_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, "5da2aa", 0x69, 0x1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, "5da2aa", 0x69, 0x1}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@overlay={0x9, 0x5, 0x4, 0xe000, 0x7, {0x77359400}, {0x3, 0x2, 0x35, 0x0, 0x0, 0x3, "73c76332"}, 0x8000, 0x3, {}, 0x80000001}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x9, 0x0, 0x0, 0x0, 0x0}}) 09:32:11 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(0xffffffffffffffff, 0x0, 0x0) (async) 09:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0xb, 0x2c6042) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x8001, 0xffff, 0x3, 0x8000, 0x6, 0x9, 0x5, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@overlay={0x9, 0x5, 0x4, 0xe000, 0x7, {0x77359400}, {0x3, 0x2, 0x35, 0x0, 0x0, 0x3, "73c76332"}, 0x8000, 0x3, {}, 0x80000001}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x9, 0x0, 0x0, 0x0, 0x0}}) 09:32:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, "5da2aa", 0x69, 0x1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x105000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d11, &(0x7f0000000140)=0x24) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) (rerun: 64) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x8001, 0xffff, 0x3, 0x8000, 0x6, 0x9, 0x5, 0x7]}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) 09:32:11 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0xa39, 0x4ccc42) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x7) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)=@overlay={0x9, 0x5, 0x4, 0xe000, 0x7, {0x77359400}, {0x3, 0x2, 0x35, 0x0, 0x0, 0x3, "73c76332"}, 0x8000, 0x3, {}, 0x80000001}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x9, 0x0, 0x0, 0x0, 0x0}}) 09:32:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="c470cd8b76d6f834c750322df08bd31eb598a6db2265ca663886511a5e650b5a26961d2b8938b97f54c0a1121ac5320fce5c") r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r6], 0x15) 09:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x105000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) (async, rerun: 64) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d11, &(0x7f0000000140)=0x24) (rerun: 64) 09:32:11 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x4}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) 09:32:11 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0xa39, 0x4ccc42) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x7) 09:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffffc, 0x105000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)={0x0, @motion_det}) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d11, &(0x7f0000000140)=0x24) 09:32:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="c470cd8b76d6f834c750322df08bd31eb598a6db2265ca663886511a5e650b5a26961d2b8938b97f54c0a1121ac5320fce5c") r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r6], 0x15) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000080)={0x0, 0x1, [0x8001, 0xffff, 0x3, 0x8000, 0x6, 0x9, 0x5, 0x7]}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0xa39, 0x4ccc42) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x7) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000080), 0xa39, 0x4ccc42) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0x7) (async) 09:32:11 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x4}) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:11 executing program 0: syz_open_dev$admmidi(&(0x7f0000000040), 0x4, 0x88000) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="c470cd8b76d6f834c750322df08bd31eb598a6db2265ca663886511a5e650b5a26961d2b8938b97f54c0a1121ac5320fce5c") r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r6], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x9, 0x4) (async) ioctl$sock_bt_hci(r1, 0x400448ca, &(0x7f0000000040)="c470cd8b76d6f834c750322df08bd31eb598a6db2265ca663886511a5e650b5a26961d2b8938b97f54c0a1121ac5320fce5c") (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYRES8=r4, @ANYRES64=r1, @ANYRESOCT=r4, @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r6], 0x15) (async) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x6, "fe6f45", 0x7, 0x19}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) read$midi(r1, 0x0, 0x0) 09:32:11 executing program 0: syz_open_dev$admmidi(&(0x7f0000000040), 0x4, 0x88000) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x6, "fe6f45", 0x7, 0x19}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) (async) read$midi(r1, 0x0, 0x0) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0}}) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x7, 0x7, 0x9, 0x4800}) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x0, 0x6, "fe6f45", 0x7, 0x19}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @reject_conn_req={{0x40a, 0x7}, {@none, 0x7f}}}, 0xb) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x5) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0x8e4f, 0x6, 0x8001, 0x0, 0x7, 0x80000000, 0x16, 0x5}}) r1 = socket(0x10, 0x2, 0x7) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x7f, 0x28, 0x3, 0x2}, 0x6) bind$bt_hci(r1, &(0x7f0000000000), 0x29b4f401ed9c2175) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x7b6, 0x4) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0}}) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x7, 0x7, 0x9, 0x4800}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0}}) (async) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x7, 0x7, 0x9, 0x4800}) (async) 09:32:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x15) 09:32:11 executing program 0: syz_open_dev$admmidi(&(0x7f0000000040), 0x4, 0x88000) (async) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:11 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) read$midi(r1, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:11 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @reject_conn_req={{0x40a, 0x7}, {@none, 0x7f}}}, 0xb) (async, rerun: 64) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x5) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0x8e4f, 0x6, 0x8001, 0x0, 0x7, 0x80000000, 0x16, 0x5}}) (async, rerun: 32) r1 = socket(0x10, 0x2, 0x7) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x7f, 