0x2, &(0x7f0000000080)={0x9, [0x9, 0x8], 0x9}, 0x10) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @broadcast}, 0x10) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x23000000, 0x4}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x24, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x9, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001440)='GPL\x00', 0x6, 0xd8, &(0x7f0000001480)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "4644d197ca56682ba1475e6fe041b7772b3c1901d22f6648f00bfd938d1530b57f0f06434f5b10625b72733075feb6a95cf2c2e69e5e584e63fcbbd0919d241c6a3460243d346e8a4e9053a82206604f461a75a538d21a96dfacf5fc42218b3e2f9e982c95141a151b9a2f024dc26d8099ec9409c1e868b3883b2110be74825593bf249a1e64a1f54c125c98dd9ed7c5a8a76ee714448f8c11277a14e504836f79d6a06dcfb154be98090cc4bda9e1ee6117ffa85c7c37914a656dc0228615938795daabca93ba2c8108b6450d740f53f5aceb2ecb11c5b478c8fda128725aff27fb5ba48a447388036ab1388dc05745"}}}, 0xf5) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r1, 0xfffffff8}) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="ed2100fe0400000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x1f, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r1, 0xfffffff8}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="ed2100fe0400000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x1f, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x25, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xd5b1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xd5b1, 0x4) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x80010000, 0x4}, 0x48) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x9, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001440)='GPL\x00', 0x6, 0xd8, &(0x7f0000001480)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "4644d197ca56682ba1475e6fe041b7772b3c1901d22f6648f00bfd938d1530b57f0f06434f5b10625b72733075feb6a95cf2c2e69e5e584e63fcbbd0919d241c6a3460243d346e8a4e9053a82206604f461a75a538d21a96dfacf5fc42218b3e2f9e982c95141a151b9a2f024dc26d8099ec9409c1e868b3883b2110be74825593bf249a1e64a1f54c125c98dd9ed7c5a8a76ee714448f8c11277a14e504836f79d6a06dcfb154be98090cc4bda9e1ee6117ffa85c7c37914a656dc0228615938795daabca93ba2c8108b6450d740f53f5aceb2ecb11c5b478c8fda128725aff27fb5ba48a447388036ab1388dc05745"}}}, 0xf5) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x26, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000016c0)={0x740, 0x0, 0x1, 0x1ff, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c96}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa02}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="60aa4d2f4044ee3dea860ca73b7dd774f6313c1f289570fbdfcecc25a86c836d61d616e58b22b1797f59db4563d479cc5695bd2e4a4a7e96a18e5afd6b3398f57792d62947bb1e8374f823643f24e83e86bdc9864858826d18075674d19d454285fae93473be1006ef9a8f4ce0538125507319b424445254639128644d", 0x7d, 0x800, &(0x7f0000000140)={0x11, 0xf8, r0, 0x1, 0x3f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x1d, 0xa, 0x8) recvfrom$packet(r7, &(0x7f0000001380)=""/29, 0x1d, 0x40, &(0x7f00000013c0)={0x11, 0x5, r0, 0x1, 0x20, 0x6, @local}, 0x14) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x600401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000010000000000000070008475a3c07fa8eedbdf25080001000100008b93878e26bdf808aef97de504bfb90008000102000000cb86ec6ae2d6b2bd78fa33020000000800010001000000090002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32, @ANYBLOB="00010000617c592897ee27bda106269d9e2f1af5050000ac332000001222644e", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x4, 0x0, 0x8, 0x7f, 0x5a1f, 0x4}, 0x1c) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="26736d5dd977aaa7e61a7de8f02b48bcc0bc59bba6ea0e6fb89199241fea54aafc76efb63ef37bfc6ff9bea66bced0e2af19d8ad2a061aaabf2343c53da6cb6a39860754a3e42b50b5215f51b08d42f6d8ff571715bb7c8682284f191e02efe1e7f7c0d4f2c75a62d2dc109fd105c49ca6c9e4550bf27c2422fa1e337eb5ecb3b5c22bce7926dfb2ce276f355c252ee47f878bf95dc9c4cdc3b989df7871bba7f6afcefed88d2850e10fde0009dfae5396426745509b05e1208599039e19cc2fa0a27a9977ee64e9c6fc21605b83a65abca8eefd585c5a03e65914dc49ebcfa81efc21ee1254872ac60a1eb86e65497c8b7119af045b100ade23ffca082351ebcf5b2b428a1f4e8da7fbb9331a9ec254e0c0c6d60f8e7fe5bd04271dbcb4eafbf04e345022ccbab526c8bdb10c9c740b52c6926fc3196fd6976ba40698a5b5da519bb3b3fe7cdc630798740b78026b0cd4b3d7870598e2ef33bd080e9b4b6a8a42ef827d37514d987727314d73976a9727526883421862abf539a83d639b3220eec90c96848fcb05c2a4b3cda6f1fb874e2c27ed1d3251c1c078bcfe1164dd304a763b6186201f9aab4656f93066178111e32461b62b1cf2ce13ae89096f53429cfe4267a5b5186e5ff43c5690c2292ddea15690227dd4bec593836340f9b1f13147382fbc535a9f006686cb99b13996e2175963bcdff62789b72a1d57335166d4d40bc4d0de9fb7e0b7aa44cc78e063aa2e96a4d4a7d81e37dfb59e011bb94710c50b0f5731d0f2795cfffcd8dd25d5dd844ad32f3e1e9685be1117af5a78be87fcc9c365f5a3dbcb56829bf71d7de4fdfe5a84db98114e7a05dcb65ae063927f4111b1ffaf3fc90ab0a6f83ae3082a479caa286846c00529104b5037c741660e1609a777be14d2a4b4e0130b337de23ac777369c9f3a8a280669f174725b340d5681cad2488306e220ca6d8c545bb62fa28e511d03a7a2c2fa5f75fb1f47fe79d2b81729108defcedeb27f8ece0cf90c81534e5a21d93b697e27bb0c7d75dfef096fd0b6022fa2e534c8df886fdd3179bd4096f980211d598a45ff3c55592f46b11532f0e52fd83768b833fd0687e8a83b195c60d6c0c03d79bb485e98a8810624c70d9238909e1b583f1022a87675f0ffc3636cb135b74b8e3849e7a88643d2ff735d27b769e4a0a376807df8d6042fa0abcd1e75ff82fecb218abf49084d3f2941e4a32925b94a3438f7541c3443524517203f7e94fdcd32ce62ad24dff8787beccdf522fbe7cee6c258edacd2942ca085cdc0e694ac3e49ba78b8c10ecf7ded7b75b2780241239c11e2f3df7f2fe8e5de8763b438b6c4ea2e65b9f6de9da5b11fc5a26a9b1ecaf448d30c65b76f51e155fa2f8bbc8229761c151ac0eefbc31818d8de25269cdf1c4bceac0804c40c16f78d0307c3f01ba233da44669f28a7b51ec7b7191bcd64b084766553d66a136b12cb5d0dd7feece5f1c1a3514923e6eba3be1178441fb47ad04c0b87c586225cb5ea8a66f756319ebc8009d39aa7bd282e7fb7c651361dd259d1fa213f685a2c62303c1edef29ccac1cdb3cf5fabd83b657cacbd2ddf3aa810ed03a0adb37bd5cd158b7b485c98ffd339120d6445095d556f520f700e59cd2ea740d2fabc7cc24e1c0c13b880a5e0fd72b2666b5a90f663ebc264c26002c0e4b19636a50cced872560dc4c77d4600526bc25771fe71fa96dd37a27d43676ae36949c120253a50da880b6370c42e16457f9a4eccc5855a89cdb8435e61360a8a274998a329c23a4fb57718af4fa2490dc041083c121b8ee1c9d6870ea610e50fbf2e9f1dceca36063bcb5ebbdec7c4258096ad52503ccb823cdcebfca5dd9e647f8fb04b55a53939fde0ebb4ad9edb35dcc98167b590922d6bedba09dc8afa7e45efe6051464febf2700d8e3aac162d196275351861a705f52156bf7165b54febfd33ab708e6f297c5526c7d6a59f6f16e85ab21b3d743e35f4e1c1a63b5d80ff5e188835444cdc1c12187c6bc9c92161650c616ccbbf01f76d475f758241c617a6b896a9afb3cc48261c1e7c02b234ba4fb9e84e4350fbc1580337d11b27ff7a788f79bc444881ad55bcca04b7536cd908d28b998a1261dd0aa074b3eaaf16e322b6de2f9660b2849b44df09caaf08243e9576820173db0012e7a5ad3ecb32b019fc03825f7f915447d0f3dd3913f4bc8b60d3dc380eafca9a6667d86d20f9732e64d1ca33292c6b1c7986d261cf9b47f407eab0f6dbe121723078893caeaaae2e4cd4673cb871f3173b1aa257fbed4c3ab8e0eadc983c676401ba5475a45d836eafdbe64f12c3bbc5fed6ae3fb4c15a2101c5e9df38ab1a93e978b32e42a42fdf64b3244108c2e6ec645734c01715818c97c30417d724d788872bde48ff66411378f2f71f91e205c94b3689423e6ea1549ca3443d561b8703f8ea121693b114e44a852ffba02254891c890161185b809b4ec3da52299f86de5ccdaf919a4de0d6387e4365bef432ae36388f11fa863209897c873efc9f7eaae76adf25d8fa219798e6336f88993bec6f5f8a1d33f1fee5911bea91f8dd64ce7fb52a53e75a89489d63277135b72080d162bac9c178f3180b213a2febb607ef526f9a430a621fd18e3a76d4abc738930d3572addd8aaebea21e06102ad50f6b88258ba0b8e7e0363c95dd8e3d0be91d4fcf96d0b80c56fe43c4efb30746817a75c92478260cca5525c7104d72d879195f345290e1a060b7e5d00c2d73df81c28d022fe4780b648ffce9095403c9a4d516b1d7e46608c8b65881649e1587035c88bc9c3e822a5be5000d21b356d260bdcbdf9fb175baa96fa665b29439e627365ac2b45ee207b9a9238418172e35b19f4ac89778b2fba2ed37954a0267b65179fdbbcac0d8023ceaa0331c3b0b44b58ac9537d916a8339db8fd739946b59e14f14407aa20cbe6a7e6f4d602323a6332188746c8db0b0535bc436fd39e312b1c0f5855d69d0a4abb9f63ac7aae260414cce5c2a394b3ea0a558004bfabfabea1048aa643de09da49ab2347d75a17f1ce05f555e9f956573410a08cdec2df7a64f85182cc7da2b2abbd00e0808df62630af1582af4036df0d24fe6bdfc2e945ab991d870f14b8fcebd9c4d1cc4af76e6ccdd3f5a1bc1c4362d70e7b5a1806b2db69f6b377c41f97768923ec08761c15cf22326fc410fec5b6dbae9ec5a5e61765a368f0de255a58a0e12caa6bb6720c29b8d8f82db646394417c27abff4bf5ce38cb290186df041f1be02ea4ebe46d7faca076fe092f8956d98de46072469248be74db7a11527f778460afd2d9b6bfe30dc815a1830d9d49b942399f89c2aa748fff3805f6cb91969bda179cbc3e25b0f809849747e002be35267d69c43a510b38b7ad81f3237cc6398b9b7fd483fb88597fc2c7a83fdf7335b6acc67653064d8c9589b935ea1eae10b4318a03a35e8877b23fd1fe40cd4335ed0a3de3bee751c56a9b9b2566134f8f1cc6cb59c3673757ef04864e8bea3e70db926d3799aed26ee258d00303a1fa62b35e65f2ad79887d86264bff8898e7bb2d71e1c7cde34bc2cb579f125dda418124db375f32d78ac58e892fef82c66d7fee2ef81a9af8e35f9dbd640ad6d8f3813a758bafc8e0dad4fa931d678fa7ba67ad44ccba62f7c9f8694cb580238b7e56e6af97c754b740149e149cffcbfbef1dea13441ccfedf63dc08c74839ab7367d4d6a40bdcf7449bf4886b0c8f27e8ece21242a04629fafbea3c4457f5a2ced5e6842b86508ffebc48c253efc866d584610b52fdb2e753a9c99fa74c4569a4dd27326cffa1c8637d5f0f20769f64d7a7247b16b7d26552f8dfd0f99b2a2ec874970a4a510540024102194c4e65406c8978f58b17b05bd877002434266dc2084f0a549180eb6a68f21c430f8757876f2f47b813a93ea43c90d95b2ee162ab354b7b9357ac13a30fe4d2ae65b92705eac8167e2d765e38d812cadff8a6b7f5173f9cd0ae3979181b5c08ef7c935cf0cf66468e0170c0af6a76a40220f5f6107004ca67dcc2e8bbff9fd1f659dc56c8ee92940c309e638cb0176939bf6e295560a01d890debb4d827983cd5367e8f72f08a2a4e9598cb39dbd04e85a1d9fcd018a6efcd6001e71e24c4035a1cd7508a0f67b42d8b4fef751be50a00646917bfde1b8e5f39ee69b117302b23b8d7251a053800c12b092948106271e06f8d30b8cd95499e46da992e74d2902945789b56121adc6ea68ef616f38ebcdb397f8532a404422ff2d45668e06f742c9fb72465f563b9d6bbf6b14f42324ab8d76e2842687a7360584ddf272bb7b3d77a13ee37de931c1e71929a88bf668d8b60bb1b5cfddb958234c9add2ad56021244e0645bdc25f9c2a327d4663f098295f0accd7c97fb9b2ded2c48583742d908c2187f848b23dbe98459a11d782b554be77eb9fae001e0488223cbdc390900fc38b89b8f2d5e820d0bb69a430d21731215e3eb1eab033282089227d8e72a797f5b19d37877927b3b99063063beaa59ceb21f0f07707dd2ada9019b647665c754cf6128d5b0bcbdc2a105ed4814f438f26bf1839981d90fa5cd07006de405ebdcedfeb518a5b0a78b3e8d0394295f0ed4803a1a6a2cf99e07f5f71ef4d33c5110ca01e55ab60610952da5bbaa12a90e1b79e421c8421c9626d55cbf14cca2416b2e76d200e98cf689172bb3311f0b88ad72a441b6ab769e676f77d29dcac17fdad9c6fb87e575d1219ae4248549ad7b3639b2a26caae6798b428f923d585c4d911c47343dacdeb3afd72cd085e9109e08ea24c4b4d007b6329597fcb0014ad9ba040f83a4c3f77f0dbee05ca3ee03e9f8a2efadb3cfc92e314684ceb69f1510f0a572d4bb84f29233f3c941924f8b2d9a75522a437c41fa58fe81c22f0390a0b2ab08e7fd9a048a034c0c8d4b7ce09f86c2f8b68976ce45caad55de14e051c96f70fa647324ac27a43e9841dc3e328a8cb6eacfcdbf957d078c25ac27582cb92aacd0c42ad2e0262a57e56c3adadd3cb579e2c0c37645654a849656d2da3ecdc7f29ffe260143dec12fffa5cf773e82b1f95f2fa095322b3d64b1592703af34cd260dfb54d088e444f6668dc62b869cb8595ff8a08c28a5c4f5f04c05f4beda1aee5d1797d064bd3581f4dfd56fa31424ff45899cb81f3f0cfdb653fc3d9de7181bd85ba248ed2528c5301fbc178fd63a75206b817f5879b3d76bb309faf1162ed8074a8ad8c98cd2591aea0dbf21ab019c73ee6cb6201f80603b2178d52894efb3f4d7b567582a7eb19f9f3a5a58db88306403c7ff7a4d0c2718e8c6557cddd73f5e88e4e8f8db51814898ec365364df525c180f77572e2f3765712806b7b2e6a6896246603ad1170ebc896ad2b2fb6c4abbd834a8a48ed02bf249e39fa1320b16a2b770803308065071df6bc7133038b8763880ff10e8abc8306d89d5621a70afae78d4513cbd69ca684682861284b5074178274d6f8fd93b155a60027d9667b93fb9afa69cbed26ab09a5faf03d953ff0f265ab4668a93914109ac78b10e439bd2457329aea95737b0e87308c54a59bd5d8e0719e654959f98cdea7d9769af0171a851f7517a1498fcf1fcb775284fe07a74f5705254cf62eb5843690db3c848d1b09a4b6acff7ad31c10b8973307f1477a8a7bc1d8bc015ae50a0853412e098b408c6be7f880bed83bcd7ca3f747fc7ed1158ae172921d550fe380247430a5127179d010a8b21f879f7c0b433512738d0cddf885a93cf99d0ec8cfa7364a67431b9723932a8dbdcb9", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x9, &(0x7f0000001380)=@framed={{}, [@exit, @map_idx, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000001440)='GPL\x00', 0x6, 0xd8, &(0x7f0000001480)=""/216, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "4644d197ca56682ba1475e6fe041b7772b3c1901d22f6648f00bfd938d1530b57f0f06434f5b10625b72733075feb6a95cf2c2e69e5e584e63fcbbd0919d241c6a3460243d346e8a4e9053a82206604f461a75a538d21a96dfacf5fc42218b3e2f9e982c95141a151b9a2f024dc26d8099ec9409c1e868b3883b2110be74825593bf249a1e64a1f54c125c98dd9ed7c5a8a76ee714448f8c11277a14e504836f79d6a06dcfb154be98090cc4bda9e1ee6117ffa85c7c37914a656dc0228615938795daabca93ba2c8108b6450d740f53f5aceb2ecb11c5b478c8fda128725aff27fb5ba48a447388036ab1388dc05745"}}}, 0xf5) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x2}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000)=0xd5b1, 0x4) 07:55:25 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000016c0)={0x740, 0x0, 0x1, 0x1ff, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c96}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa02}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="60aa4d2f4044ee3dea860ca73b7dd774f6313c1f289570fbdfcecc25a86c836d61d616e58b22b1797f59db4563d479cc5695bd2e4a4a7e96a18e5afd6b3398f57792d62947bb1e8374f823643f24e83e86bdc9864858826d18075674d19d454285fae93473be1006ef9a8f4ce0538125507319b424445254639128644d", 0x7d, 0x800, &(0x7f0000000140)={0x11, 0xf8, r0, 0x1, 0x3f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x1d, 0xa, 0x8) recvfrom$packet(r7, &(0x7f0000001380)=""/29, 0x1d, 0x40, &(0x7f00000013c0)={0x11, 0x5, r0, 0x1, 0x20, 0x6, @local}, 0x14) (async, rerun: 64) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (rerun: 64) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x600401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000010000000000000070008475a3c07fa8eedbdf25080001000100008b93878e26bdf808aef97de504bfb90008000102000000cb86ec6ae2d6b2bd78fa33020000000800010001000000090002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32, @ANYBLOB="00010000617c592897ee27bda106269d9e2f1af5050000ac332000001222644e", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x4, 0x0, 0x8, 0x7f, 0x5a1f, 0x4}, 0x1c) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x28, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x60, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:25 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={0xffffffffffffffff, 0x58, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000016c0)={0x740, 0x0, 0x1, 0x1ff, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c96}}}]}}, {{0x8, 0x1, r0}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa02}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x32}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x78}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3d1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r1}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfb}}}]}}, {{0x8, 0x1, r0}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}]}}]}, 0x740}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="60aa4d2f4044ee3dea860ca73b7dd774f6313c1f289570fbdfcecc25a86c836d61d616e58b22b1797f59db4563d479cc5695bd2e4a4a7e96a18e5afd6b3398f57792d62947bb1e8374f823643f24e83e86bdc9864858826d18075674d19d454285fae93473be1006ef9a8f4ce0538125507319b424445254639128644d", 0x7d, 0x800, &(0x7f0000000140)={0x11, 0xf8, r0, 0x1, 0x3f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = socket(0x1d, 0xa, 0x8) recvfrom$packet(r7, &(0x7f0000001380)=""/29, 0x1d, 0x40, &(0x7f00000013c0)={0x11, 0x5, r0, 0x1, 0x20, 0x6, @local}, 0x14) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x600401, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000010000000000000070008475a3c07fa8eedbdf25080001000100008b93878e26bdf808aef97de504bfb90008000102000000cb86ec6ae2d6b2bd78fa33020000000800010001000000090002"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32, @ANYBLOB="00010000617c592897ee27bda106269d9e2f1af5050000ac332000001222644e", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000200)=@req3={0x2, 0x4, 0x0, 0x8, 0x7f, 0x5a1f, 0x4}, 0x1c) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="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", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="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", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2}, 0x48) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = socket(0x10, 0x1, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r8 = memfd_secret(0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) (async) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x300, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) r1 = memfd_secret(0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000001300)=""/208) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000001400)="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", &(0x7f0000002400)=""/195, &(0x7f0000002500)="04cd2b2d3ec6feb55c2e85bfbc9082a1331cea5d2c27b526430a0cabbc5fefd15a7f7c3869cf444a8f77909eaf403d3086cc6b4a07749ae7bea84f343e3e320f4979032ff40be64269c083759d7ccaccf2fe35289d9227ba93371080eafa6207a2ca73dba654eb0d0990d8eb223d927167b8b15f8ffd2b4bfc2c5ef9701950c30ef91134799c156f04e401e6ba929016adf71244592e87d6c341c1c7e67e32b30ed26e68b98a77ccae012dfea8718c4c58701af095e24550f0356a672f5b6f88000336881f38325f77a08db6c8e06d4c871277ea213ae9823cbf5ebe5aae48e07d3f93cdbd218aeb5d1af1cce94923041b10853437", &(0x7f0000000080)="6e380b47e5d6fb950b78f9b8ed863fcff3c5809442a01667538db1132619177ffef41bbc13216fd5fd4c2c61b45b57ed8cb43213636f46955bbcc6dd733ae6530619e162", 0xfffff001, r2}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = socket(0x10, 0x1, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r8 = memfd_secret(0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) (async) socket(0x10, 0x1, 0x3ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) (async) memfd_secret(0x80000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) (async) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) (rerun: 32) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x3}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x600, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) r1 = memfd_secret(0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) (async) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) (async) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x4}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r3 = socket(0x10, 0x1, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) r7 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) r8 = memfd_secret(0x80000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000080)=r2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3}, 0x6) (async) socket(0x10, 0x1, 0x3ff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r6, 0x401845ff, &(0x7f00000014c0)={0x0, 0x7fff, 0x98d2, 