07:55:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2000000}, 0x48) 07:55:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080), 0x80) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000e198004000000001000000000ab36a2b8bffa0"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000e198004000000001000000000ab36a2b8bffa0"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:31 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000508c45518200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="24c4cde72096c7aa8689c0701c563b45f10acf29656b52e23220687d2d4834f17ba649c3d3815e6e0fa3de8007907cc27df3496794e8c9e6ad11e9a9f94c09e8ea3141875df883c3e76aee7667b37f8391cdb381abd59fa4a08da414f64394b9f5b1d0b9777ec9483d42021fdd11c7efde7600200012730ea82b51f496f29e91e961f022697e0ecaac5c0f81edd9101f53f6c7426d78b14e806d2c5b124e89eaaec3ddc6da832f15d17956ba87d8d0ab7bf9a7014b4843c68a3e250dec60468cb70b837aebb80bbdef86cd60cd632b1823bfecc0e3923cffb0125fbb4ae18d3637cd89848013754f70ddea61", 0xec) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001fc0)=ANY=[@ANYBLOB="01162412a1fbffff1820000019e5c754ccc894a00bc4943992326319", @ANYRES32=r3, @ANYBLOB="000000000500000018200000", @ANYRES32=r4, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000015c0)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001740)={0x0, 0x0, r4, 0x7}) r5 = memfd_secret(0x80000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001500)={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_ext={0x1c, 0xc, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x0, 0xb, 0x7, 0x8, 0xffffffffffffffff, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x3, 0x9a, &(0x7f0000001380)=""/154, 0x41100, 0xc, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000001440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xc, 0x1, 0x1ff}, 0x10, 0x14b53, r6}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={r1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001940)=0x14) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000001f80)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001980)={0x59c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4e468c06}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb1b0}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfff9, 0xee, 0x5, 0x80100}, {0x400, 0x0, 0x6, 0x6}, {0x893c, 0xb1, 0x7}, {0x8, 0x3, 0x7}, {0x5, 0x80, 0x1, 0x9}, {0x8000, 0x20, 0x5, 0x1}, {0x20, 0xf8, 0x40, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x3f, 0x40, 0x200}, {0x5, 0x20, 0x1, 0x8}, {0x1, 0x5, 0x81, 0x5}, {0x2ffe, 0x2, 0x5, 0x6}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x3f, 0x4, 0x0, 0x8}, {0x8, 0x3, 0x0, 0xdb2d}, {0x9, 0x1, 0x6}, {0x1, 0x1, 0x3f, 0x10000}, {0x3, 0x2, 0x64, 0x7fff}, {0x8000, 0x8, 0x9, 0x191}, {0x6, 0x8, 0x4, 0x7}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4044004}, 0x20008040) select(0x40, &(0x7f0000001640)={0x2, 0x1f, 0x1, 0x6c, 0x8, 0x1ff, 0x7ff, 0x8}, &(0x7f0000001680)={0x92, 0x5, 0x8, 0x20, 0x1f, 0x47c9, 0x7ff, 0x4}, &(0x7f00000016c0)={0x3, 0xfffffffffffffff7, 0x6, 0x401, 0x6, 0x1, 0x4, 0x66}, &(0x7f0000001700)={0x77359400}) 07:55:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={&(0x7f0000000080)="3da3f12145ad8571d7c27d391936bfae8e8da8220ba49652b432923158298fb120774e66d148994682df89a632b6a83e1fca4555b1b2cf6000f76042abbe5a1fabe2547628fd572d9822a3ae966baea3ac46f1b4224ebc07d754e1eb83cbe822b1925cd93ff15e2db365f29128076870b3fbb0e2384463a1fd53533e01cda082f66be486b7e52a980c487aa8f9dfe8b6c8703fa9e5a2266d4fa27122343a238e06be4db20063c2cedd3080ead8b651f888ddaa64bdc620399f4c0443647d2c2a554611f6c48d", &(0x7f0000000180)=""/165, &(0x7f0000000240)="22e7f2057969dd206022fc7729d510846d24360296bb3ee64d38919f37ca60aa3b40dfecc1d03e547ae975136c5210e58dc6c14aa631da740a39ad8bf7b438cbb542dc4aeea1a0ad7d226efab923