0x28, 0x3, 0x2}, 0x6) bind$bt_hci(r1, &(0x7f0000000000), 0x29b4f401ed9c2175) (async) write$bt_hci(r0, 0x0, 0x15) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x7b6, 0x4) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x5, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @ldst={0x0, 0x1, 0x0, 0x8, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x10}], &(0x7f00000000c0)='GPL\x00', 0x6401, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='fsi_slave_init\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:11 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x400, 0x140) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0x9839, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) read$midi(r1, 0x0, 0x0) 09:32:11 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0}}) (async) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x7, 0x7, 0x9, 0x4800}) 09:32:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x100, 0x55f537ff1c41bc38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:11 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x15) (async) 09:32:11 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x400, 0x140) (async, rerun: 64) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 64) write$bt_hci(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0x9839, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) read$midi(r1, 0x0, 0x0) 09:32:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x5, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @ldst={0x0, 0x1, 0x0, 0x8, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x10}], &(0x7f00000000c0)='GPL\x00', 0x6401, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='fsi_slave_init\x00', r1}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @reject_conn_req={{0x40a, 0x7}, {@none, 0x7f}}}, 0xb) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0x5) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, '\x00', @bt={0x8e4f, 0x6, 0x8001, 0x0, 0x7, 0x80000000, 0x16, 0x5}}) r1 = socket(0x10, 0x2, 0x7) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x7f, 0x28, 0x3, 0x2}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000000), 0x29b4f401ed9c2175) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x7b6, 0x4) 09:32:12 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x4, 0x7f, 0x1}) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x5, 0x4, 0xe000, 0x8, {0x77359400}, {0x2, 0x8, 0x3, 0x3f, 0x7, 0x5, "397664f2"}, 0x98, 0x3, {&(0x7f0000000140)=[{0x3ff, 0xe, {0x1}, 0x9}, {0x77, 0x35815557}]}, 0x1, 0x0, r1}) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x41e176fd) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x100, 0x55f537ff1c41bc38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x100, 0x55f537ff1c41bc38) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x15) (async) 09:32:12 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x400, 0x140) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0x9839, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) read$midi(r1, 0x0, 0x0) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x5, &(0x7f0000000080)=@raw=[@map_val={0x18, 0xe, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80}, @ldst={0x0, 0x1, 0x0, 0x8, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @jmp={0x5, 0x1, 0x1, 0x6, 0x4, 0xffffffffffffffff, 0x10}], &(0x7f00000000c0)='GPL\x00', 0x6401, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='fsi_slave_init\x00', r1}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x4, 0x7f, 0x1}) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x5, 0x4, 0xe000, 0x8, {0x77359400}, {0x2, 0x8, 0x3, 0x3f, 0x7, 0x5, "397664f2"}, 0x98, 0x3, {&(0x7f0000000140)=[{0x3ff, 0xe, {0x1}, 0x9}, {0x77, 0x35815557}]}, 0x1, 0x0, r1}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x41e176fd) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x100, 0x55f537ff1c41bc38) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @bt={0x4, 0x1ff, 0x1, 0x9, 0x8000000000000001, 0x3, 0x10, 0x5}}) 09:32:12 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x80, 0x80, 0x10000, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xe5, [@multicast1, @rand_addr=0x64010101, @remote, @multicast2, @empty, @local, @local]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x7, [{@private=0xa010100, 0x6}, {@private=0xa010100, 0x7f}, {@empty, 0x92}, {@multicast2, 0xc2cd}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xa, "1d344c0daadce734"}, {0x5, 0x5, "d7b4e8"}, {0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xad, [@rand_addr=0x64010102, @broadcast]}, @rr={0x7, 0x1f, 0xd1, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @loopback, @loopback]}]}}}}}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x8001, 0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xfc, 0x175103) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x6980, [0xffffffff, 0x81], 0x100}, 0x10) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000000)=0x4b9) 09:32:12 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2a02, 0x0) write$sequencer(r0, &(0x7f0000000080)=ANY=[], 0xfffc) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xfffffffc, 0x494e4f4b, 0x3, @stepwise={0x4, 0xef, 0xfffff001, 0x5, 0x744, 0x3}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @bt={0x4, 0x1ff, 0x1, 0x9, 0x8000000000000001, 0x3, 0x10, 0x5}}) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xfc, 0x175103) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x6980, [0xffffffff, 0x81], 0x100}, 0x10) (async) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000000)=0x4b9) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:12 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x80, 0x80, 0x10000, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xe5, [@multicast1, @rand_addr=0x64010101, @remote, @multicast2, @empty, @local, @local]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x7, [{@private=0xa010100, 0x6}, {@private=0xa010100, 0x7f}, {@empty, 0x92}, {@multicast2, 0xc2cd}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xa, "1d344c0daadce734"}, {0x5, 0x5, "d7b4e8"}, {0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xad, [@rand_addr=0x64010102, @broadcast]}, @rr={0x7, 0x1f, 