0xeeab, 0x5, 0x7fff}) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@GTPA_I_TEI={0x8}]}, 0x1c}}, 0x0) (async) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) (async) memfd_secret(0x80000) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000001340)={&(0x7f00000000c0), 0xc, &(0x7f0000001300)={&(0x7f0000000100)={0x30, 0x1405, 0x800, 0x70bd2c, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) (async) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xf00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") (async) 07:55:25 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002480)={&(0x7f0000001380)="91", &(0x7f00000013c0)=""/4096, &(0x7f00000023c0)="d9daae8bcb1dec9ba4c0ae98a8dd803146c025c7b60ff19817e431a9d25374d2daeb593067225dbf10db39fd883efcb4987fbc5e24e12c60f7d5c5bfa0dedd97e2692cc11a654de9a874d412053d9ff1e6fafb09de9543a32622d854dffc69d2f6aac824abff2de8877abd4c33480649107f26c7955ca5c29b0b2e78c907", &(0x7f0000002440)="ef04d346eb393cff8f2a711ace2a3f00af0cb8c399773a06a86cf4a1783cd687ce2d06", 0xfff, r0}, 0x38) (async) r1 = memfd_secret(0x0) (async) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r2 = syz_open_dev$evdev(&(0x7f0000001300), 0x10001, 0xc00) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000001340)={0x5, 0x2ee, 0x3, 0x1, 0x6, 0x986d}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x87192f3055a88998}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x140d, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044805}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002540)={0x3, 0x59, &(0x7f00000024c0)="6de2c3a35e0d175440cd91a8353ab53b0881a76c959f38cc51348596a6c76acefa4dee55007c03973730431b866105fbb4cd3e394bcdf86e27980141533513d1a26a244d45a3f74b434613c1988f2315fcc26514dc032878b8"}) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x5}, 0x48) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x6}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:25 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f0000000080)="114bdb6411a80e05b6a9d4c334113c706f8b7900e3c46baf8f5ffed82d") 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1100, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="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") 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x7}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="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") 07:55:25 executing program 5: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x486001) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x8}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1200, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) 07:55:25 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000080)="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") 07:55:25 executing program 5: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) (async, rerun: 64) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x486001) (rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 0: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x9}, 0x48) 07:55:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) 07:55:25 executing program 5: getrusage(0xffffffffffffffff, &(0x7f00000000c0)) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x486001) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1400, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xa}, 0x48) 07:55:25 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe, 0x4}, 0x4c) (async) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/62) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="000000000000000040000000e0ff0000003272602e0400000000000000585d6c90a5b0751c58839fd1558b6dcee9a981b09d28c3c3d7ab737dc88fa4a03cfa01e3fc0b9480a4f7339070fa4070c0388c36ad391cb3eb35625afbcee785fc82b2e7bed53e7c83cb6277cf137dc4c3210b50d75b25a068be5a2ca035d42684621ffd20f000ac6634db9f7b2abf05ac6ed9c011"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/137) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xb}, 0x48) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1500, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 2: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) (async) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000d1400082abf563816f6e9d2fceb48dbbbf31f6cd42463bd7000fcdbdf2508003e0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20000030) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1600, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xc}, 0x48) 07:55:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xfffff800, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="a688a7c555b9621e3d00175a9f516f393a1098313845a61483f110f2fd5fb82ed3132fa7ce37bdc424532f3147a5f0b3bc050e5f2cf932ca18f01524abc9ec6cbbca55eb9ab02691445d93762b3f9e883c3094b86764265f4311b138d8725771642c6d4b1bed0ccf4a4290f29b59a442a5b5e8ab708350e93a8703f907de63c1dc4b47c0f44f6333ee78e91758faa45c520916ac8e1af59f1a13f75df72a573dfee91de3162675424c5fd255edda20393607971754e6c532193f03458ebd1708bb25153819c423a23e734160069cadcf316d5bd48cfd") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/62) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="000000000000000040000000e0ff0000003272602e0400000000000000585d6c90a5b0751c58839fd1558b6dcee9a981b09d28c3c3d7ab737dc88fa4a03cfa01e3fc0b9480a4f7339070fa4070c0388c36ad391cb3eb35625afbcee785fc82b2e7bed53e7c83cb6277cf137dc4c3210b50d75b25a068be5a2ca035d42684621ffd20f000ac6634db9f7b2abf05ac6ed9c011"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/137) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000d1400082abf563816f6e9d2fceb48dbbbf31f6cd42463bd7000fcdbdf2508003e0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20000030) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x100, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc090}, 0x8800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xfffc}, 0xfffffffffffffdcf) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xd}, 0x48) 07:55:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000d1400082abf563816f6e9d2fceb48dbbbf31f6cd42463bd7000fcdbdf2508003e0002000000"], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x20000030) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xfffff800, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="a688a7c555b9621e3d00175a9f516f393a1098313845a61483f110f2fd5fb82ed3132fa7ce37bdc424532f3147a5f0b3bc050e5f2cf932ca18f01524abc9ec6cbbca55eb9ab02691445d93762b3f9e883c3094b86764265f4311b138d8725771642c6d4b1bed0ccf4a4290f29b59a442a5b5e8ab708350e93a8703f907de63c1dc4b47c0f44f6333ee78e91758faa45c520916ac8e1af59f1a13f75df72a573dfee91de3162675424c5fd255edda20393607971754e6c532193f03458ebd1708bb25153819c423a23e734160069cadcf316d5bd48cfd") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1800, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000000)=""/62) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="000000000000000040000000e0ff0000003272602e0400000000000000585d6c90a5b0751c58839fd1558b6dcee9a981b09d28c3c3d7ab737dc88fa4a03cfa01e3fc0b9480a4f7339070fa4070c0388c36ad391cb3eb35625afbcee785fc82b2e7bed53e7c83cb6277cf137dc4c3210b50d75b25a068be5a2ca035d42684621ffd20f000ac6634db9f7b2abf05ac6ed9c011"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000080)=""/137) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xe}, 0x48) 07:55:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x9}], &(0x7f0000000180)='GPL\x00', 0x7cd29b09, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1900, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xf}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xfffff800, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) (async) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)="a688a7c555b9621e3d00175a9f516f393a1098313845a61483f110f2fd5fb82ed3132fa7ce37bdc424532f3147a5f0b3bc050e5f2cf932ca18f01524abc9ec6cbbca55eb9ab02691445d93762b3f9e883c3094b86764265f4311b138d8725771642c6d4b1bed0ccf4a4290f29b59a442a5b5e8ab708350e93a8703f907de63c1dc4b47c0f44f6333ee78e91758faa45c520916ac8e1af59f1a13f75df72a573dfee91de3162675424c5fd255edda20393607971754e6c532193f03458ebd1708bb25153819c423a23e734160069cadcf316d5bd48cfd") (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) (rerun: 32) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x9}], &(0x7f0000000180)='GPL\x00', 0x7cd29b09, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1a00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x10}, 0x48) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1c00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) 07:55:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x6, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x18, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x9}], &(0x7f0000000180)='GPL\x00', 0x7cd29b09, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01c8cab8b44f6a6213cee3bf", @ANYRES32, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000001c0)={0x578, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc42}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x0, 0xff, 0x81, 0x4}, {0x0, 0x2, 0x34, 0x8}, {0xffff, 0x7, 0x40, 0x411f}]}}}]}}]}, 0x578}}, 0x40) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x11}, 0x48) 07:55:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x12}, 0x48) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1d00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x0, 0x3, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0xae, 0x200}, {0x200, 0x3}, {0x7b7a, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x81, 0x7f}, {0x5, 0x3d, 0x3, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x5, 0x3f, 0x9}, {0x80, 0x5, 0x0, 0x7fff}, {0x200, 0x5, 0xff, 0x5}, {0x6, 0x20, 0x9, 0x4}, {0xe065, 0x5, 0x3f, 0x2}, {0x7, 0x8, 0x0, 0xfe1b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) getsockname$packet(r0, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x8, 0x5, 0x800, 0x6595861}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000001c00)='syzkaller\x00', 0x6, 0x27, &(0x7f0000001c40)=""/39, 0x40f00, 0x1, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x2, 0x4, 0x553f, 0x7}, 0x10}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x13}, 0x48) 07:55:26 executing program 0: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1e00, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x0, 0x3, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0xae, 0x200}, {0x200, 0x3}, {0x7b7a, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x81, 0x7f}, {0x5, 0x3d, 0x3, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x5, 0x3f, 0x9}, {0x80, 0x5, 0x0, 0x7fff}, {0x200, 0x5, 0xff, 0x5}, {0x6, 0x20, 0x9, 0x4}, {0xe065, 0x5, 0x3f, 0x2}, {0x7, 0x8, 0x0, 0xfe1b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async) getsockname$packet(r0, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x8, 0x5, 0x800, 0x6595861}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000001c00)='syzkaller\x00', 0x6, 0x27, &(0x7f0000001c40)=""/39, 0x40f00, 0x1, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x2, 0x4, 0x553f, 0x7}, 0x10}, 0x80) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="590000d9d90f9918c4c500", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x18, 0x4) 07:55:26 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x85, 0x8}, 0xc) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000080)="3c5d6f19eb423d2c76a2e2e85664e088442b90a56ead1a99cb4dbff11b97f468bd9afb10af9b", &(0x7f00000000c0)=""/27, &(0x7f0000000100)="cb828303a04eab161bc6f9cd737d82a296ef3f8384f5c519106a4980edd34d34899a83182ba1e1979a9687a14d0cf5aea9b03f64ac200e16249374e558cf1d0e54ea0388135528bdd3f95137cf1dcdef1115b0df46cead3670f5e9739091107bacc9fc5259ef9e7ce0e65034a0a4b7f82bef182dcf052c3050d7f74ef2fc1ea505fabe43594469a153babb0bf31a", &(0x7f00000001c0)="1de5ab8ed9abbcbc9faf2fcb83a31efc0c1611707e93453fe22c66e2e256649044fc87c3b60d094c395d7486dfd4249133ecb8c579e564af70863c86ac1ffcb75b4d272074f422d1a61c52a49db9ad94f2817f8131ec9056a1a223c46e6dd30693a13b47d27cb6e4f03558e7651a72685e7f5856bf3d4842ef8b01f3a461a043b6a6e9aa", 0x0, r0}, 0x38) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x8, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r0]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x200000, 0x0) (async) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000001400)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001380)={0x2, &(0x7f0000001340)=[{0x8, 0x7, 0x5}, {0x9, 0x9, 0x6a, 0x1}]}) (async) 07:55:26 executing program 0: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x14}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 07:55:26 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x434, 0x0, 0x3, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x6, 0xae, 0x200}, {0x200, 0x3}, {0x7b7a, 0x2, 0x9, 0x4}, {0x7, 0x6, 0x81, 0x7f}, {0x5, 0x3d, 0x3, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3, 0x5, 0x3f, 0x9}, {0x80, 0x5, 0x0, 0x7fff}, {0x200, 0x5, 0xff, 0x5}, {0x6, 0x20, 0x9, 0x4}, {0xe065, 0x5, 0x3f, 0x2}, {0x7, 0x8, 0x0, 0xfe1b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000001d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d40)=0x14) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0x8, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x80000000}, [@ldst={0x0, 0x0, 0x6, 0x8, 0x7, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @generic={0x3, 0x8, 0x5, 0x800, 0x6595861}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000001c00)='syzkaller\x00', 0x6, 0x27, &(0x7f0000001c40)=""/39, 0x40f00, 0x1, '\x00', r5, 0x25, r0, 0x8, &(0x7f0000001d80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x2, 0x4, 0x553f, 0x7}, 0x10}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 0: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1f, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000080)="0e5fd0656b71fd1c696c82a6c56e1f476af64ecd4896aaced1f9e0669f9109a72a2a106a0a0600375708fcfc409423a1af3954f8483a4d260cda28b5cc81a36d484ab5a9bfa633782c3f2fba4e2ff719c3527d4eb6f915bae96aaa96fe754d389168762e460247944e6ad6894ef7dfabed8fc438345090ca6c5a7139d6cfa9ed3f08f160b2bb3a20819921", 0x8b) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x15}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2100, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x16}, 0x48) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2200, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) (async) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x17}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{0x140b, 0xe7}, {0xc9, 0x7, 0x7f, "2ffef44eb33cfd06ee5f527e6257dd5d66ecda9f9709600f7d0d112f2f0e245e844e7ad80c51ff79eeb6d3856a15722254d1ec5c4e28d9abaca757c90316ff518d1e567a25ca0087000614869fa701f3b503d3f0078fc287b1f3e13f6a81029abee3752de61fed4bd95bb58dc973bce55742e733aeac0e60cee054f2af8954b0be4218f43a9de7097bb13877c23b5a8b749106f2d8623417a7d79f19ae30e23f482105087f7aa073aee05ecc7669b01cd9107c42901accf1dbacea916735428448d6ecf1ba02d37a620921bd1d105d0144664cf5d6070c6590ee65d1e0c168912564"}}}, 0xeb) 07:55:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x4}, 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x40000) (async) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x1, 0x85, 0x6, @random="bc1173ec295c"}, 0x14) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2400, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x3, 0x800], 0x2b92}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x18}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{0x140b, 0xe7}, {0xc9, 0x7, 0x7f, "2ffef44eb33cfd06ee5f527e6257dd5d66ecda9f9709600f7d0d112f2f0e245e844e7ad80c51ff79eeb6d3856a15722254d1ec5c4e28d9abaca757c90316ff518d1e567a25ca0087000614869fa701f3b503d3f0078fc287b1f3e13f6a81029abee3752de61fed4bd95bb58dc973bce55742e733aeac0e60cee054f2af8954b0be4218f43a9de7097bb13877c23b5a8b749106f2d8623417a7d79f19ae30e23f482105087f7aa073aee05ecc7669b01cd9107c42901accf1dbacea916735428448d6ecf1ba02d37a620921bd1d105d0144664cf5d6070c6590ee65d1e0c168912564"}}}, 0xeb) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0xf7a235407fa63c04}, 0x6) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2500, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x19}, 0x48) 07:55:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) r1 = memfd_secret(0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0xf7a235407fa63c04}, 0x6) (rerun: 64) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1a}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @write_remote_amp_assoc={{0x140b, 0xe7}, {0xc9, 0x7, 0x7f, "2ffef44eb33cfd06ee5f527e6257dd5d66ecda9f9709600f7d0d112f2f0e245e844e7ad80c51ff79eeb6d3856a15722254d1ec5c4e28d9abaca757c90316ff518d1e567a25ca0087000614869fa701f3b503d3f0078fc287b1f3e13f6a81029abee3752de61fed4bd95bb58dc973bce55742e733aeac0e60cee054f2af8954b0be4218f43a9de7097bb13877c23b5a8b749106f2d8623417a7d79f19ae30e23f482105087f7aa073aee05ecc7669b01cd9107c42901accf1dbacea916735428448d6ecf1ba02d37a620921bd1d105d0144664cf5d6070c6590ee65d1e0c168912564"}}}, 0xeb) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2600, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) 07:55:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1b}, 0x48) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1c}, 0x48) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x278b, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x1412, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4001, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1, 0xf7a235407fa63c04}, 0x6) 07:55:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1d}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1409, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x24000044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2800, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000080)="f9ad7e0532e1750fe00a2b35fc301a3807b7e036cc8a19c24a87cc"}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1e}, 0x48) 07:55:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1409, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x24000044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x21}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x1409, 0x8, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x21}, 0x24000044) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x6000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x2, 0x70bd29, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xfffd}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") (async) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x8b27, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x22}, 0x48) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'rose0\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x23}, 0x48) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) (async) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="04d03808dd211071f22978c07e0b29") (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x93, &(0x7f00000000c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x2, 0x3d2b}, 0x10}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x180}, 0x48) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x1000, 0x4) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x20, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x2000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x300}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x93, &(0x7f00000000c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x2, 0x3d2b}, 0x10}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992, 0x67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) pipe2$watch_queue(&(0x7f00000000c0), 0x80) write$tcp_congestion(r1, &(0x7f0000000000)='nv\x00', 0x3) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x3000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x500}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x93, &(0x7f00000000c0)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x8, 0x2, 0x3d2b}, 0x10}, 0x80) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r1) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992, 0x67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) write$tcp_congestion(r1, &(0x7f0000000000)='nv\x00', 0x3) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x4000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x600}, 0x48) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x700}, 0x48) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_secret(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x800}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/235) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992, 0x67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) write$tcp_congestion(r1, &(0x7f0000000000)='nv\x00', 0x3) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x6000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) (async) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x800}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/235) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x8000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000080)=0x8000, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x900}, 0x48) 07:55:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee00) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x9, 0x81, 0x8f, 0x6}, {0x100, 0x5, 0x7, 0x1}]}) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xa00}, 0x48) 07:55:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = memfd_secret(0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x800}) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/235) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xf000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x785cd2e8, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xb00}, 0x48) 07:55:26 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/60) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x785cd2e8, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 07:55:26 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="613350fe9bda08d960754b830653f102a508e0c7279953e07190d0df4f2ad975242789bac661c0464d43a93ebee6eb0e8e3a1cfbe21dcc20bf1ce4f3c6f8f60cb0b938bb08e9871a3a389c0c2c8a6103fbee8d805620f5eb6b4a9eb7c5f3a94755c027d07eabdc956b7a00b820ebfe04344716bb27b62f232baaf16b0421cbe0445d125f3b431297339d9e5c9e2e87aa8c3ca1fd8c220c15b66b0af107aa60319cc19570bc301342d1eb365325e4e842e0a7fb0a973c5b9595be34d591f21b7e19284b83e6bd66bb8d1cadd494569d62d2e67bd7bbd83e1418d720f824792c8b1b53df7769ce92ee09", &(0x7f0000000000)=""/36}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x10000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xc00}, 0x48) 07:55:26 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/60) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x785cd2e8, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:55:26 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xd00}, 0x48) 07:55:26 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="613350fe9bda08d960754b830653f102a508e0c7279953e07190d0df4f2ad975242789bac661c0464d43a93ebee6eb0e8e3a1cfbe21dcc20bf1ce4f3c6f8f60cb0b938bb08e9871a3a389c0c2c8a6103fbee8d805620f5eb6b4a9eb7c5f3a94755c027d07eabdc956b7a00b820ebfe04344716bb27b62f232baaf16b0421cbe0445d125f3b431297339d9e5c9e2e87aa8c3ca1fd8c220c15b66b0af107aa60319cc19570bc301342d1eb365325e4e842e0a7fb0a973c5b9595be34d591f21b7e19284b83e6bd66bb8d1cadd494569d62d2e67bd7bbd83e1418d720f824792c8b1b53df7769ce92ee09", &(0x7f0000000000)=""/36}, 0x20) (rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x11000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/60) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x12000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xe00}, 0x48) 07:55:27 executing program 2: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000080)="613350fe9bda08d960754b830653f102a508e0c7279953e07190d0df4f2ad975242789bac661c0464d43a93ebee6eb0e8e3a1cfbe21dcc20bf1ce4f3c6f8f60cb0b938bb08e9871a3a389c0c2c8a6103fbee8d805620f5eb6b4a9eb7c5f3a94755c027d07eabdc956b7a00b820ebfe04344716bb27b62f232baaf16b0421cbe0445d125f3b431297339d9e5c9e2e87aa8c3ca1fd8c220c15b66b0af107aa60319cc19570bc301342d1eb365325e4e842e0a7fb0a973c5b9595be34d591f21b7e19284b83e6bd66bb8d1cadd494569d62d2e67bd7bbd83e1418d720f824792c8b1b53df7769ce92ee09", &(0x7f0000000000)=""/36}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x1, 0x1, 0x5ab7cb514f5c05e0, 0x6, 0x16, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0x4, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xb, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2f7, 0x2000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xf00}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x14000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x1, 0x1, 0x5ab7cb514f5c05e0, 0x6, 0x16, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0x4, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xb, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x30}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x8000}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/86) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x15000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1100}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x30}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x8000}) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/86) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2f7, 0x2000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x16000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'sit0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x30}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x8000}) (async) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000080)=""/86) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x40}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xbf}, @call={0x85, 0x0, 0x0, 0x15}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, @ldst={0x1, 0x1, 0x1, 0x5ab7cb514f5c05e0, 0x6, 0x16, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xd, 0x0, 0xb, 0x4, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0xb, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 32) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1200}, 0x48) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2f7, 0x2000) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/42) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x18000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1300}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116ff182000000000000000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x1, "6a84030cc7bd37b5dfbf0dee8b81c5e15a5ffe0359ee468b9e072d1efdd4b2"}}}, 0x24) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1400}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x19000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116ff182000000000000000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x1, "6a84030cc7bd37b5dfbf0dee8b81c5e15a5ffe0359ee468b9e072d1efdd4b2"}}}, 0x24) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1500}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1a000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r1, &(0x7f0000000080)="880400627973805a7ec86a3e779d794ef65eaea73e279fe6112db4648f26d6186be3af0c42684d42c450de8305345727e24102c5cd7eb459d6a673ef691a5d638d2d3e1a", 0x44, 0x44, &(0x7f0000000000)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="0b2bb078aa06"}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116ff182000000000000000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_adv_data={{0x2008, 0x20}, {0x1, "6a84030cc7bd37b5dfbf0dee8b81c5e15a5ffe0359ee468b9e072d1efdd4b2"}}}, 0x24) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={&(0x7f0000000080), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x140, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x140}}, 0x4000004) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xff, 0x4, 0x8001, 0x81}, 0x10) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x11, 0xc, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1600}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1c000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = memfd_secret(0x0) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) connect$packet(r3, &(0x7f0000001300)={0x11, 0x5, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r5, &(0x7f0000001340)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x1ee}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001380)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r2, @ANYBLOB="866c05d1050000001820000052ca64312bcab3da9180ea75d4028c1a21a1dec2cb6d3c8e15163bf0d6b63797a6e73ce33d5bf07d96", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: r0 = socket(0x1a, 0x8080c, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x995}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x7, 0x4, 0x5, 0x1, 0x5, 0x3}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001d00)=ANY=[@ANYBLOB="500000000914020029bd7000fce8df25080001000100000008000100000000000800010000000000080001000000000008000100080001000000000008000100000000000800010000000000e2c43e90500ea3d125f1b6c91c9944e84400000000a6c60a1a51f51652f01d2375298eb65816656d5641b7434f6a06ab3f667215c7f99f4b9cc40c5745b5f9bd421274fef779762b8d0848617d7deee5f9f2ba3578963a3c6779c12b23788571045faae53dc3823e3bc0ffeb649a6d725a26cac6d89dc686b83c238f3b8222d82eeceec0058b98790b2282a483dc9339d78b87d0b5a38b6d"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4048001) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x8, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1d000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1700}, 0x48) 07:55:27 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) (async) add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) (async) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) (async) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1800}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x11, 0xc, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) socket(0x11, 0xc, 0x7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x1e000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: r0 = socket(0x1a, 0x8080c, 0x6) (async) r1 = memfd_secret(0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x995}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x7, 0x4, 0x5, 0x1, 0x5, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001d00)=ANY=[@ANYBLOB="500000000914020029bd7000fce8df25080001000100000008000100000000000800010000000000080001000000000008000100080001000000000008000100000000000800010000000000e2c43e90500ea3d125f1b6c91c9944e84400000000a6c60a1a51f51652f01d2375298eb65816656d5641b7434f6a06ab3f667215c7f99f4b9cc40c5745b5f9bd421274fef779762b8d0848617d7deee5f9f2ba3578963a3c6779c12b23788571045faae53dc3823e3bc0ffeb649a6d725a26cac6d89dc686b83c238f3b8222d82eeceec0058b98790b2282a483dc9339d78b87d0b5a38b6d"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4048001) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x8, 0x4) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 0: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="81eebacc2739469fdf71ffbc64f37c796d0155bf6ce53fefdce58f66634bea04d5f18b44416319eb4aaee2378918527e3df8db3016db320cc8", 0x39, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000240), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='a', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1}, &(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000001140)={'sha256-ni\x00'}, &(0x7f0000001180)="18d63665279686a416383f250e8ce540975206b603a3b011802d99962a3bf9c50152c2d042321ff0a64ebfaafbbccadc6f88c3010f6dc5b97fb1078b3eed479ea4225abc4ced4f8c57f139aaf82f1c69ae9d639e7c7dee20c762e1876513aa177174d9bfdb04885696da7be5374b4dba0e50ce17b2d14143762cf208eedf150315aea32bfdc3310c3742338acf1d3dbe5afffc406d292900", 0x98}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="280000001014200029bd7000fddbdf250fd92e93b1fc69172c9308004a000200000008004a000100000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = socket(0x11, 0xc, 0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) socket(0x11, 0xc, 0x7) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) ioctl$sock_bt_hci(r1, 0x60066cbd, &(0x7f00000003c0)="0a2607b33139ba751c73f4685f564d38db59700d4228bcc0efdec8aa5723605fc7873f0cea9ef85e1bba0386daf9b6fdcc36c2c01d4b9a06e6ed4fe540675769b130c957c7005165b3bb302e738d841e63256d096e3f6bb9449d4a080a3d64935e74071e3782377949d2b84bc9d3a3c51f052ddfbba236c0460be742b0d82db9f32baa1ea3532f53a3d2f0672227e4fbda24008e96cfabd6277921d6a2157fdb834e80eaa0b73ae7f22801e87219794113100b0d6ee9c3c50198cb4f1de1d480") (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000a400000000000000030000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x278, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaf}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1900}, 0x48) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1a00}, 0x48) 07:55:27 executing program 2: r0 = socket(0x1a, 0x8080c, 0x6) (async) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x6, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x995}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000001c0)={0x7, 0x4, 0x5, 0x1, 0x5, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001d00)=ANY=[@ANYBLOB="500000000914020029bd7000fce8df25080001000100000008000100000000000800010000000000080001000000000008000100080001000000000008000100000000000800010000000000e2c43e90500ea3d125f1b6c91c9944e84400000000a6c60a1a51f51652f01d2375298eb65816656d5641b7434f6a06ab3f667215c7f99f4b9cc40c5745b5f9bd421274fef779762b8d0848617d7deee5f9f2ba3578963a3c6779c12b23788571045faae53dc3823e3bc0ffeb649a6d725a26cac6d89dc686b83c238f3b8222d82eeceec0058b98790b2282a483dc9339d78b87d0b5a38b6d"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4048001) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x8, 0x4) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x20000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1b00}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x1405, 0x400, 0x70bd27, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x21000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x22000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x80000000) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1c00}, 0x48) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1d00}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x24000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="9cbce0dbc91dabb5c9bdea") r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x1}], 0x4e, 0x0, &(0x7f0000000200)="41c0204aa4c852187985495acab91188ca8a9b9b412fd961dc33b7cdf9e1d599f5b360726d8ba92a21ae51cbc3d32d835d8428db26c5a1eafe62dbe469d9f993be08f2e70ed6e3ab11cf29fbe700"}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x25000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1e00}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="9cbce0dbc91dabb5c9bdea") (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x1}], 0x4e, 0x0, &(0x7f0000000200)="41c0204aa4c852187985495acab91188ca8a9b9b412fd961dc33b7cdf9e1d599f5b360726d8ba92a21ae51cbc3d32d835d8428db26c5a1eafe62dbe469d9f993be08f2e70ed6e3ab11cf29fbe700"}) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x3, 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40802, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x26000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1f00}, 0x48) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000080)="9cbce0dbc91dabb5c9bdea") r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x8400, 0x0) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}, @enter_looper, @increfs_done={0x40106308, 0x1}], 0x4e, 0x0, &(0x7f0000000200)="41c0204aa4c852187985495acab91188ca8a9b9b412fd961dc33b7cdf9e1d599f5b360726d8ba92a21ae51cbc3d32d835d8428db26c5a1eafe62dbe469d9f993be08f2e70ed6e3ab11cf29fbe700"}) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000100)=0x3, 0x4) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2c, 0x3, 0x732) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_def_link_policy={{0x80f, 0x2}, {0x800}}}, 0x6) (async, rerun: 64) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2c, 0x3, 0x732) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x2c, 0x3, 0x732) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) (async) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x28000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116000024ffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="6f3e073e20412839accce58eb1df7882d37d8d69c39e921ef5dd3858288e9a77f8adf723124bbb36dcc12399ccee1bc9a7aa9656d73b401f11ea26be5e4bb4de16c54c434820951f14d41dc6c846f65782c1776efbd8e09124a4053ccdfa129eadfbdb7a8c072026ca16e85f2ea8459697908451ee677e265dd778faa75da634c13a3febb33c5b7cc98be5c1cee3434fb5da83aaf91a3b16f3c849217829d6d08aa276a58e5d196990e14ddf68f7fb85a0b1ee74b7d0b887f8b5cf6e54b848c62b41fd4f4209de27ea2d77c0e366899c51686b") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) r3 = memfd_secret(0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2c, 0x3, 0x732) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xe3, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 64) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x5801}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x1640, [0x5, 0x8], 