0xd1, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @loopback, @loopback]}]}}}}}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x8001, 0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x4, 0x7f, 0x1}) (async) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@multiplanar_overlay={0x1, 0x5, 0x4, 0xe000, 0x8, {0x77359400}, {0x2, 0x8, 0x3, 0x3f, 0x7, 0x5, "397664f2"}, 0x98, 0x3, {&(0x7f0000000140)=[{0x3ff, 0xe, {0x1}, 0x9}, {0x77, 0x35815557}]}, 0x1, 0x0, r1}) (async) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f00000000c0)=0x41e176fd) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 64) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @bt={0x4, 0x1ff, 0x1, 0x9, 0x8000000000000001, 0x3, 0x10, 0x5}}) (rerun: 64) 09:32:12 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2a02, 0x0) write$sequencer(r0, &(0x7f0000000080)=ANY=[], 0xfffc) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xfffffffc, 0x494e4f4b, 0x3, @stepwise={0x4, 0xef, 0xfffff001, 0x5, 0x744, 0x3}}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xfc, 0x175103) read$midi(r0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x6980, [0xffffffff, 0x81], 0x100}, 0x10) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000000)=0x4b9) 09:32:12 executing program 0: ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x80, 0x80, 0x10000, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xe5, [@multicast1, @rand_addr=0x64010101, @remote, @multicast2, @empty, @local, @local]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x7, [{@private=0xa010100, 0x6}, {@private=0xa010100, 0x7f}, {@empty, 0x92}, {@multicast2, 0xc2cd}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xa, "1d344c0daadce734"}, {0x5, 0x5, "d7b4e8"}, {0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xad, [@rand_addr=0x64010102, @broadcast]}, @rr={0x7, 0x1f, 0xd1, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @loopback, @loopback]}]}}}}}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x8001, 0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)) (async) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x40, 0x80, 0x80, 0x10000, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x68, 0x0, 0x40, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1f, 0xe5, [@multicast1, @rand_addr=0x64010101, @remote, @multicast2, @empty, @local, @local]}, @timestamp_prespec={0x44, 0x24, 0x79, 0x3, 0x7, [{@private=0xa010100, 0x6}, {@private=0xa010100, 0x7f}, {@empty, 0x92}, {@multicast2, 0xc2cd}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xa, "1d344c0daadce734"}, {0x5, 0x5, "d7b4e8"}, {0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0xad, [@rand_addr=0x64010102, @broadcast]}, @rr={0x7, 0x1f, 0xd1, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @loopback, @loopback]}]}}}}}) (async) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000040)={0x8001, 0x2}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x8) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x9, "01f4aee04c2f576ccb9957cc4f3c388146696e0ba10a79e25322de026c803518", 0xffffff7f, 0x1, 0x1, 0xfffffffc, 0x8}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @sdr={0x32344d59, 0x9}}) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000040)={0xaa}) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x8) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x9, "01f4aee04c2f576ccb9957cc4f3c388146696e0ba10a79e25322de026c803518", 0xffffff7f, 0x1, 0x1, 0xfffffffc, 0x8}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @sdr={0x32344d59, 0x9}}) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0x8, 0x800, 0x81, 0xfff, 0x401, 0x200, 0x2, 0x8]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000040)={0xaa}) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2a02, 0x0) write$sequencer(r0, &(0x7f0000000080)=ANY=[], 0xfffc) (async) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0xfffffffc, 0x494e4f4b, 0x3, @stepwise={0x4, 0xef, 0xfffff001, 0x5, 0x744, 0x3}}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800, 0x2) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfffffffa, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:12 executing program 1: write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@x={0x94, 0x5, "d8f9fef422ce"}, @v={0x93, 0x3, 0xa0, 0xe, @MIDI_NOTEON=@special, 0x0, 0x5}, @v={0x93, 0x7, 0x90, 0x3, @MIDI_NOTEON=@special, 0x4, 0x1000}, @raw={0xc, 0x4, "7b959e400904"}, @x={0x94, 0x0, "55270e81dab7"}, @raw={0xfe, 0x1, "b9b491494efe"}, @t={0x4, 0x4, 0x1c, 0xfa}, @generic], 0x39) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x8) (async) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x7fffffff, 0x9, "01f4aee04c2f576ccb9957cc4f3c388146696e0ba10a79e25322de026c803518", 0xffffff7f, 0x1, 0x1, 0xfffffffc, 0x8}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @sdr={0x32344d59, 0x9}}) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0x8, 0x800, 0x81, 0xfff, 0x401, 0x200, 0x2, 0x8]}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800, 0x2) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfffffffa, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x11, 0x800, 0x2) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfffffffa, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:12 executing program 1: write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@x={0x94, 0x5, "d8f9fef422ce"}, @v={0x93, 0x3, 0xa0, 0xe, @MIDI_NOTEON=@special, 0x0, 0x5}, @v={0x93, 0x7, 0x90, 0x3, @MIDI_NOTEON=@special, 0x4, 0x1000}, @raw={0xc, 0x4, "7b959e400904"}, @x={0x94, 0x0, "55270e81dab7"}, @raw={0xfe, 0x1, "b9b491494efe"}, @t={0x4, 0x4, 0x1c, 0xfa}, @generic], 0x39) (async) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x4}, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000040)={0xaa}) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000000040)={0x3, 0x0, [0x8, 0x800, 0x81, 0xfff, 0x401, 0x200, 0x2, 0x8]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0xffffffff, 0x2, 0x7fff, 0x7f, 0xffffffff, 0x7, 0x87e3, 0x85, 0x5, 0x2, 0x1, 0x1, 0x9, 0x3e9, 0x6, 0x1ff]}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x12fe909f22ac2323, 0x1, [0x2, 0x6, 0x8, 0x1ff, 0x7fffffff, 0x1, 0x0, 0xaf31]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800, 