0xd4}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x16, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2100}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x60000000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116000024ffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="6f3e073e20412839accce58eb1df7882d37d8d69c39e921ef5dd3858288e9a77f8adf723124bbb36dcc12399ccee1bc9a7aa9656d73b401f11ea26be5e4bb4de16c54c434820951f14d41dc6c846f65782c1776efbd8e09124a4053ccdfa129eadfbdb7a8c072026ca16e85f2ea8459697908451ee677e265dd778faa75da634c13a3febb33c5b7cc98be5c1cee3434fb5da83aaf91a3b16f3c849217829d6d08aa276a58e5d196990e14ddf68f7fb85a0b1ee74b7d0b887f8b5cf6e54b848c62b41fd4f4209de27ea2d77c0e366899c51686b") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) r3 = memfd_secret(0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2200}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) (async) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x8b270000, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x1}, 0x6) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 07:55:27 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="0116000024ffffff18200000", @ANYRES32=r0, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000080)="6f3e073e20412839accce58eb1df7882d37d8d69c39e921ef5dd3858288e9a77f8adf723124bbb36dcc12399ccee1bc9a7aa9656d73b401f11ea26be5e4bb4de16c54c434820951f14d41dc6c846f65782c1776efbd8e09124a4053ccdfa129eadfbdb7a8c072026ca16e85f2ea8459697908451ee677e265dd778faa75da634c13a3febb33c5b7cc98be5c1cee3434fb5da83aaf91a3b16f3c849217829d6d08aa276a58e5d196990e14ddf68f7fb85a0b1ee74b7d0b887f8b5cf6e54b848c62b41fd4f4209de27ea2d77c0e366899c51686b") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0x3, &(0x7f0000001300), &(0x7f0000001340)=0x4) (async) r3 = memfd_secret(0x80000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001380)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2300}, 0x48) 07:55:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/138) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001300)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001340)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x10, 0x2}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x9effffff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) memfd_secret(0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0xa}]}, {0x0, [0x2e, 0x5f]}}, &(0x7f00000000c0)=""/180, 0x28, 0xb4, 0x1}, 0x20) (async) openat$full(0xffffffffffffff9c, &(0x7f0000001240), 0x140, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe2}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0xffffffffffffffff, 0x1}, @ldst={0x0, 0x0, 0x2, 0x0, 0x6, 0x20, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x6}], &(0x7f0000001340)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x3, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r3, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) (async) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) (async) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x2000000}, 0x48) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xefffffff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r2, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x4}}}, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 32) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xf0ffffff, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x3000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x4}}}, 0x5) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (rerun: 64) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x9, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @cb_func={0x18, 0x3, 0x4, 0x0, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @read_auth_payload_to={{0xc7b, 0x2}, {0xc8}}}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffff7f, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x4000000}, 0x48) 07:55:27 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000001300)={0x5, 0xe99b, 0x2, 0x2, 0x10001, 0x6}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001340)={0x2, 0x8000}, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffff9e, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa, 0x4, 0xffffffffffffffff}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f0000000000)={0x1, @delete_reserved_lt_addr={{0xc75, 0x1}, {0x4}}}, 0x5) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x5000000}, 0x48) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) 07:55:27 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xffffffef, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: pipe2$watch_queue(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r4 = memfd_secret(0x0) r5 = syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) r8 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x6000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f0000001300), 0x80) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) (async) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = memfd_secret(0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00) (async) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (rerun: 32) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0xfffffff0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 2: pipe2$watch_queue(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r4 = memfd_secret(0x0) r5 = syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) r8 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) pipe2$watch_queue(&(0x7f0000001bc0), 0x80) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) memfd_secret(0x0) (async) syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) (async) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) (async) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x7000000}, 0x48) 07:55:27 executing program 5: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x400}, 0x8) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1404, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, 0x1411, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x4010) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x1, 0xfffff801], 0x7}, 0x10) 07:55:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="db0200407113157e"], 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:27 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x0}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x8000000}, 0x48) 07:55:27 executing program 2: pipe2$watch_queue(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r4 = memfd_secret(0x0) r5 = syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r6 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) r8 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) pipe2$watch_queue(&(0x7f0000001bc0), 0x80) (async) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000001d00)=""/163) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x1, 0x8, 0x1, 0x6, 0x9, 0x8000, 0x3}, 0x1c) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) memfd_secret(0x0) (async) syz_open_dev$evdev(&(0x7f0000001c00), 0x5, 0x48000) (async) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000001c40)=0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x400}, 0xc) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001ec0)={0x30, 0x0, &(0x7f0000001dc0)=[@request_death, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @request_death], 0xae, 0x0, &(0x7f0000001e00)="9519f0f49b34eefa2d458cfab6b137e3157106ef1f2d67a47a5aaec2a1c0326b52a115c9b45135e0ed250ce42ad2c06111e6c7f00ffbf96a2dfa8302a476bafa58070810e0f046ea7eb16ffef78dc188b474cf035c3b2ff2d3c416a8a7d0c29ebcd647cd32132957d364b8eed8d60660c9300441529843b3814f4097819e4fe70dd898a5eb018707f565cf79bd3974948bfd1aec03cf2cfd6b71b383f88f34bd2da7c9ff16578b0bd6e26599242c"}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000500000002b200080200fefdef8ac6a275930000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xed, &(0x7f0000000180)=""/237, 0x41000, 0x0, '\x00', r3, 0x1c, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x2, 0x2f5cb751, 0x400}, 0x10, 0x21f6c, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[r4, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0x1, r8]}, 0x80) (async) 07:55:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) 07:55:27 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x9000000}, 0x48) 07:55:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, 0xee00) (async) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x2}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="db0200407113157e"], 0xb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xa000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) r1 = memfd_secret(0x0) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x8}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xb000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="db0200407113157e"], 0xb) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) memfd_secret(0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xc000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) (async) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x19}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214000829bd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000009a355a0f9e2dad6e1cd7030d701ebae89e9a7b7e3b8f4bc3149e93b6dc98fddfcd8be1a0a04c0cebd0efb9e09ebb7588036a62c4d628664d5dbc6da62dccea135be20f012af991c604deeca2e5cb98572ea0eef0bad94cf954c59a14a96cd9e5ab87ca3aa458e3fb9f99074cc918e532f4e20cbe8af24161f597399f"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r4 = memfd_secret(0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x6, 0x1, 0x2, 0x100, 0x2, 0x3f}) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:55:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214000829bd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000009a355a0f9e2dad6e1cd7030d701ebae89e9a7b7e3b8f4bc3149e93b6dc98fddfcd8be1a0a04c0cebd0efb9e09ebb7588036a62c4d628664d5dbc6da62dccea135be20f012af991c604deeca2e5cb98572ea0eef0bad94cf954c59a14a96cd9e5ab87ca3aa458e3fb9f99074cc918e532f4e20cbe8af24161f597399f"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async, rerun: 32) r4 = memfd_secret(0x0) (rerun: 32) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x6, 0x1, 0x2, 0x100, 0x2, 0x3f}) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xd000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f0000000000)={0x1, @write_voice_setting={{0xc26, 0x2}, {0x80}}}, 0x6) (async) accept$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) (async) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x55, 0x3f, 0x4000, {0xd10f, 0x4}, {0x1, 0x100}, @ramp={0x9, 0x5b3, {0x6, 0x40, 0x1ff, 0x7}}}) (async) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80800) (async) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) (async) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xe000000}, 0x48) 07:55:28 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x4080, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000214000829bd7000ffdbdf2508004400", @ANYRES32, @ANYBLOB="08000100020000009a355a0f9e2dad6e1cd7030d701ebae89e9a7b7e3b8f4bc3149e93b6dc98fddfcd8be1a0a04c0cebd0efb9e09ebb7588036a62c4d628664d5dbc6da62dccea135be20f012af991c604deeca2e5cb98572ea0eef0bad94cf954c59a14a96cd9e5ab87ca3aa458e3fb9f99074cc918e532f4e20cbe8af24161f597399f"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) (async) r4 = memfd_secret(0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x6, 0x1, 0x2, 0x100, 0x2, 0x3f}) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0xf000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd88) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01960000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="0000000005005aacc8885929b3e6a11f45d7604e485b43d68b66582d4940caea798ff53fcfe79c4cb404e5d030f1286d3589abcd5f75ebc1e67c3918a8be7a452e826758467b4d427505dd34f998c24e4a442ceaa85ec26ffd61b4c630a2c7c0c9", @ANYRES32, @ANYBLOB="00000000000000004000060001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x403, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x2, 0x4}}}, 0xa) r2 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x5, 0x5, 0x108c, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x10000000}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x11000000}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000180)}, 0x10) (async) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/212, 0xd4, 0x40000002, &(0x7f0000000200)={0x11, 0x9, r1, 0x1, 0x81}, 0x14) (async) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd88) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01960000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="0000000005005aacc8885929b3e6a11f45d7604e485b43d68b66582d4940caea798ff53fcfe79c4cb404e5d030f1286d3589abcd5f75ebc1e67c3918a8be7a452e826758467b4d427505dd34f998c24e4a442ceaa85ec26ffd61b4c630a2c7c0c9", @ANYRES32, @ANYBLOB="00000000000000004000060001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x403, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x2, 0x4}}}, 0xa) (async) r2 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x5, 0x5, 0x108c, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x4}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd88) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x12000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="01960000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="0000000005005aacc8885929b3e6a11f45d7604e485b43d68b66582d4940caea798ff53fcfe79c4cb404e5d030f1286d3589abcd5f75ebc1e67c3918a8be7a452e826758467b4d427505dd34f998c24e4a442ceaa85ec26ffd61b4c630a2c7c0c9", @ANYRES32, @ANYBLOB="00000000000000004000060001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x403, 0x1000, &(0x7f0000001300)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_data_len={{0x2022, 0x6}, {0xc9, 0x2, 0x4}}}, 0xa) (async) r2 = memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x5, 0x5, 0x108c, r2, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000}) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/25) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)="9e99128fffffe2c3161bc3068bb05dfe2083f9a44f9749cb8195e39c7881c0ec9aeddb453c6e130e1fee3707601a184a13c10d35a535f984f33c4c0a49d0a53498fd5fe86d073a47aed263b9ce43c8dc8c01139b6c479a974258338217e7a9b14bef2d0fb1543d2e", 0x68) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000000c0)=""/249) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000280)=""/199) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x13000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="c7870900000000000000264a6fe2e2a594699e436a3733d524008a8752076995a1f449185b40d17ee45b548086873cbd7c2a0f82a24852a98779d4a39fbf098839460ff640174ba6fe1a5ac42e2e7ae3c614344911c05c86b7ee229f461a23f63af63f39dd935fb4ad282f89955a1303595737554270d0fe8465684fb981e2575f370e0b44e8a60a075aa292016f713090a597067179af81ed934dadceb278bb6630163b7518ef5947bf1fd72234773227b4454b830635149b88d2c5c72d558660ac792c056c23de5ca28c4d6b59549c798cb525687091c7d317b80736c0c39f396513e535977d25615b289cfde6184217a4ddee0a4afb753f3b53b43c5a74d5fc8e971a53dcfdc816dc20e4d839b0c5dc7ac0bd08008c5915ce5b80793746775aefdebbf153485dd49168fa5834738096e230ada404852447ffa55b4d16880e3c300cc78235ae3b118928fc19189c2c92a0309f093d065d748666e1e9d62d2bf6dfa4") (async) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) (async) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="e70c41d5d7fc13dff7074be863900c0daf3e5ca23d0f5836ef1b50e23ba73a6cc972d9bba444bfef25ec53ab5954f3c14ec0df4a7c9f733f7c0db72d916fa49914d86b77640383cc81dc0159ac566a839f1f1af02b9cefbfca191efd2f19ee17d8f05afe5644798f3a422c2dd9e8cd96e7547df3be3c1c4bfeaf718148f106a8e986811132fb47f8520927334505df2c3d79eacada5345e65b966ac81c92002db88aad0938ae426cba81504b4a038c195e052325682dffbc1f3c8782f2f0edc196ff1ec89c80a9e468273d833ff172371bd5ece7cf55f7ae6f05cce5b29d1910f059a4b08396e871acf0da7e48a4bb90139c3c1b62b141d558d002b2b1611fa1d2e5c7c20a408192c3730bb64ed76bae54c00bb55d59bef5ffa3590abda727d5a713af542d7c383c590e609ff25b33904e156ad497ea40ed263886425dcb379b006e00edf0f788938506caa916cb7c0dc073a2e85933c13107561a4f06828e4c0fb5dbb05397e5403f02c91c00b5a574bbf1aa1bfe41254ae64df2addaaf3e96efdc9ea59069531d92e771e7fa9fab625b2b9f2442f3894bacfca80473c44d00ab89902310a1e52647f11f30aeaa7bd9a632960f3ed2b0205b5d40e8a6f7cb157287b90ac78773d61c6e85e2c5c87b5419c3485f9387f939daa7f6251f25bcf548760530de068e54c1d04e323167a206e0214bcd1eb81f933f0b66c6402e21f4a8bb5bb7619134a92e9f4c4ff42666fcd5cc7e89105484ad7d6bd1cd264b3820748563d276269f09eedb5fa4c9819644e65b6aa9221c655bb3f9fe40892b45e31c5f0af2d1c6e008d993913cfc6cc6514ee45eff1f46a21929d3e14065412d6419014879e56d13b939533f7ddf13903d8a6c5819c0accdd45b90e504c33b226fe794ac4f60be314b3639f84c01cd708d56cf261b4503a9d02b491402569e39c03bc6a20427c5c00a27ae56545bdd47ec1fc67abbc00060af4065ef4e499dc153ca0031ed53b861eb62878b1ad1748db369f07b7747e3d371868eefcdd4cb7065da9ad57b5ada7f4c4302db3c2aff51f96f3340df8323ece9ea2b996bc532955a918e2b847b6124da148f57b1c9cd477ffacce1c3e5614d54e5b5213e3fe2e7fdfbf4951b09ba39edd5bbee11bf988254f5606c33286ed50e0fbbc01141e291879d8b0ced3f0a8e124c8e7847e544bc5880587b6ca4129c38d9db45429e1b0d993716a7683fa0d9668d348a3017d0f0812524b7a6d3a462125d925dfd2406e8375139c18595f8e826e3bc30d860f7cb718451694439a0ab5783bd7b5617396970fb57bc1712ce962ed6f5f32bcdd3abf934ddaffc37e9f7c86141fd5dd6e92956a2fb77cd52a540a0b20981ef04ee117c44751c2f2e79024838543466c9100a7d8f08950be19a016658f775e96d802ecb9079bf176ee4262c49eb064e0077fffd83ff565180694a33db095b4816400c3b8d289d69562b817f375578fea894e2ba06b4d7a84b58376ac26a98e606bb3601c0445328a203f41494cce00e367b8ecbcafa914b39b6c296df5dedf279e3e871a9e9582aa55f9ece1db254b97506396513db10ddfdd8bbcad7252a3a690518e265b59fb7bdc44e57d15f02b07b50f0650688f72dcc72ad51edbc36267ebb4acf92bbe2e3a2fb539c20e2fcba03a5dbe7d08f433b0a1aa885ea14fa77c2de8bb8555957dc5db5e7c001b835586dfb37c5fb7c5794694aa3301ba0bfdc706627b3c3fa14377a207a9b31970e452a265df811f1c47cee60c5398131a136333a9d614cb623db0f8a6a2cb06dfacb88a6416992337ee7dd2fee4ddb9f3f612b47641fc3fdba1751e1198a99ca57a4e5d793d63cbe15f121b716e407c370497235474caa812b1e8b1ecabdf8b1386db27620109c96bfae03224f371670090a0d8775fdfe0bd9146e269facc278c9b2240e3e7a00d46dd48bca39b35d75631d87bd853431f59ef53e4b2da180f9636a1c500214d7fad0a972f7b12412c070c149fea5e5c673bc1f9ba280bc0cadce78080f43e85a9ea822ee310da02a9929e1ffc0fd5b404cfbe74da752816030579893d077c2cefcc1977d371b74f48ce84d295d7c5ce9b2232a38cc5d00c2789de4e2599e78ed8480a93062475d57626f6e3cf597e2497a35fe1c9ab748f6fd87b8709dab98b909ce36a9a6b84122a399c79e33a075464130b5d1d4f74f8fd8fc164b559e061a3bcb0cbd9182cb941bb95c93f654d84b59ed446b24ff4f393c29395a7db2d754408d0db98d8522b56e9ba5ede042b18a5bae2d92294e98221dbe09820d84f9fc555c5a7eb9597ab61dc0dff33049cba29d3dc3000d4a7108d5740bb269778be8099dea4d75b6f00c18e069255351c3582a2272ac660b46f0f2cea63dd7ca70e057bef5d55e385f1afaa0475cf181ecd1b2c94e828cff2b537e539fe8392511375029f9c009722aa68b6ac09dacb2dd786eb47f5bcc8eedd4f73c649e19c283e5e1e0f09de61d4abcf99f1c9f2d283134d06823a484ff6840541c731318dd68718db64018c51fa25df0754a97fb5600f110e62beb9166baf958fb06c2d6f89bf29ed69a00740412f04eb56d7d720862012e72452d372db463a260e482f1ef66c90fd5dca4305d8181da725d73f7dfff8e781c9c9724b93590af3a234c2f49d5e408438b5d80772938627fea51e62c48f6b66dae3c9743f3450ec2a6b787068589b78f5f7b17f15134781fe641f9b5220d142729081733aea2458592e04563ee5917d92595fb9d22b6f9fddc2eb2d4c87bba6c2d1c750bfad8e3adc4559a6b81c03f875418bb3f5ca0b69cda5d6d6d5706d6456745eeabf22309f58711a0c089d7481727760df0a0ad44b8856243ff88f7a2007c921ea22af88b71a72be21682d0ddf25654b12429016a361c3310731db46d7503e76b467fd2b489091a0ebe25fdb3a7636207065b46e2a624643f33e24e15c80e665d75c78b8d3298c61cebf6e682d8a3a874948516d3109dd91ad339e1ff0ef2765b78547e0893e2fb1e8f98085caec6425066dcd82976d957eca4901615be146054d006023478ca3ff0ed4783c2c32a3fbf63d70eff6a569d0c5f51de77fcfa837a662a8d5eb27964f4d10a639a21e1b68d3ae91d3dea737323f6ee4907456b4fe394bf3f750380eab3abd01ed815eae676f0c11899c3a0f59e660e1ffe028762632d483214c24e44d5f95560a3c093ddfbdeb80b04731ada636418b4fabbc38d8154e0937cebf55c2cb3e0e0b698d6dacb7ebd2498d2ce99adcee735992b74e254dc77a8550a1e555921ab6ede67350d5995ec0a3d7527b5cdeb3693b233032ff0f4da528346443e26c319c42e0566f484a731c02aaad2c6ee4d20c64fa57d27a7dcd5d9334624b5b78245c6973f26b795fed645f4522ade511f81a8ee889a57a90b6034d43039af5088972eedafbf896566c055b8a1f63d4852ee76f607f0616c73c77a6fe3ed478c722961b453a02be1fce70400bb267143f35f827f37b90570c3cb98576136a2bdf8dbf78d93a2ecc60dcc21be5f546616fba2868b8651822a6935d0db3f7a27fb24f0c6ae5d7d9f53b461c152fb0447faf7076a87cdc9ab11aa80fd919753603e51bd308d2050bf2ba30bda915919a831f52f9a4ce3b44be5c556a1d15d2769052e8f26bcee443022b07d2e442f678bc2b02881b346ac24b94cb9f600c486c87557c37faad9a9111f91a11f0b09a9883eafbabbc4aa978497aea0bc32d2d5b5dc711efdb8a5f92e4cd1de3f0f4f7a3529d437b33b9b2791fe15d08acffd6c399c761c355052eaa15e045242daf99478e333d6adf7fb151cfe2df24e88506812293e39714e9ab064f6f28a9a8b0cbd071bc553296fa7cafca3367bf097e3b64501dbfbbb30457a0a6b4c9bf40f31b823474d0ff0b6a1f4f7bccd10019a899f45545d7f6449b5c610e50278353b31dc86874d0367c2a9e1f8067d42bf74cc60f819045ba28b698456e5fac7bee7040a76562c9bc576f9703453eae380dd1143cc54011408af36ca2a3ca7deef647152c6cf134e8d294450a75d6be392f192743c851810cc414724a8027157bd691a9eea2c8e0bbe3b6d662b6500241e0a0066d53c1e8f70539b85630255d2388f006b8384c3a6b7292d884d0bc47933492ea5d357d442161a71a98127eb1f0e00f6b23925d309cf685481db963857d5891f37bb3bfcf705b25df09ac430ee1cf85a16566049048916cbc15841cbcbbde1afc1748a608ceb68965e5ffa7a7c6f43c1c107658284ea43cb9d2315cc81702548e109abdf7cfc9f752b5a5e7d22c8a291c7e79843d3766c3a173384ad7ce718297868f8b1afb8bb63d4c3f4ee82437b9a3da3eb7886dad9456ef41ab0921f1f1ea7c76e3224285919e53642200ca2e032785ac8f6889f8f01b9f4937278b92fdf994eebbfd9fdeaa6e3a35cbf2c358ef5da6e348c8297990af23552836ee854bd7adc3be9bf99df8c2d92cf71dab67724a997cb6cb8dc5407e76a2858f6a495b66971b213ea63a66e5dabfe89f2bd63b0b968837f55f65cc69562cde1e120d287be2890e852b4a81266a16d385862df32a7756af6b8bcb04ae1884864ed21eece0ff3c77e47bd2e10fa0e2a1f0adb0d5be4ea49c213c78690275c74cb054b6cb0fa5e7e82b8d53c2e6dfc28670e5b69b9c1c43c828c73f8b592298750cbaa190ba3f025d2b422101d9e0d250e4707f4d630942e4cda1e5f865f78f970de192631e03e7ee733b720534fda41b5a5a250d742ee157e22dbca4e10a1035221a72b7f77cdb8485ad15555129ff60ca7b3eb0b65219cef279ca6cc9fea219f7fa001eeedf3728f2e0e011d61d72f1a4156ed5f33d109d6af35924fc1807cb2f1b7c8bbf1fd98df7468131e31231207485b15e87d398500a013a7f616bb16e21ce450d7ed3e80944b963d806f98d3259f4b3a7171eab69ca78e220f3dcca2925662634508e493fa660b5735ade3dd1b9d7c215a5193b66e3671eab75e06d2a3525309b32f3bbf8cd82e392f114f4794da05421eea1f3187512129bd0a0334803d987aa174fdc133873fd1e94f5759766cc3053061043a2a5bcaedd275e0d8f1cc28b6b64bbbf5ba3743b4bee55af276df22dbe83945c103d17783be7765a6c225caea31e1edcd927ac250f5a86e1e261bc338f36710108bbec70c6c89964c73f4c0dc64745ed24ba7e3ff7b8f94d8a3e2fa3b3e91d96bf96a075470127b88c23a60759427a2032eff084e788603a18954d2e94115baf3207f0369cc13c5958ac0783aaf3668f95ffd8bba8b9a737a4317aada2b4522ca032ce4a130b6c11b420df408b54eadd47536871a4fa10d3d7c48ce870cdcd4504cd7ba133ea0d63cd4bf33338bcc03a6a1d1dcdf48625c8fc561b504c31bb3ba148335f5cf91de3029b4ac8c01467b08833cf933905f773b8de21ccb2216dff379ef3789b27198bc47975b911523298282e78adae8e0a0ffe3ccda849aa1947e0982bed3dc1b5a26f7c24bd2d646b8c779d80da5f0baa0cdb51e8f84acf61d6f5a067277e31e30beead135cedce38de2c5aecfe4ab7aaea5937ae8960df8a2aaad6a07695ff48904b7bd092c1b7d10c09fb08b5ba44a53312e648a38b7833d202609c9565f1a8a56c2318052610ecd024ef2d4587c6b0ad23c3eab839fd0d25720fba4575a76bc12f9e31998c71eb7b2f9122d020208e6dc5c98fb533c87588484abc9d7dbd01ebf2e341089780974b3c4b5ead94462b2dd852fd51bb0c5510347b579d2f603793fabaab28df2019c4705ab") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000}) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/25) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)="9e99128fffffe2c3161bc3068bb05dfe2083f9a44f9749cb8195e39c7881c0ec9aeddb453c6e130e1fee3707601a184a13c10d35a535f984f33c4c0a49d0a53498fd5fe86d073a47aed263b9ce43c8dc8c01139b6c479a974258338217e7a9b14bef2d0fb1543d2e", 0x68) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000000c0)=""/249) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000280)=""/199) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x14000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r1, 0x0, 0x80000}) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000001c0)=""/25) (async) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)="9e99128fffffe2c3161bc3068bb05dfe2083f9a44f9749cb8195e39c7881c0ec9aeddb453c6e130e1fee3707601a184a13c10d35a535f984f33c4c0a49d0a53498fd5fe86d073a47aed263b9ce43c8dc8c01139b6c479a974258338217e7a9b14bef2d0fb1543d2e", 0x68) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f00000000c0)=""/249) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000280)=""/199) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000100)="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") ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000080)=""/104) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x15000000}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="e70c41d5d7fc13dff7074be863900c0daf3e5ca23d0f5836ef1b50e23ba73a6cc972d9bba444bfef25ec53ab5954f3c14ec0df4a7c9f733f7c0db72d916fa49914d86b77640383cc81dc0159ac566a839f1f1af02b9cefbfca191efd2f19ee17d8f05afe5644798f3a422c2dd9e8cd96e7547df3be3c1c4bfeaf718148f106a8e986811132fb47f8520927334505df2c3d79eacada5345e65b966ac81c92002db88aad0938ae426cba81504b4a038c195e052325682dffbc1f3c8782f2f0edc196ff1ec89c80a9e468273d833ff172371bd5ece7cf55f7ae6f05cce5b29d1910f059a4b08396e871acf0da7e48a4bb90139c3c1b62b141d558d002b2b1611fa1d2e5c7c20a408192c3730bb64ed76bae54c00bb55d59bef5ffa3590abda727d5a713af542d7c383c590e609ff25b33904e156ad497ea40ed263886425dcb379b006e00edf0f788938506caa916cb7c0dc073a2e85933c13107561a4f06828e4c0fb5dbb05397e5403f02c91c00b5a574bbf1aa1bfe41254ae64df2addaaf3e96efdc9ea59069531d92e771e7fa9fab625b2b9f2442f3894bacfca80473c44d00ab89902310a1e52647f11f30aeaa7bd9a632960f3ed2b0205b5d40e8a6f7cb157287b90ac78773d61c6e85e2c5c87b5419c3485f9387f939daa7f6251f25bcf548760530de068e54c1d04e323167a206e0214bcd1eb81f933f0b66c6402e21f4a8bb5bb7619134a92e9f4c4ff42666fcd5cc7e89105484ad7d6bd1cd264b3820748563d276269f09eedb5fa4c9819644e65b6aa9221c655bb3f9fe40892b45e31c5f0af2d1c6e008d993913cfc6cc6514ee45eff1f46a21929d3e14065412d6419014879e56d13b939533f7ddf13903d8a6c5819c0accdd45b90e504c33b226fe794ac4f60be314b3639f84c01cd708d56cf261b4503a9d02b491402569e39c03bc6a20427c5c00a27ae56545bdd47ec1fc67abbc00060af4065ef4e499dc153ca0031ed53b861eb62878b1ad1748db369f07b7747e3d371868eefcdd4cb7065da9ad57b5ada7f4c4302db3c2aff51f96f3340df8323ece9ea2b996bc532955a918e2b847b6124da148f57b1c9cd477ffacce1c3e5614d54e5b5213e3fe2e7fdfbf4951b09ba39edd5bbee11bf988254f5606c33286ed50e0fbbc01141e291879d8b0ced3f0a8e124c8e7847e544bc5880587b6ca4129c38d9db45429e1b0d993716a7683fa0d9668d348a3017d0f0812524b7a6d3a462125d925dfd2406e8375139c18595f8e826e3bc30d860f7cb718451694439a0ab5783bd7b5617396970fb57bc1712ce962ed6f5f32bcdd3abf934ddaffc37e9f7c86141fd5dd6e92956a2fb77cd52a540a0b20981ef04ee117c44751c2f2e79024838543466c9100a7d8f08950be19a016658f775e96d802ecb9079bf176ee4262c49eb064e0077fffd83ff565180694a33db095b4816400c3b8d289d69562b817f375578fea894e2ba06b4d7a84b58376ac26a98e606bb3601c0445328a203f41494cce00e367b8ecbcafa914b39b6c296df5dedf279e3e871a9e9582aa55f9ece1db254b97506396513db10ddfdd8bbcad7252a3a690518e265b59fb7bdc44e57d15f02b07b50f0650688f72dcc72ad51edbc36267ebb4acf92bbe2e3a2fb539c20e2fcba03a5dbe7d08f433b0a1aa885ea14fa77c2de8bb8555957dc5db5e7c001b835586dfb37c5fb7c5794694aa3301ba0bfdc706627b3c3fa14377a207a9b31970e452a265df811f1c47cee60c5398131a136333a9d614cb623db0f8a6a2cb06dfacb88a6416992337ee7dd2fee4ddb9f3f612b47641fc3fdba1751e1198a99ca57a4e5d793d63cbe15f121b716e407c370497235474caa812b1e8b1ecabdf8b1386db27620109c96bfae03224f371670090a0d8775fdfe0bd9146e269facc278c9b2240e3e7a00d46dd48bca39b35d75631d87bd853431f59ef53e4b2da180f9636a1c500214d7fad0a972f7b12412c070c149fea5e5c673bc1f9ba280bc0cadce78080f43e85a9ea822ee310da02a9929e1ffc0fd5b404cfbe74da752816030579893d077c2cefcc1977d371b74f48ce84d295d7c5ce9b2232a38cc5d00c2789de4e2599e78ed8480a93062475d57626f6e3cf597e2497a35fe1c9ab748f6fd87b8709dab98b909ce36a9a6b84122a399c79e33a075464130b5d1d4f74f8fd8fc164b559e061a3bcb0cbd9182cb941bb95c93f654d84b59ed446b24ff4f393c29395a7db2d754408d0db98d8522b56e9ba5ede042b18a5bae2d92294e98221dbe09820d84f9fc555c5a7eb9597ab61dc0dff33049cba29d3dc3000d4a7108d5740bb269778be8099dea4d75b6f00c18e069255351c3582a2272ac660b46f0f2cea63dd7ca70e057bef5d55e385f1afaa0475cf181ecd1b2c94e828cff2b537e539fe8392511375029f9c009722aa68b6ac09dacb2dd786eb47f5bcc8eedd4f73c649e19c283e5e1e0f09de61d4abcf99f1c9f2d283134d06823a484ff6840541c731318dd68718db64018c51fa25df0754a97fb5600f110e62beb9166baf958fb06c2d6f89bf29ed69a00740412f04eb56d7d720862012e72452d372db463a260e482f1ef66c90fd5dca4305d8181da725d73f7dfff8e781c9c9724b93590af3a234c2f49d5e408438b5d80772938627fea51e62c48f6b66dae3c9743f3450ec2a6b787068589b78f5f7b17f15134781fe641f9b5220d142729081733aea2458592e04563ee5917d92595fb9d22b6f9fddc2eb2d4c87bba6c2d1c750bfad8e3adc4559a6b81c03f875418bb3f5ca0b69cda5d6d6d5706d6456745eeabf22309f58711a0c089d7481727760df0a0ad44b8856243ff88f7a2007c921ea22af88b71a72be21682d0ddf25654b12429016a361c3310731db46d7503e76b467fd2b489091a0ebe25fdb3a7636207065b46e2a624643f33e24e15c80e665d75c78b8d3298c61cebf6e682d8a3a874948516d3109dd91ad339e1ff0ef2765b78547e0893e2fb1e8f98085caec6425066dcd82976d957eca4901615be146054d006023478ca3ff0ed4783c2c32a3fbf63d70eff6a569d0c5f51de77fcfa837a662a8d5eb27964f4d10a639a21e1b68d3ae91d3dea737323f6ee4907456b4fe394bf3f750380eab3abd01ed815eae676f0c11899c3a0f59e660e1ffe028762632d483214c24e44d5f95560a3c093ddfbdeb80b04731ada636418b4fabbc38d8154e0937cebf55c2cb3e0e0b698d6dacb7ebd2498d2ce99adcee735992b74e254dc77a8550a1e555921ab6ede67350d5995ec0a3d7527b5cdeb3693b233032ff0f4da528346443e26c319c42e0566f484a731c02aaad2c6ee4d20c64fa57d27a7dcd5d9334624b5b78245c6973f26b795fed645f4522ade511f81a8ee889a57a90b6034d43039af5088972eedafbf896566c055b8a1f63d4852ee76f607f0616c73c77a6fe3ed478c722961b453a02be1fce70400bb267143f35f827f37b90570c3cb98576136a2bdf8dbf78d93a2ecc60dcc21be5f546616fba2868b8651822a6935d0db3f7a27fb24f0c6ae5d7d9f53b461c152fb0447faf7076a87cdc9ab11aa80fd919753603e51bd308d2050bf2ba30bda915919a831f52f9a4ce3b44be5c556a1d15d2769052e8f26bcee443022b07d2e442f678bc2b02881b346ac24b94cb9f600c486c87557c37faad9a9111f91a11f0b09a9883eafbabbc4aa978497aea0bc32d2d5b5dc711efdb8a5f92e4cd1de3f0f4f7a3529d437b33b9b2791fe15d08acffd6c399c761c355052eaa15e045242daf99478e333d6adf7fb151cfe2df24e88506812293e39714e9ab064f6f28a9a8b0cbd071bc553296fa7cafca3367bf097e3b64501dbfbbb30457a0a6b4c9bf40f31b823474d0ff0b6a1f4f7bccd10019a899f45545d7f6449b5c610e50278353b31dc86874d0367c2a9e1f8067d42bf74cc60f819045ba28b698456e5fac7bee7040a76562c9bc576f9703453eae380dd1143cc54011408af36ca2a3ca7deef647152c6cf134e8d294450a75d6be392f192743c851810cc414724a8027157bd691a9eea2c8e0bbe3b6d662b6500241e0a0066d53c1e8f70539b85630255d2388f006b8384c3a6b7292d884d0bc47933492ea5d357d442161a71a98127eb1f0e00f6b23925d309cf685481db963857d5891f37bb3bfcf705b25df09ac430ee1cf85a16566049048916cbc15841cbcbbde1afc1748a608ceb68965e5ffa7a7c6f43c1c107658284ea43cb9d2315cc81702548e109abdf7cfc9f752b5a5e7d22c8a291c7e79843d3766c3a173384ad7ce718297868f8b1afb8bb63d4c3f4ee82437b9a3da3eb7886dad9456ef41ab0921f1f1ea7c76e3224285919e53642200ca2e032785ac8f6889f8f01b9f4937278b92fdf994eebbfd9fdeaa6e3a35cbf2c358ef5da6e348c8297990af23552836ee854bd7adc3be9bf99df8c2d92cf71dab67724a997cb6cb8dc5407e76a2858f6a495b66971b213ea63a66e5dabfe89f2bd63b0b968837f55f65cc69562cde1e120d287be2890e852b4a81266a16d385862df32a7756af6b8bcb04ae1884864ed21eece0ff3c77e47bd2e10fa0e2a1f0adb0d5be4ea49c213c78690275c74cb054b6cb0fa5e7e82b8d53c2e6dfc28670e5b69b9c1c43c828c73f8b592298750cbaa190ba3f025d2b422101d9e0d250e4707f4d630942e4cda1e5f865f78f970de192631e03e7ee733b720534fda41b5a5a250d742ee157e22dbca4e10a1035221a72b7f77cdb8485ad15555129ff60ca7b3eb0b65219cef279ca6cc9fea219f7fa001eeedf3728f2e0e011d61d72f1a4156ed5f33d109d6af35924fc1807cb2f1b7c8bbf1fd98df7468131e31231207485b15e87d398500a013a7f616bb16e21ce450d7ed3e80944b963d806f98d3259f4b3a7171eab69ca78e220f3dcca2925662634508e493fa660b5735ade3dd1b9d7c215a5193b66e3671eab75e06d2a3525309b32f3bbf8cd82e392f114f4794da05421eea1f3187512129bd0a0334803d987aa174fdc133873fd1e94f5759766cc3053061043a2a5bcaedd275e0d8f1cc28b6b64bbbf5ba3743b4bee55af276df22dbe83945c103d17783be7765a6c225caea31e1edcd927ac250f5a86e1e261bc338f36710108bbec70c6c89964c73f4c0dc64745ed24ba7e3ff7b8f94d8a3e2fa3b3e91d96bf96a075470127b88c23a60759427a2032eff084e788603a18954d2e94115baf3207f0369cc13c5958ac0783aaf3668f95ffd8bba8b9a737a4317aada2b4522ca032ce4a130b6c11b420df408b54eadd47536871a4fa10d3d7c48ce870cdcd4504cd7ba133ea0d63cd4bf33338bcc03a6a1d1dcdf48625c8fc561b504c31bb3ba148335f5cf91de3029b4ac8c01467b08833cf933905f773b8de21ccb2216dff379ef3789b27198bc47975b911523298282e78adae8e0a0ffe3ccda849aa1947e0982bed3dc1b5a26f7c24bd2d646b8c779d80da5f0baa0cdb51e8f84acf61d6f5a067277e31e30beead135cedce38de2c5aecfe4ab7aaea5937ae8960df8a2aaad6a07695ff48904b7bd092c1b7d10c09fb08b5ba44a53312e648a38b7833d202609c9565f1a8a56c2318052610ecd024ef2d4587c6b0ad23c3eab839fd0d25720fba4575a76bc12f9e31998c71eb7b2f9122d020208e6dc5c98fb533c87588484abc9d7dbd01ebf2e341089780974b3c4b5ead94462b2dd852fd51bb0c5510347b579d2f603793fabaab28df2019c4705ab") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x10}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x16000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x11}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 64) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r4 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000000)) (async) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="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") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x17000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r4 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/169, &(0x7f0000001140)="563520c4e6725eb8b058481c57e5b8f9a20238b21acd07327f6b509e2cd6a22e1a1c77ec0fae7677ed9ec5be6e0cc34e5c37a74e379f16e672b29258f0b2cab5d2f5e89a1956e44d499fb01f74ad88b84219bd32b3439ed6141343776f8783ee220cd23c35e14693835a0cc0a8436362717ca05b92235d4f39550de10d55c67c1fdb75bc4675efd6dab99eef", &(0x7f0000001200)="52596a9bc2cb4c944c57d34b124ab5d035d8bda4f602fd96adf229d81b0fca6bba70c0e8bc4340fbbc20c28ba22b5d308666345d61ed77bfc060a0321088dc859e99de41f59faf945196cb2c3b8c2160a0a8a54219e0c34ddbf87e7e31d488d5583810cca028522e98a9ddaf", 0x3, r1, 0x4}, 0x38) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x4) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x12}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: getgid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x18000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x19000000}, 0x48) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f0000000080)="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", &(0x7f0000001080)=""/169, &(0x7f0000001140)="563520c4e6725eb8b058481c57e5b8f9a20238b21acd07327f6b509e2cd6a22e1a1c77ec0fae7677ed9ec5be6e0cc34e5c37a74e379f16e672b29258f0b2cab5d2f5e89a1956e44d499fb01f74ad88b84219bd32b3439ed6141343776f8783ee220cd23c35e14693835a0cc0a8436362717ca05b92235d4f39550de10d55c67c1fdb75bc4675efd6dab99eef", &(0x7f0000001200)="52596a9bc2cb4c944c57d34b124ab5d035d8bda4f602fd96adf229d81b0fca6bba70c0e8bc4340fbbc20c28ba22b5d308666345d61ed77bfc060a0321088dc859e99de41f59faf945196cb2c3b8c2160a0a8a54219e0c34ddbf87e7e31d488d5583810cca028522e98a9ddaf", 0x3, r1, 0x4}, 0x38) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1}, 0x6) (rerun: 32) 07:55:28 executing program 0: getgid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) r4 