0x2) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xfffffffa, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:12 executing program 1: write$sequencer(0xffffffffffffffff, &(0x7f0000000000)=[@x={0x94, 0x5, "d8f9fef422ce"}, @v={0x93, 0x3, 0xa0, 0xe, @MIDI_NOTEON=@special, 0x0, 0x5}, @v={0x93, 0x7, 0x90, 0x3, @MIDI_NOTEON=@special, 0x4, 0x1000}, @raw={0xc, 0x4, "7b959e400904"}, @x={0x94, 0x0, "55270e81dab7"}, @raw={0xfe, 0x1, "b9b491494efe"}, @t={0x4, 0x4, 0x1c, 0xfa}, @generic], 0x39) (async) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) 09:32:12 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x288980) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) socket(0x3, 0x800, 0x37) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) socket(0x21, 0x4, 0x10000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x4080) write$bt_hci(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0xffffffff, 0x2, 0x7fff, 0x7f, 0xffffffff, 0x7, 0x87e3, 0x85, 0x5, 0x2, 0x1, 0x1, 0x9, 0x3e9, 0x6, 0x1ff]}) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x12fe909f22ac2323, 0x1, [0x2, 0x6, 0x8, 0x1ff, 0x7fffffff, 0x1, 0x0, 0xaf31]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xffb4, 0x1ff, 0x7}) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x137143) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 09:32:12 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x288980) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) socket(0x3, 0x800, 0x37) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) socket(0x21, 0x4, 0x10000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x4080) write$bt_hci(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x288980) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) socket(0x3, 0x800, 0x37) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) socket(0x21, 0x4, 0x10000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x4080) (async) write$bt_hci(r2, 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) (async) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x5) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x9, 0x4) socket(0x27, 0x80000, 0x5) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000000c0)={0xffffffffffff4214, 0x7ff}) write$bt_hci(r0, 0x0, 0x15) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x137143) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xffb4, 0x1ff, 0x7}) (async) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 64) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0xffffffff, 0x2, 0x7fff, 0x7f, 0xffffffff, 0x7, 0x87e3, 0x85, 0x5, 0x2, 0x1, 0x1, 0x9, 0x3e9, 0x6, 0x1ff]}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x12fe909f22ac2323, 0x1, [0x2, 0x6, 0x8, 0x1ff, 0x7fffffff, 0x1, 0x0, 0xaf31]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x0, 0x2, @raw_data=[0xffffffff, 0x2, 0x7fff, 0x7f, 0xffffffff, 0x7, 0x87e3, 0x85, 0x5, 0x2, 0x1, 0x1, 0x9, 0x3e9, 0x6, 0x1ff]}) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x12fe909f22ac2323, 0x1, [0x2, 0x6, 0x8, 0x1ff, 0x7fffffff, 0x1, 0x0, 0xaf31]}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:12 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x288980) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) socket(0x3, 0x800, 0x37) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) socket(0x21, 0x4, 0x10000) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x9, 0x4080) (async) write$bt_hci(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x5) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x9, 0x4) (async) socket(0x27, 0x80000, 0x5) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000000c0)={0xffffffffffff4214, 0x7ff}) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x7, "411066fcc59a44b3d70777bf849e88da1c7c85886aa62c684336c0c2be171daa", 0x3842efce5d3c0e6b, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x9, 0x6ab, 0x41416770, 0x8, 0xfffffffc, 0xfe8d, 0x4, 0x1, 0x0, 0x2, 0x2}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xffb4, 0x1ff, 0x7}) (async) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x137143) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xd6000, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x5, 0x81, 0x401, 0x4f424752, [0x2, 0x7], [0x70000000, 0xa3], 0x108}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x7fffffff, 0x7f], 0x2}, 0x10) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x7, "411066fcc59a44b3d70777bf849e88da1c7c85886aa62c684336c0c2be171daa", 0x3842efce5d3c0e6b, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x9, 0x6ab, 0x41416770, 0x8, 0xfffffffc, 0xfe8d, 0x4, 0x1, 0x0, 0x2, 0x2}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x7, "411066fcc59a44b3d70777bf849e88da1c7c85886aa62c684336c0c2be171daa", 0x3842efce5d3c0e6b, 0x1}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x9, 0x6ab, 0x41416770, 0x8, 0xfffffffc, 0xfe8d, 0x4, 0x1, 0x0, 0x2, 0x2}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)) (async) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xd6000, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x5, 0x81, 0x401, 0x4f424752, [0x2, 0x7], [0x70000000, 0xa3], 0x108}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0xfffffff8) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x7fffffff, 0x7f], 0x2}, 0x10) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x5, 0x7, 0x3f, 0x2, 0x44, 0x1, 0xa}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x4a, &(0x7f0000000200)=""/74, 0x40f00, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x1, 0xfffff000}, 0x10, 0x21bfa, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) write$tcp_congestion(r1, &(0x7f0000000040)='dctcp\x00', 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x7, "411066fcc59a44b3d70777bf849e88da1c7c85886aa62c684336c0c2be171daa", 0x3842efce5d3c0e6b, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x9, 0x6ab, 0x41416770, 0x8, 0xfffffffc, 0xfe8d, 0x4, 0x1, 0x0, 0x2, 0x2}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x7, "411066fcc59a44b3d70777bf849e88da1c7c85886aa62c684336c0c2be171daa", 0x3842efce5d3c0e6b, 0x1}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x3, @pix={0x9, 0x6ab, 0x41416770, 0x8, 0xfffffffc, 0xfe8d, 0x4, 0x1, 0x0, 0x2, 0x2}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)) (async) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000080)=0x5) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000100)=0x9, 