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) getgid() (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) (async) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1a000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x14}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000012c0)={&(0x7f0000000080)="f40617887ecba3377bf5f81635819d34c5f62ab2c541ea5ff265f71501091c0744d99b215363b709be000c45be06a0b745ba5250f8f04ab475fabdb83403925f6b02a828891c674a39805590702cf747fc71d76ed2039dcf503247a3582ac9b59886373a89a38594d0f52b24d059d4ec27e9a2e19fd513ac1c37f1226e805fd39ac05c9f4ca7c9e45bce26768244f623db8fa5ea294d3abffda6feeb0ab8be4fb53b25a364db42bdafcd92334dedc0a96838663449ad41c90155c1abba9f371d1827f6fb4effedd94aa3b62b9a32500c781a71f9a94e359a32aef26f70677aebd05759ffa33b53b038b1e7aa1b122080e2905869e639d914132931f449c3c22168039ba6fbfbb31e6fead80d59cd23acb789191be1d502f97aecc5f79b9be9edee47d88112fc50f6a3e4a3a676d3634f4b002084c85d6a12ab50017bb7ef96454e4c2bcc0079dedd0123c86f31f06ac275a678c118e264266a10a28a07a254ab8d48f4dda3e69e25a216fa75f8de8a752ec48ba35d680027201d6085786dd360a14c52127366a82b65246db1e60db9c4e67ff6f31d7209240df8cb0d8ec55c9b01ca99efe59e8c7613b1e3595fe0b54de7cf8f02a02df21fde94a5cbe312ca3b6a25b0b1c1a3c20f2582cff8f132f926fcd3194a43acd37f4245fbeb9f1bc8333c25bf767ecd9535408dfb09f87fa3aaf797d98faddf4cdcd834cbff4747a5c0b08299966f44ae607bf513072175baa2c6bacb21bf31a797cb114bc44f6f0526d10a344df6b7e1b2f095544417312a4bebbd91218213f3c88db65725d308e0c5793a049449a828838344140e50b6b753c6d152ec89dfaeea21afc8e86bae1d5ec98c2ef68cbc1adf1b6226d80ba5d719a1b7faba1f8d45918b9a2bfb7e15e6cf4fc9e6df071571be282d631f8b1825191af39d4a03bd1b1e2523dca2b4786d25c68fa87f1084bd42a462883c39860d580cd8386cf2836ddda95a543b8329964dd31e0a19a625c1c2140ab97625b8fff1250c075087d54fdf4616a53d79500594e7597266f10c912e4d68bb7e2f963ea4c2e110e8c3b98d92dc3e7906c1b7cf58e51d3a3e6bf09cfca96a6818ed08f10ef917b7e343b00eb0b53ca0cda75993d2cabcb51a20ad0bf23a823de5f69f7b7e414304dd9c2c511460e204c5ab911cfba245bc355dd5c32b7a74607338f389c356d2a3eace23bc3cadb4385dd113d7205661784ee83dfe1dd5f9bd22b68e5ad5e8e3a810cc8eb594cce159c273f592c6607a390cb76f83e9752e40a2cfe26432cf704dae3c72271c0f29a81a0e225e746646c09dc3e19b1d41ee920e921e3be2cb3e50c06175ab275247ed90df8e329aa101b6dc5291a910f3a3d04c190e9ec4125fc26781a64de1e0748f31e3f918a03e771f7bb63000b404b4c78b4a3215eb13dd4d90d9fa309e2718764a438b313f6e5cd1f586502fa044bf97d9e77604b628751fda6b5d0f7b904f364b2bb8435b34a9c9788606c03333843592ffa18090a5e307f9c6f42c4d37366ddc01bfd3b7a400b983ab326292a15cebfd444f3b14927bd56914a9b29c604574a8badeb43a45f068132f7c833831c0bc5ad38cb59eda2183388090d4ca2f21be0c91bcb52ce01d319fc8ae41a529202670f39e417e83f29cbb1faa38119fcd5413abb0a7dd6cd304975765f5aa602338f9d0c6752545b932497d72ccbdcc09d7febcb07d046ffa35dc7c7c55c789791ff935b6a7d4529bbbd56a982334aa1f9f4e6200ddee8ef83ec97cf265750e43941b4a08133394dcc22238d24e26d7e1567c04b758dc7bbc5c5e14963cd501af54afd050e43e18a7c8c479f42ed8fb98fa1b027ec4d7d4328ec5002c20248549c55c032aa968683cf9504dd6e5064ad8c2aee3053567e9184af805572379b6f2b49c733f639699b4e97d3c38c53ed01b63adb413a72131ccba4059b1a55b07c85d61b0acecad52fcd3acc43d2c3874d28e63b4675e805b903ba3e58b820e4d6d07b4ac0c3af76fe5facdcc1ac2a1872ee5d2021099e3c43f27f991e3d6b28500408c073573fdb00fbed2ba14a1a25f99810a0ca8e6cc87be071b867c90a2b78a2c8d8d178665e8170b026b321021a8e33b93efc87c084e8ba87345ee819862eac26f30c632ad5edca77b3ba40f749fb75da23ea97d7a7954798603d4ef8f146aefe99b3f9a231bcb7cbed3bfbd8f1dee3f333d03ea853fce831b562204227ccbe5132aa142d63797990f6c4d0e0099147ba9561ccbe8e087b7b0814e8ae9ba12640de1f8f1494537a823f336f64a922c3df728a47fd1f26ba96fce6cd909fd68f44b24b8cacf9750a6259e692c36ab3d148919f40821571c7559b2847060bdaa658e0434f703636289029712d8b944ba4a08747fc4def72968a5002eac64fe732b2a223d242b5f9aa93ca3437f36f7f9a8fb6abb6fb8ed1822ed4f3e4cd3631cf45596c246c1ee0af788ab5b46c0c37596bd494243668219b7d3b0acd73a41cf542f31304700faea47c81d7dff2166b6fe6d1fd8a49f816374ffe0314f6f98d7b12e69b3cec233ac9ef7f9cf91bc99ec68ab9918440a1e50a8f93a288646083de875eae5d73c21fba4edb37956ae421b1a4814088fd1cf75601602d1c31d432d30c5b269505fc4a3aaf083cf7562ca118e69c439d46c05a295bcb9300cf7f9e7dc0e470ce39779bb2f2263fc45d4a2f783f6c9e8909f022516a752be8db17f719a17b3c35c715d516cc230988abb38805848933a9ce11bad5a8f5aba8c8facf957bd48d7155e92e0a6a5dec56d7c7f6121e03ec95f55f81ada03ed489f87ff555b59a85769c2b5c1c4e72a7c77c1a6f27fa9bcf442a2512aaddc132d69932dca2a42ca8439b34b7de783ed724e5f6927a25640cb140b3f21e4d8acf42f8421a74305a293d654af3f352f1382d4ae091ae2bed74f8055813bc825738a724946c579f5c2207e2d222952142b4b492f2a44d0d73d67ed25c8ca6ee9db3512b998048b4a0e47b5eeae77f19cba114663d5a1cf6e6f2fe3c9b43e29aec4725f89cdbafb29a85f5def388260687c76bf29e6391b1a1132922266fcd68645681fc1a0880bae980cbfc7369c3582f460bf26c6fb1bf0347eac3df91401ee11bb8245cd9d8d3a418483e218c3d14dc550051ebbe9f08062c7a908c93c507511b7ce6ae474ad46980899f6a69f3f796c1a7f4ac413df754db178c1de2a1b776b9bdc346b0b8084deb4f7a604da2c45efece7ae4e77d29ec18f6231ddb423e7b199d64cd29552c49465f773a5e95e871b2c2a277ecaa2adc1124bc46dd12d846d5f5538cbfe6f78801e106e5f78c37380ba4a35bfdc83c33806870146d9fc03c103868bff7e7302088467e8100f928c66db56786f9772ab23b3e636512276d2ce0a81de3b86d038223df217765336227e562ff97536669541ed697b40e17c9b9003bdc767ceae05ffe86fb31e0bea8aff9b1661ddbad020b627dd8e3d96b23854b87d0353f7c0cd5984de71e0a30585bd861d4d575b06527316f18984ae808a7ed147fe0597f8388d455f22c3f95fb471568c7062686b762f28a79b1cbc469138faccfebc5e2b9239aa22d5124bed4b10f65614b5c45414be7a9612545e6986007b7b94a7a6351a76d7eef512835901ad1f1656aef475908ef3baef8d80ec4cd0bab3297dd9234b052ad4018532b95801e420fc2a4aa72c6cc3c062980d55d6a1ea4e78ffe91f4e4872bad27e2e5cea750f62f0b3a2d5b4ce1c90a70af4e83f80965f781fb29c153ef908957687518954a2b98af91d44a888a39374523e78aaadf09f75bfef2c29b5c01a8ba493f5a8e7d933e70b38a6eb6ced0e377e8cf4c6c01254af666805df676b168b052e336d499a1c52a5236630fd3d4e92b00a52c9f71d10eb075285afb1d106290ce516fd003dfb2d3720b1096b1f68c61e9a80a41c91182cf96e160382eef0dd37523f3bf2f72193f9d74e5f11e5e71cea1439ff06923b24b242fe9699425cafd625ac2fd7059a377d982698e21fdfb83162f96bb97b8afbcb5b3a0e9927ea618ecdf958664f05783c5c4e70fc7decb22ca1a924f3dd198c08abce85e0636ac43cc55345c389999cf0d288e0deaba49787a2160e834c5c358505666919c5903590687c036babbddd42c2605e278abd7567a30cbee8aada84886895c5c69911f3ec15b2f964f7255e5242b3652f3cc16165a196b7ab6e6532667f3bae6fd4d61f4711195ba1168bc446d91328924ea267ae7b000177ca7957d8755c896df054c4e5e62dd020261686216de7c79c1b4c460a8880a700be0463fce526b1f2dad386d10925803f32f3f5e7c98ecd2b607c2d74ea8a93f36ffb748abaa5a8e4ef57c8bfef99f68624e09280b89472ac8acbe15d56b02a011e04a0ce76d1b3dd4241a2b291176bc245ecec6436d1693740c3061ed45f3153334ec1d667ef871b1f53fefd19ecba1a4af2ce505dc08d007676bf23a64c53c13e1d404225ecfeb8cca0b61be1a4c32d9aa30a29fa96f55dd3b41eb67cb44cbe1ed43bb6650e6589fc8b43a720fc0da309a605ce3095018887fbaa0042ec53e3b37024487191fbd7ea0f4090c18b0cc60e5e18d53b3309ca007be01430509af2008eab77e3ee51219ae319eeff0455a3305572751d1ee42c0064a7035e91dac0c09cd5764e969c87b7a7f1d90031688133a6109ba2d1939f00125113c5cfe59294e2595eeca8f53941eb825ba757d32d10c2a098f1eaa3e6328207d311b99114960fe7e505684543b2b4d7c67453b068fd4c3cc1807f3cd34508603c323533fcda72e55b7b395458271efb585d10512974c6489925c7006d023b3d123618f34c566fa4104ef359cf5d254ce5d0d623595b759bd969becf1e9784d219144c5d3fb7956e6664092f1d473542ebb0d51b9bc396119705d60ae275aeb7e45144f0eabd95afb19db57565f34c386f5487afdc7c5060f6d1526fa77c8196e2a6cf0f592343e41d3ba44cce5a350b489034bb45b0ded16ed74216dbdf104bbdfabeed007eb4dedb0be2e47d3df451bcb558f5d2e61fee182ab3c6d949190c9270b7ddd7e6660c8fd650416775205a622c2170fc1e58283271153b43dba899fe5ca8cf9ea7689b16f47a58933bf768ed00e2d9b72a1d3155cdcd05618ff9bf60471b546f6c604922e7317116a6ccd96961b27566efd059afe94865b4d55492e5e3f104c124e951023eceabf0c4cbfb2cac2d9e172ce8ef5da5c1a0e49a3e83a295fbd7425efb4411aa1c9b115f393664317f0fa32ba4f9a437ce406fe04e53174ae2284ee9856d79878df1293573acd1d10b5f3bdc8be50c712ab6ecdbb26fdfbba749edf9bd9386e3cf0a3c47339d78866afda9fc2e6ddfb33102208278ec87fddcf2d91aeb95377c3dcb126723b86bb90862f6a784830e700d6b6c78e8f494a8093ca9420b6760aa268ab0e889a9ce1d7d7eeb35ff3b47c2df1b41e255348ab2c713708bc9cf0c21c336d627f5979903b24b00f41addb834d8a659f8e2fbc67edaa2995400937fec6a55bc0880d3bf92af9c87157dfbebf37ad07229f7df9f3847450a48492e4657df81a69f57b0393db71f1483c58142ede2b4de72cb9e0de53d41352714cef5c5ea0452987204f7f64563d48f9bbcc490e7efe119bf766999647be91611ff74de8b26678ddca7b1279c0b9c14311e934187faf4657386e2eac458b5aa809c34ffcbf91312289740b5df01a4639497fc44b2eea1c11a4db1c4e4a9b43e6b94d2e8e34e4a55c5649c5d1878b6702c839a0e862040c11f08", &(0x7f0000001080)=""/169, &(0x7f0000001140)="563520c4e6725eb8b058481c57e5b8f9a20238b21acd07327f6b509e2cd6a22e1a1c77ec0fae7677ed9ec5be6e0cc34e5c37a74e379f16e672b29258f0b2cab5d2f5e89a1956e44d499fb01f74ad88b84219bd32b3439ed6141343776f8783ee220cd23c35e14693835a0cc0a8436362717ca05b92235d4f39550de10d55c67c1fdb75bc4675efd6dab99eef", &(0x7f0000001200)="52596a9bc2cb4c944c57d34b124ab5d035d8bda4f602fd96adf229d81b0fca6bba70c0e8bc4340fbbc20c28ba22b5d308666345d61ed77bfc060a0321088dc859e99de41f59faf945196cb2c3b8c2160a0a8a54219e0c34ddbf87e7e31d488d5583810cca028522e98a9ddaf", 0x3, r1, 0x4}, 0x38) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x4) (rerun: 32) bind$bt_hci(r0, &(0x7f0000001300)={0x1f, 0x1}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x80800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) [ 3271.389917][T21184] selinux_netlink_send: 100 callbacks suppressed [ 3271.389933][T21184] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21184 comm=syz-executor.1 07:55:28 executing program 0: getgid() (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)={0x0}) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x11, 0x6752d42d, 0x0, 0x3e, 0x38, r1, 0x7, '\x00', 0x0, r1, 0x5, 0x4, 0x5}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={r3, 0x2, r4, 0x6, 0x80000}) (async) r5 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000013c0)={0x1f, 0x8c, &(0x7f0000001300)="59d188f754e6200431d9cd31102c4e9b6fec2c6ec78b741263edec727d7da929b9934426bbdab40f75985aeeca8a215a240b0d3e324ad3f45795a3c4a02ce0900fb7c158601736cf3733e2016781ce2a05152348993c246841fc8e3eff59e4b2f1feabb183007f14fff31cba7144b49b17fceb347226edb60f14df5a5e21ac13be47a44c030936516b8fc3a0"}) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1b000000}, 0x48) 07:55:28 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000101410002abd7000ffdbdf2508004a000000000008004f000200000008004b00130000db08004c000100000008004f0000000000080003000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x5) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xf, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b980000}, @jmp={0x5, 0x0, 0x8, 0x6, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd2d}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0x18, 0x1}, @ldst={0x2, 0x0, 0x3, 0x5, 0x3, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001340)={0xfffffff7, 0x7, 0xafd9, 0x1, 0x9, 0x734}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x2}, 0x3c) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1c000000}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_RMID(r1, 0x0) 07:55:28 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000101410002abd7000ffdbdf2508004a000000000008004f000200000008004b00130000db08004c000100000008004f0000000000080003000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x5) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x15}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) [ 3271.450710][T21221] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21221 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xf, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b980000}, @jmp={0x5, 0x0, 0x8, 0x6, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd2d}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0x18, 0x1}, @ldst={0x2, 0x0, 0x3, 0x5, 0x3, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001340)={0xfffffff7, 0x7, 0xafd9, 0x1, 0x9, 0x734}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x2}, 0x3c) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_RMID(r1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) msgget$private(0x0, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1d000000}, 0x48) 07:55:28 executing program 2: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000101410002abd7000ffdbdf2508004a000000000008004f000200000008004b00130000db08004c000100000008004f0000000000080003000100"/80], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1e000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140b, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xf, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7b980000}, @jmp={0x5, 0x0, 0x8, 0x6, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x27}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd2d}, @jmp={0x5, 0x1, 0x0, 0x9, 0xb, 0x18, 0x1}, @ldst={0x2, 0x0, 0x3, 0x5, 0x3, 0x20, 0xffffffffffffffff}]}, &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000001340)={0xfffffff7, 0x7, 0xafd9, 0x1, 0x9, 0x734}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdfff, 0x2}, 0x3c) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r1, 0x0) (async) msgctl$IPC_RMID(r1, 0x0) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x27, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x16}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x1f000000}, 0x48) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x1}, 0x6) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0x20000000, 0x4) [ 3271.530393][T21258] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21258 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x27, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x20000000}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x21000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) (async) 07:55:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x27, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x18}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) [ 3271.604219][T21294] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21294 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0xfffffffffffffd2f) (async) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000080)=""/163) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x22000000}, 0x48) 07:55:28 executing program 2: r0 = memfd_secret(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x400002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendto$packet(r0, &(0x7f0000000080)="4af78cba9b592c17d1fc38b6d4f2973aec8b9e07da153c886872fe690cb2ec2778f8e939fa2be09c277e5e488f5d8f8fcd83193862d13ebd24b16901b799428d4e7840c0e6c45c4c8ee26d8dbfbc56864f9bd636a5e8041b10fbbdb85f5de02c453b9dca50b6024a3ef9d918560c31a00a19f42765e67619761923bb4ee09e31f6bd13057bc181c3c5a3d984f7fa0b84937438ba00dca5ec5565377bf99afbdd92b7ab1049d5fe5ad3836403a10c6726a7dbe351524fc7215b4293f310483899aebb", 0xc2, 0x40050, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x3}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x16100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x19}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = memfd_secret(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x400002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendto$packet(r0, &(0x7f0000000080)="4af78cba9b592c17d1fc38b6d4f2973aec8b9e07da153c886872fe690cb2ec2778f8e939fa2be09c277e5e488f5d8f8fcd83193862d13ebd24b16901b799428d4e7840c0e6c45c4c8ee26d8dbfbc56864f9bd636a5e8041b10fbbdb85f5de02c453b9dca50b6024a3ef9d918560c31a00a19f42765e67619761923bb4ee09e31f6bd13057bc181c3c5a3d984f7fa0b84937438ba00dca5ec5565377bf99afbdd92b7ab1049d5fe5ad3836403a10c6726a7dbe351524fc7215b4293f310483899aebb", 0xc2, 0x40050, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x3}, 0x14) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x16100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) [ 3271.666690][T21332] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21332 comm=syz-executor.1 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 2: r0 = memfd_secret(0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x400002, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendto$packet(r0, &(0x7f0000000080)="4af78cba9b592c17d1fc38b6d4f2973aec8b9e07da153c886872fe690cb2ec2778f8e939fa2be09c277e5e488f5d8f8fcd83193862d13ebd24b16901b799428d4e7840c0e6c45c4c8ee26d8dbfbc56864f9bd636a5e8041b10fbbdb85f5de02c453b9dca50b6024a3ef9d918560c31a00a19f42765e67619761923bb4ee09e31f6bd13057bc181c3c5a3d984f7fa0b84937438ba00dca5ec5565377bf99afbdd92b7ab1049d5fe5ad3836403a10c6726a7dbe351524fc7215b4293f310483899aebb", 0xc2, 0x40050, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0x3}, 0x14) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x23000000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) (async) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x80010000}, 0x48) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4000004) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x10, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000811}, 0x11) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x16100, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) [ 3271.720062][T21349] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21349 comm=syz-executor.1 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1a}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000040)=""/89, &(0x7f00000000c0)=0x59) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:28 executing program 2: r0 = getgid() r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x400}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) 07:55:28 executing program 2: r0 = getgid() r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) getgid() (async) getgid() (async) setresgid(0xffffffffffffffff, r0, r1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) (async) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x400}) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) msgctl$IPC_RMID(r2, 0x0) (async) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) (async) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x3}, 0x48) 07:55:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1c}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 07:55:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x8, 0x4) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x400}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffb, 0x3}, 0x6) 07:55:28 executing program 2: r0 = getgid() (async) r1 = getgid() setresgid(0xffffffffffffffff, r0, r1) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xfffd, 0x1}, 0x5d) [ 3271.809418][T21397] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21397 comm=syz-executor.1 07:55:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) msgget$private(0x0, 0x0) (async) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000140)=""/186) (async) msgctl$IPC_RMID(r2, 0x0) (async) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000080)=""/35) (async) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/99) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="0c54836e5448efc06f88217414f79073ad90b663c4437e") (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x5}, 0x48) [ 3271.885614][T21437] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21437 comm=syz-executor.1 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) (async) 07:55:29 executing program 0: pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="ec8a824215508defb3886d2c8f3925bf974101fcffff3b1eaf71e35ef76c7ee61cae599a1bb576530a2fe91ea8945eef324f836a80177b645efa22c83212608099d7e4763c008c07b52f63763f3f0c7edd7bfd8753a1b330fcac81280816d9bcac4481b27e63a5abd9a32584b560c917401f35c014edf4e405cc2858f618668a1cea6c8d458ae23233f556fd73935a0873a55445e564bd7619345aade0b9adc24dfdfc6daf891c0a21550c7bd52fbc18733ea3a52f3f77a565f32fd49497e5e7d3d2afdf75d0ea5ab0a0028e2b2562656ca62402a16af882270e3578c58874748b2ca808edbcc003ab10b0966f2666658a578dc1eaaa86ed1f1af9ba10f0d7ace24030aedce6937d9699a85554801083e80498853a861605b4f994fb71ddd9d46184f0d2fdfa5a6c07dfcf74aebfbccba294d59a2a1762fb5b3967e85e9a65f7bd26aa8cff5f43b992680c0c7c3a794c1c2f37fd06175471dd9a42008bfd0c12fcc5b81332f603f4f56ddea3d929fbc240ecbff9a3d33181fee32dd440213b931c149080c504f3c82eeb", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) r7 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) r8 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1d}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x6}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x16, 0xa1, &(0x7f0000000080)="0dc71a507f4d24d0ae144256b69c392b7707ff3712706e9f09b93f01e6075440560c14ccb74aefc14145200ce2fff00aed9f77c7e8563c058c0e940d4bd1cda45f560e94c765ee7826c2913afa6aa27ac88b8b4d6ee4738344c7f81712d8ee4c5ad0f8ceb6d305555ecbc7e62ff99e25339e268055f69510102b1759d2240dddcc2a5e0afc8db003f051778bbfaeb5fee0569c2fd3fffcd6205158d12872b10a59"}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x16, 