0x4) (async) socket(0x27, 0x80000, 0x5) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000000c0)={0xffffffffffff4214, 0x7ff}) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) write$midi(r1, &(0x7f0000000080)="14c50858ac5d5c0f36a60f1838e1506917a37db2a5efe11e79e6b406bfae8b2e95f6ce2210b6f448f383b79e4be0966e0554b47ff56531ae3d6144eb01239219790da0d0d18bf9a37e5d0a24919c0c2287f870f800a931b1c500a477732539a06fafdfdfdb33e8b4e02e474ef9ecce6572444c903608ca36e283ac6ab07c31ae391ae9a4cc56803331afc353790d5454a841255d3e9acff28fdfad106f59278a0ea60cd4cd72c35087c33d6f7ebec24ea7f0358c18fc7564f5dcb680d772181c6f293ac162a910e68f39f615b4f662c393060b0b8fa9de7a2f3528", 0xdb) read$midi(r0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xd6000, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x5, 0x81, 0x401, 0x4f424752, [0x2, 0x7], [0x70000000, 0xa3], 0x108}}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0xfffffff8) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x7fffffff, 0x7f], 0x2}, 0x10) 09:32:12 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x4c, 0x3f, 0x8, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x4e1, 0x8715}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x1f, 0x40, 0x114c, 0x40, @empty, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x7b, 0xffffffff}}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0xffffffff, @loopback, 0x1}, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x40}, 0x0, {[0x1, 0x8, 0x3f, 0x1f, 0x76e, 0x5, 0x5]}}, 0x5c) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x5, 0x7, 0x3f, 0x2, 0x44, 0x1, 0xa}}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x4a, &(0x7f0000000200)=""/74, 0x40f00, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x1, 0xfffff000}, 0x10, 0x21bfa, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) write$tcp_congestion(r1, &(0x7f0000000040)='dctcp\x00', 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x5, 0x7, 0x3f, 0x2, 0x44, 0x1, 0xa}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x4a, &(0x7f0000000200)=""/74, 0x40f00, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x1, 0xfffff000}, 0x10, 0x21bfa, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) (async) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) (async) write$tcp_congestion(r1, &(0x7f0000000040)='dctcp\x00', 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) write$midi(r1, &(0x7f0000000080)="14c50858ac5d5c0f36a60f1838e1506917a37db2a5efe11e79e6b406bfae8b2e95f6ce2210b6f448f383b79e4be0966e0554b47ff56531ae3d6144eb01239219790da0d0d18bf9a37e5d0a24919c0c2287f870f800a931b1c500a477732539a06fafdfdfdb33e8b4e02e474ef9ecce6572444c903608ca36e283ac6ab07c31ae391ae9a4cc56803331afc353790d5454a841255d3e9acff28fdfad106f59278a0ea60cd4cd72c35087c33d6f7ebec24ea7f0358c18fc7564f5dcb680d772181c6f293ac162a910e68f39f615b4f662c393060b0b8fa9de7a2f3528", 0xdb) read$midi(r0, 0x0, 0x0) (async) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x3, 0x2, 0x5, {0xfff, 0x2, 0x29f, 0x7fffffff}}) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000000)) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x8001, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x2, 0x0, 0x1015, 0x7fff, 0x7ff, 0x8, 0x0, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x0, 0x200200) write$midi(r2, &(0x7f0000000180)="584ddc4dcbdfa07e40ed32bc605ce29d4939aad64661b652965283cd82375621b5132cdd3ebd8f314f4ad1c691283c61b1f075647f336e4ae3f2b9254d961438cfa1c10b28b170b69d6137d5aaa119e3c62df51d77f5391ebe590d66746f153e2d5267f5b7387bdeaa77416bc802b15a07a199f8901f7fd96ec3bd92f5c7cffcc684950e4f71b38b8100e034f11694b7033a695591badb4bb729e124d5c42a85f4bdbf205fc7c3205513782cf976d637d21099dc7670aa004188d75493f799eb1eb7c8724b78090d7f7f7d233ce4cbc4e151a706693ec6c59571b3", 0xdb) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x3ff, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x4e, 0x95, 0x6, 0x0, 0x0, 0x5, 0xb93, 0x81]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dvmrp1\x00'}) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x4c, 0x3f, 0x8, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x4e1, 0x8715}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x1f, 0x40, 0x114c, 0x40, @empty, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x7b, 0xffffffff}}) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0xffffffff, @loopback, 0x1}, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x40}, 0x0, {[0x1, 0x8, 0x3f, 0x1f, 0x76e, 0x5, 0x5]}}, 0x5c) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x3, 0x2, 0x5, {0xfff, 0x2, 0x29f, 0x7fffffff}}) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000000)) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x3, 0x2, 0x5, {0xfff, 0x2, 0x29f, 0x7fffffff}}) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000000)) (async) 09:32:12 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x4c, 0x3f, 0x8, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x700, 0x4e1, 0x8715}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', r2, 0x2f, 0x1f, 0x40, 0x114c, 0x40, @empty, @rand_addr=' \x01\x00', 0x20, 0x8000, 0x7b, 0xffffffff}}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0xffffffff, @loopback, 0x1}, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x40}, 0x0, {[0x1, 0x8, 0x3f, 0x1f, 0x76e, 0x5, 0x5]}}, 0x5c) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @bt={0x5, 0x7, 0x3f, 0x2, 0x44, 0x1, 0xa}}) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x4a, &(0x7f0000000200)=""/74, 0x40f00, 0x1a, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x1, 0x1, 0xfffff000}, 0x10, 0x21bfa, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r1, r1, r1, r1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000003c0)={0x0, r2}, 0x10) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000080)) (async) write$tcp_congestion(r1, &(0x7f0000000040)='dctcp\x00', 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) write$midi(r1, &(0x7f0000000080)="14c50858ac5d5c0f36a60f1838e1506917a37db2a5efe11e79e6b406bfae8b2e95f6ce2210b6f448f383b79e4be0966e0554b47ff56531ae3d6144eb01239219790da0d0d18bf9a37e5d0a24919c0c2287f870f800a931b1c500a477732539a06fafdfdfdb33e8b4e02e474ef9ecce6572444c903608ca36e283ac6ab07c31ae391ae9a4cc56803331afc353790d5454a841255d3e9acff28fdfad106f59278a0ea60cd4cd72c35087c33d6f7ebec24ea7f0358c18fc7564f5dcb680d772181c6f293ac162a910e68f39f615b4f662c393060b0b8fa9de7a2f3528", 0xdb) read$midi(r0, 0x0, 0x0) (async) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x4, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180)) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0}}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x3, 0x2, 0x5, {0xfff, 0x2, 0x29f, 0x7fffffff}}) (async, rerun: 64) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f0000000000)) (rerun: 64) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x4e, 0x95, 0x6, 0x0, 0x0, 0x5, 0xb93, 0x81]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dvmrp1\x00'}) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x4, '\x00', &(0x7f0000000100)=0x7f}) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x48503) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x4, 0x40, 0x1000, 0x9, 0xf19}) read$midi(r1, 0x0, 0x0) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x8001, 0x4) (async, rerun: 32) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x2, 0x0, 0x1015, 0x7fff, 0x7ff, 0x8, 0x0, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x0, 0x200200) write$midi(r2, &(0x7f0000000180)="584ddc4dcbdfa07e40ed32bc605ce29d4939aad64661b652965283cd82375621b5132cdd3ebd8f314f4ad1c691283c61b1f075647f336e4ae3f2b9254d961438cfa1c10b28b170b69d6137d5aaa119e3c62df51d77f5391ebe590d66746f153e2d5267f5b7387bdeaa77416bc802b15a07a199f8901f7fd96ec3bd92f5c7cffcc684950e4f71b38b8100e034f11694b7033a695591badb4bb729e124d5c42a85f4bdbf205fc7c3205513782cf976d637d21099dc7670aa004188d75493f799eb1eb7c8724b78090d7f7f7d233ce4cbc4e151a706693ec6c59571b3", 0xdb) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x4e, 0x95, 0x6, 0x0, 0x0, 0x5, 0xb93, 0x81]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dvmrp1\x00'}) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) (rerun: 64) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1, {0x7898, 0x101, 0x3, 0x9}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}}) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x151000, 0x0) read$sequencer(r1, &(0x7f0000000080), 0x0) 09:32:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x4, '\x00', &(0x7f0000000100)=0x7f}) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x48503) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x4, 0x40, 0x1000, 0x9, 0xf19}) read$midi(r1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x4, '\x00', &(0x7f0000000100)=0x7f}) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) (async) syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x48503) (async) syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x4, 0x40, 0x1000, 0x9, 0xf19}) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x151000, 0x0) read$sequencer(r1, &(0x7f0000000080), 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x151000, 0x0) (async) read$sequencer(r1, &(0x7f0000000080), 0x0) (async) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (rerun: 64) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1, {0x7898, 0x101, 0x3, 0x9}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1, {0x7898, 0x101, 0x3, 0x9}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}}) (async) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x8001, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x2, 0x0, 0x1015, 0x7fff, 0x7ff, 0x8, 0x0, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x0, 0x200200) write$midi(r2, &(0x7f0000000180)="584ddc4dcbdfa07e40ed32bc605ce29d4939aad64661b652965283cd82375621b5132cdd3ebd8f314f4ad1c691283c61b1f075647f336e4ae3f2b9254d961438cfa1c10b28b170b69d6137d5aaa119e3c62df51d77f5391ebe590d66746f153e2d5267f5b7387bdeaa77416bc802b15a07a199f8901f7fd96ec3bd92f5c7cffcc684950e4f71b38b8100e034f11694b7033a695591badb4bb729e124d5c42a85f4bdbf205fc7c3205513782cf976d637d21099dc7670aa004188d75493f799eb1eb7c8724b78090d7f7f7d233ce4cbc4e151a706693ec6c59571b3", 0xdb) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x3ff, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000100)=0x8001, 0x4) (async) syz_open_dev$cec(&(0x7f0000000080), 0x3, 0x2) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x2, 0x0, 0x1015, 0x7fff, 0x7ff, 0x8, 0x0, 0x1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000140), 0x0, 0x200200) (async) write$midi(r2, &(0x7f0000000180)="584ddc4dcbdfa07e40ed32bc605ce29d4939aad64661b652965283cd82375621b5132cdd3ebd8f314f4ad1c691283c61b1f075647f336e4ae3f2b9254d961438cfa1c10b28b170b69d6137d5aaa119e3c62df51d77f5391ebe590d66746f153e2d5267f5b7387bdeaa77416bc802b15a07a199f8901f7fd96ec3bd92f5c7cffcc684950e4f71b38b8100e034f11694b7033a695591badb4bb729e124d5c42a85f4bdbf205fc7c3205513782cf976d637d21099dc7670aa004188d75493f799eb1eb7c8724b78090d7f7f7d233ce4cbc4e151a706693ec6c59571b3", 0xdb) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x3ff, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000000c0)) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe7, r2, 0xf802}, 0xc) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x4, '\x00', &(0x7f0000000100)=0x7f}) ioctl$SNDCTL_TMR_START(r0, 0x5402) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x48503) r2 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x4, 0x40, 0x1000, 0x9, 0xf19}) read$midi(r1, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) (async) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0x4, '\x00', &(0x7f0000000100)=0x7f}) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) (async) syz_open_dev$amidi(&(0x7f0000000080), 0x0, 0x48503) (async) syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x4, 0x4, 0x40, 0x1000, 0x9, 0xf19}) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000000c0)) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe7, r2, 0xf802}, 0xc) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) 09:32:12 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1, {0x7898, 0x101, 0x3, 0x9}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1, {0x7898, 0x101, 0x3, 0x9}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}}) (async) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x151000, 0x0) read$sequencer(r1, &(0x7f0000000080), 