0xa1, &(0x7f0000000080)="0dc71a507f4d24d0ae144256b69c392b7707ff3712706e9f09b93f01e6075440560c14ccb74aefc14145200ce2fff00aed9f77c7e8563c058c0e940d4bd1cda45f560e94c765ee7826c2913afa6aa27ac88b8b4d6ee4738344c7f81712d8ee4c5ad0f8ceb6d305555ecbc7e62ff99e25339e268055f69510102b1759d2240dddcc2a5e0afc8db003f051778bbfaeb5fee0569c2fd3fffcd6205158d12872b10a59"}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x0) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x7}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_secret(0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @write_def_err_data_reporting={{0xc5b, 0x1}, {0x80}}}, 0x5) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x3, 0x0, 0xff, 0x8001}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 0: pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="ec8a824215508defb3886d2c8f3925bf974101fcffff3b1eaf71e35ef76c7ee61cae599a1bb576530a2fe91ea8945eef324f836a80177b645efa22c83212608099d7e4763c008c07b52f63763f3f0c7edd7bfd8753a1b330fcac81280816d9bcac4481b27e63a5abd9a32584b560c917401f35c014edf4e405cc2858f618668a1cea6c8d458ae23233f556fd73935a0873a55445e564bd7619345aade0b9adc24dfdfc6daf891c0a21550c7bd52fbc18733ea3a52f3f77a565f32fd49497e5e7d3d2afdf75d0ea5ab0a0028e2b2562656ca62402a16af882270e3578c58874748b2ca808edbcc003ab10b0966f2666658a578dc1eaaa86ed1f1af9ba10f0d7ace24030aedce6937d9699a85554801083e80498853a861605b4f994fb71ddd9d46184f0d2fdfa5a6c07dfcf74aebfbccba294d59a2a1762fb5b3967e85e9a65f7bd26aa8cff5f43b992680c0c7c3a794c1c2f37fd06175471dd9a42008bfd0c12fcc5b81332f603f4f56ddea3d929fbc240ecbff9a3d33181fee32dd440213b931c149080c504f3c82eeb", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) r7 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) r8 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) pipe2$watch_queue(&(0x7f0000000600), 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="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", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) (async) syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) (async) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x8}, 0x48) 07:55:29 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x1e}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x16, 0xa1, &(0x7f0000000080)="0dc71a507f4d24d0ae144256b69c392b7707ff3712706e9f09b93f01e6075440560c14ccb74aefc14145200ce2fff00aed9f77c7e8563c058c0e940d4bd1cda45f560e94c765ee7826c2913afa6aa27ac88b8b4d6ee4738344c7f81712d8ee4c5ad0f8ceb6d305555ecbc7e62ff99e25339e268055f69510102b1759d2240dddcc2a5e0afc8db003f051778bbfaeb5fee0569c2fd3fffcd6205158d12872b10a59"}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 3271.977258][T21477] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21477 comm=syz-executor.1 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x9}, 0x48) 07:55:29 executing program 0: pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="ec8a824215508defb3886d2c8f3925bf974101fcffff3b1eaf71e35ef76c7ee61cae599a1bb576530a2fe91ea8945eef324f836a80177b645efa22c83212608099d7e4763c008c07b52f63763f3f0c7edd7bfd8753a1b330fcac81280816d9bcac4481b27e63a5abd9a32584b560c917401f35c014edf4e405cc2858f618668a1cea6c8d458ae23233f556fd73935a0873a55445e564bd7619345aade0b9adc24dfdfc6daf891c0a21550c7bd52fbc18733ea3a52f3f77a565f32fd49497e5e7d3d2afdf75d0ea5ab0a0028e2b2562656ca62402a16af882270e3578c58874748b2ca808edbcc003ab10b0966f2666658a578dc1eaaa86ed1f1af9ba10f0d7ace24030aedce6937d9699a85554801083e80498853a861605b4f994fb71ddd9d46184f0d2fdfa5a6c07dfcf74aebfbccba294d59a2a1762fb5b3967e85e9a65f7bd26aa8cff5f43b992680c0c7c3a794c1c2f37fd06175471dd9a42008bfd0c12fcc5b81332f603f4f56ddea3d929fbc240ecbff9a3d33181fee32dd440213b931c149080c504f3c82eeb", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) r7 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) r8 = syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) pipe2$watch_queue(&(0x7f0000000600), 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}, {@none}}}, 0xa) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000440)="ec8a824215508defb3886d2c8f3925bf974101fcffff3b1eaf71e35ef76c7ee61cae599a1bb576530a2fe91ea8945eef324f836a80177b645efa22c83212608099d7e4763c008c07b52f63763f3f0c7edd7bfd8753a1b330fcac81280816d9bcac4481b27e63a5abd9a32584b560c917401f35c014edf4e405cc2858f618668a1cea6c8d458ae23233f556fd73935a0873a55445e564bd7619345aade0b9adc24dfdfc6daf891c0a21550c7bd52fbc18733ea3a52f3f77a565f32fd49497e5e7d3d2afdf75d0ea5ab0a0028e2b2562656ca62402a16af882270e3578c58874748b2ca808edbcc003ab10b0966f2666658a578dc1eaaa86ed1f1af9ba10f0d7ace24030aedce6937d9699a85554801083e80498853a861605b4f994fb71ddd9d46184f0d2fdfa5a6c07dfcf74aebfbccba294d59a2a1762fb5b3967e85e9a65f7bd26aa8cff5f43b992680c0c7c3a794c1c2f37fd06175471dd9a42008bfd0c12fcc5b81332f603f4f56ddea3d929fbc240ecbff9a3d33181fee32dd440213b931c149080c504f3c82eeb", &(0x7f0000000080)=""/13, &(0x7f0000000100)="12497f69f862aa915a316f474bd1a34e5ebd8a79a37948c728b326cdc144a2022ba1c2f458e261ffd8115666c8bccd30a56131a878b4b5aeb9cbf6611fcbeb58d0af46475feb789c1bef83e135ab1b33d5c865cf93a31f387689d69fa7d8593224bee4ed4ae04a397599e0dc53b6c9e91256da567a1367b8e3a1907ecc72e285df3d9f06816212d62f33d5b5dddc", &(0x7f00000001c0)="6f7983a144356b864325cee39896eb7a0fa091829a09be844ef54518878fbee1391d24acf1a63c761efc183d04cf7cdd2bfb46e7e7e341cdb427f6ba96237ca5a96854947b8633c74197f322c4a013d557e059d9f5d0641f8973eef23cb7f104d8a779a536c37fa771780b972690276091e2dd1059b731c4e25fc327a279d8c0e9f8c1d4723bc9b0de9d76b64f047b0f7bf9e3ca26bdbbda39a25120307bd02410b78b1c4d2e610d214536e61014ac85f3b5ffb53e5f5f7004744c5219f6a33c570b49661f3b3db71f19b8b33e632c200d49a5d232925dc90aea9d9e2e833b", 0x4, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f00000003c0)}, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x7, 0x2, 0x6, 0x1012, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x48) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000380)={'pimreg0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400009}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x1e, &(0x7f0000001e40)=""/30, 0x40e00, 0xa, '\x00', r3, 0x18, r0, 0x8, &(0x7f0000001e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001ec0)={0x0, 0x7, 0x407, 0x9}, 0x10, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000001f80)=[r0, r0, 0xffffffffffffffff, r6, r0, r0, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x1, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000800)={0x90, 0x0, &(0x7f0000000700)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @acquire_done, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r5}, @fd, @fda={0x66646185, 0x9, 0x1, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x2b, 0x0, &(0x7f00000007c0)="22666b5dd6b7599c2706b7bb1c2a492a44586a20850790c5da7e1b3f063a592affd8f402564d94fcb7ce68"}) (async) syz_open_dev$evdev(&(0x7f0000001bc0), 0x3, 0x82) (async) ioctl$EVIOCGABS20(r8, 0x80184560, &(0x7f0000001d00)=""/197) (async) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) memfd_secret(0x0) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) 07:55:29 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xa}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) memfd_secret(0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) (async) memfd_secret(0x0) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xb}, 0x48) [ 3272.061425][T21520] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=21520 comm=syz-executor.1 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x21}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x6583f14dfaba1fd6}, 0x6) (async) 07:55:29 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000e14020028bd7000fbdbdf306ffe3be1040000000800f000000000002db908fb5eca6ac4bd7742a0d9a605600cc444aceb033b43f30fe60e4e3d875927b663a5f18ffd29f2519e37e650f730d34e7e7170a917a4bd88946e232827c48752a7da084e50917be1ca9b2c1f9c0ede2d041a31cd907441ff9b400e2de0b772b2dc99f6e45dfc53642d1ea6b943"], 0x20}, 0x1, 0x0, 0x0, 0x1000}, 0x40000) (async) memfd_secret(0x0) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xc}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/37) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xd}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1f, 0x1, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x22}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xe}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1f, 0x1, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x1f, 0x1, 0x1000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/37) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x24}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xf}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x1f, 0x1, 0x1000) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x1f, 0x1, 0x1000) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x400, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000080)=""/37) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="01160000ffffffff18200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="0000000000000000d0001e00e8ffffffff09000000000000c236b6abc9f565cf7d2adfec1d048cf88c484d90b579b500f24128d65211519d0e53434859f26bd714896b2200c03afad51b68ee54611df89267f4a4f8337d652d844463bca175d0c14ea686ebfe8175"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0xd72, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x25}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x10}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_adv_set_rand_addr={{0x2035, 0x7}, {0x9, @none}}}, 0xb) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x26}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x11}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x28}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 5: getitimer(0x0, &(0x7f0000000240)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x12}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) write$bt_hci(r0, &(0x7f0000000080)={0x1, @read_remote_version={{0x41d, 0x2}, {0xc8}}}, 0x24) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x60}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x13}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 07:55:29 executing program 5: getitimer(0x0, &(0x7f0000000240)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) getitimer(0x0, &(0x7f0000000240)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) (async) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) (async) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4040008}, 0x2400c084) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: getitimer(0x0, &(0x7f0000000240)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) getitimer(0x0, &(0x7f0000000240)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xdffc, 0x4}, 0x6) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x7c, 0x40, 0x8, 0xa0ca}, {0x8, 0x5, 0x7, 0xff}, {0x8000, 0xf8, 0x6c, 0x6}, {0xf990, 0x0, 0x0, 0x5}, {0x0, 0x8, 0x7f, 0x6}]}, 0x10) (async) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="14611b743e3abfa380d08de0ce535a61a60e36471a0409069ce0b943b9e0215bfdaa778c1328318cce74099e34ce9acc836d73c353a9ccc620768a5b373692b5043d107fb5b3575fcff695e6e80e53bbef5e282790ea4591e29712951538d6b1d3bc49b4eefd084dff00df8119b0c8a6d462677d9558497791c4fe4907f4f90483da088a5b6f8f8d33c5b149ba6496c29b6f75a7c3e139e72867425bb9e77cf8d006db0d0d7a49376d7eb0b94d91850f7cb43e8d147cb38594a0e453a837b9b999514f5a47a7f7301afb385cec25bd") (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x5, 0x4) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000280)=0x4, 0x4) (async) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x14}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4040008}, 0x2400c084) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x15}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8017ad9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x14}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x4040008}, 0x2400c084) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080), 0x80) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1000, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x16}, 0x48) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8017ad9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x14}, 0x10) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xd2e, 0x9, 0x2, 0x3}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) memfd_secret(0x80000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="013004260000000000004d9a2bb5ea3a7e37f2416a56e43b190139080000000000000018d20065471cd3b0a3e39b6a4875548d8c910045ff4d41195b9e83d1634adfa08e9b812017ab0c1f2031c754845d2b798a2c27c3c7f77b1d308c1a8ec387ac491a264c39874195310789b40ea1b63a1b5257e3a60d984ed8ed3fdde27f4b6bff1b10523c84c2f92e"], 0x2a) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 64) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) (rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x17}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x18}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1000, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x8, &(0x7f00000000c0)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8017ad9, 0x0, 0x0, 0x0, 0x8001}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, r4, 0x25, 0x14}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xd2e, 0x9, 0x2, 0x3}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) memfd_secret(0x80000) (async) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="013004260000000000004d9a2bb5ea3a7e37f2416a56e43b190139080000000000000018d20065471cd3b0a3e39b6a4875548d8c910045ff4d41195b9e83d1634adfa08e9b812017ab0c1f2031c754845d2b798a2c27c3c7f77b1d308c1a8ec387ac491a264c39874195310789b40ea1b63a1b5257e3a60d984ed8ed3fdde27f4b6bff1b10523c84c2f92e"], 0x2a) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x4}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x2}], 0xc, 0x0, &(0x7f0000000080)="0919d32cbf3f448b714aa3bf"}) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x1000, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x19}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x10001, 0x4) (async, rerun: 64) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xd2e, 0x9, 0x2, 0x3}, 0x10) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x15, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) memfd_secret(0x80000) (async, rerun: 64) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) write$bt_hci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="013004260000000000004d9a2bb5ea3a7e37f2416a56e43b190139080000000000000018d20065471cd3b0a3e39b6a4875548d8c910045ff4d41195b9e83d1634adfa08e9b812017ab0c1f2031c754845d2b798a2c27c3c7f77b1d308c1a8ec387ac491a264c39874195310789b40ea1b63a1b5257e3a60d984ed8ed3fdde27f4b6bff1b10523c84c2f92e"], 0x2a) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x2}], 0xc, 0x0, &(0x7f0000000080)="0919d32cbf3f448b714aa3bf"}) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x6}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x28, 0x0, &(0x7f0000000000)=[@free_buffer, @acquire_done={0x40106309, 0x3}, @increfs={0x40046304, 0x2}], 0xc, 0x0, &(0x7f0000000080)="0919d32cbf3f448b714aa3bf"}) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1a}, 0x48) 07:55:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0xa}, 0xfffffe96) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x8) 07:55:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0xa}, 0xfffffe96) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0xf}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1b}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x8) (rerun: 64) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018361973ab2134defa0f633fff000000000000802400009304002400000005000000080000000000000b04000000100000000000000a05000000020000f2870368f2b80b3f0c244f07d43b27cb"], &(0x7f0000000100)=""/62, 0x41, 0x3e, 0x200}, 0x20) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020500}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x40, 0x1411, 0x2, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004054}, 0x4040044) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x81, 0x3, 0x1f, 0x450, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x3, 0x3, 0x4}, 0x48) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:29 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffe, 0xa}, 0xfffffe96) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x10}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1c}, 0x48) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x8001]) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (rerun: 32) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x8) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1d}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x11}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x8001]) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x12}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1e}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000100)=0x8001, 0x4) (async) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x5, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8000, [0xaa10, 0x81a], 0x7}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000000)=[0x7fff, 0x8001]) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x14}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x4}, 0x6) (async) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6}, 0x10) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x21}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x15}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async, rerun: 64) r1 = memfd_secret(0x0) (async, rerun: 64) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x5, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8000, [0xaa10, 0x81a], 0x7}, 0x10) 07:55:29 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0xabcc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x418440, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0xff}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x22}, 0x48) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0x8], 0x7}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x23}, 0x48) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x16}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x5, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x8000, [0xaa10, 0x81a], 0x7}, 0x10) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0x8], 0x7}, 0x10) 07:55:29 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0xabcc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x418440, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0xff}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x18}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = memfd_secret(0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0x8], 0x7}, 0x10) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x5, 0x4) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x180}, 0x48) 07:55:29 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0xabcc}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x418440, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r1, 0xff}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x19}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x300}, 0x48) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) 07:55:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) 07:55:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1a}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000080)=""/148, &(0x7f0000000000)=0x94) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) (async) 07:55:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x500}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1c}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000300)={'custom1\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000300000000000000040000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendto$packet(r2, &(0x7f0000000200)="ef8f07fd694eb4f534faf6299a8f7ce5c4e1aba750f41c8ecbb6c0f91aff393ae9045bb3ab45277a621940fb124562f8af8ec0726e26b2f355d5f758d43924d154103013be2c6de7f9158527acb87c56a0172e15d1dbad376329bdd9c88b004908436d4b1f6b791edf77bd59aa26a14d9dc6db661587abb1ba9b705c8402733baaf17a7405cacb08b197823eceb74a9d02f68bba9b0f7466342cceaf50aefa655b75128bb03042a612f53670bbd5f77f09c40c4e66b450bc21115309ecc674c5ac78844f2d260f2bce176bc5b936ff8670dda85dd28e0724dd613e4a549113d41829071a3c00cb304a37", 0xea, 0x40c0, &(0x7f00000001c0)={0x11, 0xf6, r3, 0x1, 0xff, 0x6, @broadcast}, 0x14) (async) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @read_local_amp_assoc={{0x140a, 0x5}, {0xc8, 0x3, 0x5}}}, 0x9) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0xa}, 0x6) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x9, 0x4) (async) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1d}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x600}, 0x48) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1800, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x150, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fda={0x66646185, 0x6, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x6, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x400}], 0x5b, 0x0, &(0x7f0000000600)="a5bef770faf3c8bf1e59f6f25007500c6833ebbb8ffc496e45683cdd274f46fb4a607d025601a3cf10bf2ec98f3eda4f52306bde2c408a9bc90ff750569600e8bde9ee7220d778e3395da2fed9526602d6cad90e2298caacf766a6"}) getpeername$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0xa}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x20004, 0x992, 0x40}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x4) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r2, &(0x7f0000001400)={0x11, 0x0, 0x0}, &(0x7f0000001440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1e}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x700}, 0x48) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1800, 0x0) (async, rerun: 32) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x150, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fda={0x66646185, 0x6, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x6, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x400}], 0x5b, 0x0, &(0x7f0000000600)="a5bef770faf3c8bf1e59f6f25007500c6833ebbb8ffc496e45683cdd274f46fb4a607d025601a3cf10bf2ec98f3eda4f52306bde2c408a9bc90ff750569600e8bde9ee7220d778e3395da2fed9526602d6cad90e2298caacf766a6"}) (async, rerun: 32) getpeername$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0xa}, 0x6) 07:55:30 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f727e3cb9c76614e0c45c57b6cfdb27ab1a095a08a9d20c0ba02d0ed3edfaa983de1b6775e06c44cb6fa8cc832ab059e890a924aeacd2a302dec9d800af1165f1e7e09c720a079e25b97ac64bad6c02384f4ecb2ba28e90e1923154cddec513e2e16", &(0x7f0000000100)=""/131, 0x4}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x900}, 0x48) 07:55:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x1800, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x150, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fd, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/178, 0xb2, 0x1, 0x27}, @fda={0x66646185, 0x2, 0x2, 0x1b}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fda={0x66646185, 0x6, 0x2, 0x1c}, @fda={0x66646185, 0x1, 0x0, 0x37}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @request_death={0x400c630e, 0x2}, @release={0x40046306, 0x2}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x6, 0x1, 0xa}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x2, 0x2, 0x25}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}, 0x40}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000003c0)={@flat=@handle, @fda={0x66646185, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x400}], 0x5b, 0x0, &(0x7f0000000600)="a5bef770faf3c8bf1e59f6f25007500c6833ebbb8ffc496e45683cdd274f46fb4a607d025601a3cf10bf2ec98f3eda4f52306bde2c408a9bc90ff750569600e8bde9ee7220d778e3395da2fed9526602d6cad90e2298caacf766a6"}) getpeername$packet(r3, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001340)=0x14) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0xa}, 0x6) (rerun: 32) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) getpeername$packet(r2, &(0x7f0000001400)={0x11, 0x0, 0x0}, &(0x7f0000001440)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) getpeername$packet(r2, &(0x7f0000001400), &(0x7f0000001440)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) (async) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xa00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x21}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x4) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000013c0)=0x14) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) (async, rerun: 32) getpeername$packet(r2, &(0x7f0000001400)={0x11, 0x0, 0x0}, &(0x7f0000001440)=0x14) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001b00)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x9, 0x4, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x1, 0x9, 0x9, 0x10, 0xfffffffffffffffc}]}, &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000ac0)=""/4096, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001b80)={0x5, 0xd, 0xfffff2d0, 0x8000}, 0x10}, 0x80) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001480)={0x804, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x7, 0x5, 0x7}]}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x7, 0x1, 0x6}, {0x6, 0x4, 0x1, 0xef2}, {0x1ff, 0x1, 0xc0, 0x2}, {0x897, 0x1f, 0x2, 0x55}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x804}, 0x1, 0x0, 0x0, 0x80050}, 0x800) (async, rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x3, 0x4) (async, rerun: 32) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000000c0)=0x1) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x22}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x18, 0x1407, 0x10, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x2, 0x2}, 0x4) 07:55:30 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f727e3cb9c76614e0c45c57b6cfdb27ab1a095a08a9d20c0ba02d0ed3edfaa983de1b6775e06c44cb6fa8cc832ab059e890a924aeacd2a302dec9d800af1165f1e7e09c720a079e25b97ac64bad6c02384f4ecb2ba28e90e1923154cddec513e2e16", &(0x7f0000000100)=""/131, 0x4}, 0x20) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xb00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x10}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r0, &(0x7f0000000080)="f727e3cb9c76614e0c45c57b6cfdb27ab1a095a08a9d20c0ba02d0ed3edfaa983de1b6775e06c44cb6fa8cc832ab059e890a924aeacd2a302dec9d800af1165f1e7e09c720a079e25b97ac64bad6c02384f4ecb2ba28e90e1923154cddec513e2e16", &(0x7f0000000100)=""/131, 0x4}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xc00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x24}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xa1, &(0x7f0000001300)=""/161, 0x41000, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x6, 0x1, 0x2}, 0x10}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) sendto$packet(r1, &(0x7f00000014c0)="f6fb3d59a15ead26825972b49b9fbfa91d79a900ae9be118dbecbf6af2a932db64b2a01d76a7bf4ffd9f3491b721692ebf75511a9cf0cb", 0x37, 0x888, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080), 0x80) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xd00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x25}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async, rerun: 32) r3 = memfd_secret(0x0) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xa1, &(0x7f0000001300)=""/161, 0x41000, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x6, 0x1, 0x2}, 0x10}, 0x80) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendto$packet(r1, &(0x7f00000014c0)="f6fb3d59a15ead26825972b49b9fbfa91d79a900ae9be118dbecbf6af2a932db64b2a01d76a7bf4ffd9f3491b721692ebf75511a9cf0cb", 0x37, 0x888, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) (async) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x26}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xe00}, 0x48) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f00000000c0), 0x80) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='bbr\x00', 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000004}, 0x40000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0xfffffc5b) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000001300)=ANY=[@ANYBLOB="01160000ffffffffa923b343eb25ec4941ca4218200000", @ANYRES32=r1, @ANYBLOB="000000000500000018200000", @ANYRES32, @ANYBLOB="00000000000000004000000001000000000a000000000000"], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xb7}, {0xc8, 0x7f, 0x0, @any, 0x0, "6df7ab1c38ebf39218a1218a68d70f0fae261f2a19b8b859380dc47ac953c1dbbf47c04fa9b2fa95cfc4783b79563f441c4adcee36993084d72444a709fc69c62d701dbd780cc4fa7c54f8f91861cf7498325464cb71c1e6f0b95ee217186243e77d73de9d58b5cc2f77f7be6aed1984fda0e929c38d2fabb46e9ed019929a3a91f6d1ce0fcf6bd2034b7ff1a85bef0385f31e31992d923aa0f9c8ea4b24abdbdc8309d8cf59cd55b31a679675"}}}, 0xbb) (async) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000001380)=""/4096) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x28}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r3 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xa1, &(0x7f0000001300)=""/161, 0x41000, 0x0, '\x00', r2, 0x1b, r3, 0x8, &(0x7f00000013c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0x6, 0x1, 0x2}, 0x10}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendto$packet(r1, &(0x7f00000014c0)="f6fb3d59a15ead26825972b49b9fbfa91d79a900ae9be118dbecbf6af2a932db64b2a01d76a7bf4ffd9f3491b721692ebf75511a9cf0cb", 0x37, 0x888, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async, rerun: 32) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='bbr\x00', 0x4) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0xf00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x26, 0x6, 0x80000001) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x6e, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200013}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40814) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x60}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f00000000c0), 0x80) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='bbr\x00', 0x4) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1100}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1200}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x300}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket(0x26, 0x6, 0x80000001) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x6e, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200013}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40814) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) (async) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x600}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1300}, 0x48) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x80) (async) memfd_secret(0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)=[0x4, 0x9]) (async) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000000c0)=[0x81, 0x6]) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0xf00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x26, 0x6, 0x80000001) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0x6e, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200013}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x1409, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40814) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (rerun: 64) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1400}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1100}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0x1, &(0x7f0000000080)="ce35444bba45667c985e10b61b0a5da39a108fe2f32dae16d18077c23d38f3a1efcee9f34c255fbab149678f86543a7423a402e6b327428823a7858f23c2dcc7f9e0f8cf095e2ee823d4bd329dde1b048dcb4ef2195825e811aa88cae4724c3f6f909855c4aca77dcf86a18db5df63abfb8c66b2ef007581d8f69d7ffee8cc883d985dc539079bbdde500e7878632f63fb4a76179c842d97e21dbd0fc96c6df44b94676019b2c59cdc9c", &(0x7f0000000000)=""/19, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000180)="103b8cefd3a98e517939ce3ceaac246d5daf7b19b676ae5e4bfee0c3bf53a1266c36f41be8cf1fae6399e1a77dd4b218fbc318077de8ff15c2f6ae9113042a8fb8196c8364fc45b8d44757bcdd185b892261a78645f5f3e020273d4e3f4cf22c66693571f419797a6fadd83726c0f433bbad62243de3b91170c4b1f3a3b7beb1baa288671acd5853416ca3d9531aba1efc667ca941147b9b99c38925d7f38d6611edf28a6a165e3048ab35eafb0a61a36a0fc79d9c2d03b9f2badbb67289f9c0d3edf868563a8ad2f72a7c10e1ceb8e873ae21e8b1c59d34c5f6918016f96fba07546f55eef049eced351846", &(0x7f0000000280)=""/99, &(0x7f0000000300)="9786891efdce8d572d0baf4fd317064223e5733da2f898f2d0d10796f31332bb3961b0215f1933f5cc92d540ca64c4c797ad106bb18b9bb847192f82cd9cce61efc6580feb1c164c4887aab185eedf10d5ac81a34a3cd6a1243cb23b1aeac8aff3fdafe702e753", &(0x7f0000000380)="6f898f1a4bdd35051c41fd0b447008f497b1ecf9a989929aa38af715bb2e01e95c0f1003dd245a3291b76c1ec83109a74ec89dd4d1bd16", 0xff, 0x1}, 0x38) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140f, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 07:55:30 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x0, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1500}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x9, 0x3ff, 0x0, "73a7079e1141df282a25559ec6a73e397b2121f9b8e394f7ecc9c6f7ec7bcba0"}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 07:55:30 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1200}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async, rerun: 32) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x9, 0x3ff, 0x0, "73a7079e1141df282a25559ec6a73e397b2121f9b8e394f7ecc9c6f7ec7bcba0"}) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1600}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x6a0082, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0) (async) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x8, 0x9, 0x3ff, 0x0, "73a7079e1141df282a25559ec6a73e397b2121f9b8e394f7ecc9c6f7ec7bcba0"}) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1400}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1700}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 3: r0 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) connect$packet(r0, &(0x7f0000000000)={0x11, 0x1c, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1800}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1500}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x80, [0x5, 0x1000], 0x1ff}, 0x10) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80, 0x4) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1900}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1600}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x80, [0x5, 0x1000], 0x1ff}, 0x10) 07:55:30 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) (async) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0x80, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1a00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1800}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x80, [0x5, 0x1000], 0x1ff}, 0x10) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1b00}, 0x48) 07:55:30 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1409, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004815}, 0x4000080) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20080) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0xc20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1900}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1c00}, 0x48) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1a00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) (async, rerun: 64) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 64) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1d00}, 0x48) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1c00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x300, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x28080}, 0x8) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 07:55:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0xffffffff]) syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x301a00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000017c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001840)) r1 = socket(0x10, 0x803, 0x6) r2 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001300)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2, 0x4}], &(0x7f0000001680)='syzkaller\x00', 0x80000000, 0x4f, &(0x7f0000001380)=""/79, 0x41100, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001400)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001440)={0x0, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0xffffffffffffffff, r1]}, 0x80) r3 = memfd_secret(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000001580)=0x200, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x1d00}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0xffffffffae774ad9, 0x101200) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000000140)=""/34) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x0, 0x4, 0x0, 0x1e00}, 0x48) 07:55:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x300, 0x1, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x28080}, 0x8) 07:55:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 07:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x4, 0x0, 0x2}, 0x48) 07:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x7, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x0, 0x6, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @map_val, @ldst={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ldst={0x0, 0x0, 0x0, 0xa}], &(0x7f0000000180)='GPL\x00', 0x3ff, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x4, 0x992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) [ 3273.728245][T11456] ==================================================================