0x0) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$amidi(&(0x7f0000000180), 0x5, 0x80) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x10000, 0x7fffffff, 0x0, 0x4}) syz_open_dev$dmmidi(&(0x7f0000000080), 0xae, 0x240000) syz_open_dev$sndmidi(&(0x7f0000000100), 0x200, 0x80000) syz_open_dev$sndmidi(&(0x7f0000000140), 0x7, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x5) 09:32:12 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f00000000c0)) (async) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe7, r2, 0xf802}, 0xc) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000140)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:12 executing program 2: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x1}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0x101, 0x7, 0x9, 0x3831354f, [0x2, 0x1], [0x7, 0x7fff], 0x1}}) 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "fa71bc", 0x80, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x12) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000001c0)={0x800, 0x8, 0x16, "d27ce61e42ce9d7b1da3e39a765413729e97a51a2ca71e67d66418738be39b27891284dcca4e77801347aa34785cf41f1b9603364562ea58400dca1f", 0x14, "ce72fc7c368cbf50c6accb4b395c2c508feb4a1db53f354ee932d44ceaba2c6aa105382913b762df29e01970f451c481e0d71dddb69a8ca4cf77ab41", 0x88}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x20, 0x2, 0x0, @mcast1, @mcast2, 0x10, 0x80, 0xfff, 0xf51}}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x29, 0x44, 0x2, 0x8000, 0x0, @mcast1, @empty, 0x10, 0x40, 0x4, 0xba0}}) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000280)=0xa, 0x4) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$amidi(&(0x7f0000000180), 0x5, 0x80) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x10000, 0x7fffffff, 0x0, 0x4}) syz_open_dev$dmmidi(&(0x7f0000000080), 0xae, 0x240000) syz_open_dev$sndmidi(&(0x7f0000000100), 0x200, 0x80000) syz_open_dev$sndmidi(&(0x7f0000000140), 0x7, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x5) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$amidi(&(0x7f0000000180), 0x5, 0x80) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x10000, 0x7fffffff, 0x0, 0x4}) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0xae, 0x240000) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x200, 0x80000) (async) syz_open_dev$sndmidi(&(0x7f0000000140), 0x7, 0x20000) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x5) (async) 09:32:12 executing program 2: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x1}) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0x101, 0x7, 0x9, 0x3831354f, [0x2, 0x1], [0x7, 0x7fff], 0x1}}) 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000140)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f00000000c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000140)) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f00000000c0)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 09:32:12 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40a240, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)=0x200) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000080)=0x16ac) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000001c0)={0xffffffffffffffff, 0x100, "d843ec", 0x40, 0x2}) write$bt_hci(r1, 0x0, 0x15) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f00000000c0)="fdb8c163b2b8df3bdd4f9b5b36ee6de101ca7eaf7567a4878a2c822b5da2833f192e1f77139cd73a473d3fb4c168bd8065bb066a4af67d229dd68d977ca06dad6d29c483eb06cfa180d64a5e5d") 09:32:12 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "fa71bc", 0x80, 0x1}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x12) 09:32:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000001c0)={0x800, 0x8, 0x16, "d27ce61e42ce9d7b1da3e39a765413729e97a51a2ca71e67d66418738be39b27891284dcca4e77801347aa34785cf41f1b9603364562ea58400dca1f", 0x14, "ce72fc7c368cbf50c6accb4b395c2c508feb4a1db53f354ee932d44ceaba2c6aa105382913b762df29e01970f451c481e0d71dddb69a8ca4cf77ab41", 0x88}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x20, 0x2, 0x0, @mcast1, @mcast2, 0x10, 0x80, 0xfff, 0xf51}}) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x29, 0x44, 0x2, 0x8000, 0x0, @mcast1, @empty, 0x10, 0x40, 0x4, 0xba0}}) (async) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000280)=0xa, 0x4) 09:32:12 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$amidi(&(0x7f0000000180), 0x5, 0x80) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x10000, 0x7fffffff, 0x0, 0x4}) syz_open_dev$dmmidi(&(0x7f0000000080), 0xae, 0x240000) syz_open_dev$sndmidi(&(0x7f0000000100), 0x200, 0x80000) syz_open_dev$sndmidi(&(0x7f0000000140), 0x7, 0x20000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x5) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$amidi(&(0x7f0000000180), 0x5, 0x80) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x10000, 0x7fffffff, 0x0, 0x4}) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0xae, 0x240000) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x200, 0x80000) (async) syz_open_dev$sndmidi(&(0x7f0000000140), 0x7, 0x20000) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x5) (async) 09:32:12 executing program 2: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x1}) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0x101, 0x7, 0x9, 0x3831354f, [0x2, 0x1], [0x7, 0x7fff], 0x1}}) 09:32:12 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40a240, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)=0x200) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000080)=0x16ac) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000001c0)={0xffffffffffffffff, 0x100, "d843ec", 0x40, 0x2}) (async) write$bt_hci(r1, 0x0, 0x15) (async) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f00000000c0)="fdb8c163b2b8df3bdd4f9b5b36ee6de101ca7eaf7567a4878a2c822b5da2833f192e1f77139cd73a473d3fb4c168bd8065bb066a4af67d229dd68d977ca06dad6d29c483eb06cfa180d64a5e5d") 09:32:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000140)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f00000000c0)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000001c0)={0x800, 0x8, 0x16, "d27ce61e42ce9d7b1da3e39a765413729e97a51a2ca71e67d66418738be39b27891284dcca4e77801347aa34785cf41f1b9603364562ea58400dca1f", 0x14, "ce72fc7c368cbf50c6accb4b395c2c508feb4a1db53f354ee932d44ceaba2c6aa105382913b762df29e01970f451c481e0d71dddb69a8ca4cf77ab41", 0x88}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x20, 0x2, 0x0, @mcast1, @mcast2, 0x10, 0x80, 0xfff, 0xf51}}) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x29, 0x44, 0x2, 0x8000, 0x0, @mcast1, @empty, 0x10, 0x40, 0x4, 0xba0}}) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000280)=0xa, 0x4) syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000001c0)={0x800, 0x8, 0x16, "d27ce61e42ce9d7b1da3e39a765413729e97a51a2ca71e67d66418738be39b27891284dcca4e77801347aa34785cf41f1b9603364562ea58400dca1f", 0x14, "ce72fc7c368cbf50c6accb4b395c2c508feb4a1db53f354ee932d44ceaba2c6aa105382913b762df29e01970f451c481e0d71dddb69a8ca4cf77ab41", 0x88}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x20, 0x2, 0x0, @mcast1, @mcast2, 0x10, 0x80, 0xfff, 0xf51}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', r3, 0x29, 0x44, 0x2, 0x8000, 0x0, @mcast1, @empty, 0x10, 0x40, 0x4, 0xba0}}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000280)=0xa, 0x4) (async) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "fa71bc", 0x80, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "fa71bc", 0x80, 0x1}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x12) (async) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x1c9502) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 2: r0 = socket(0x9, 0x1, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x7fffffffffffffff, 0x80000) read$midi(r1, &(0x7f0000000500)=""/4096, 0x1000) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6, 0x4) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x5, @win={{}, 0x0, 0x40, 0x0, 0x0, 0x0}}) 09:32:13 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40a240, 0x0) (async) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000140)=0x200) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000080)=0x16ac) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000001c0)={0xffffffffffffffff, 0x100, "d843ec", 0x40, 0x2}) (async) write$bt_hci(r1, 0x0, 0x15) (async) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f00000000c0)="fdb8c163b2b8df3bdd4f9b5b36ee6de101ca7eaf7567a4878a2c822b5da2833f192e1f77139cd73a473d3fb4c168bd8065bb066a4af67d229dd68d977ca06dad6d29c483eb06cfa180d64a5e5d") 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x1c9502) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x4b) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x7ff, [0x8001, 0x6], 0x7}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)=0xfff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, {0xa, 0x4e23, 0x23, @empty, 0x8001}, 0x0, {[0x80000001, 0x40, 0x8, 0x7, 0x21e8, 0x3, 0x0, 0x5752]}}, 0x5c) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x71, [0x1, 0x1], 0x1}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 2: r0 = socket(0x9, 0x1, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x7fffffffffffffff, 0x80000) read$midi(r1, &(0x7f0000000500)=""/4096, 0x1000) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6, 0x4) (async, rerun: 32) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x5, @win={{}, 0x0, 0x40, 0x0, 0x0, 0x0}}) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x4b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x4b) (async) 09:32:13 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x3, @name="1d238a74f034b120493f9ca1f3173c5a81d6d39b74fd40f504638f01d540e5bd"}, 0x8, 0x6e4, 0x38000000000}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfeff, 0x3}, 0x6) write$bt_hci(r2, 0x0, 0x15) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x800, 0x6, 0x4, 0x2, 0xfffffffe, {0x0, 0xea60}, {0x5, 0xc, 0x2, 0x1, 0x7, 0x8, "53e1f4c8"}, 0xfff, 0x4, {}, 0x9}) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x1c9502) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x7ff, [0x8001, 0x6], 0x7}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)=0xfff) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, {0xa, 0x4e23, 0x23, @empty, 0x8001}, 0x0, {[0x80000001, 0x40, 0x8, 0x7, 0x21e8, 0x3, 0x0, 0x5752]}}, 0x5c) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x71, [0x1, 0x1], 0x1}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x7ff, [0x8001, 0x6], 0x7}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)=0xfff) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, {0xa, 0x4e23, 0x23, @empty, 0x8001}, 0x0, {[0x80000001, 0x40, 0x8, 0x7, 0x21e8, 0x3, 0x0, 0x5752]}}, 0x5c) (async) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x71, [0x1, 0x1], 0x1}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 09:32:13 executing program 2: r0 = socket(0x9, 0x1, 0x3) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x7fffffffffffffff, 0x80000) read$midi(r1, &(0x7f0000000500)=""/4096, 0x1000) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6, 0x4) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x5, @win={{}, 0x0, 0x40, 0x0, 0x0, 0x0}}) socket(0x9, 0x1, 0x3) (async) syz_open_dev$amidi(&(0x7f0000000080), 0x7fffffffffffffff, 0x80000) (async) read$midi(r1, &(0x7f0000000500)=""/4096, 0x1000) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0xa6, 0x4) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x5, @win={{}, 0x0, 0x40, 0x0, 0x0, 0x0}}) (async) 09:32:13 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) (async) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x3, @name="1d238a74f034b120493f9ca1f3173c5a81d6d39b74fd40f504638f01d540e5bd"}, 0x8, 0x6e4, 0x38000000000}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfeff, 0x3}, 0x6) write$bt_hci(r2, 0x0, 0x15) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x800, 0x6, 0x4, 0x2, 0xfffffffe, {0x0, 0xea60}, {0x5, 0xc, 0x2, 0x1, 0x7, 0x8, "53e1f4c8"}, 0xfff, 0x4, {}, 0x9}) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x4b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x4b) (async) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x1, 0x48503) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x4) read$midi(r0, 0x0, 0xffffffffffffffb7) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000000)={0x80}) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000140)={0x7ff, [0x8001, 0x6], 0x7}, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000100)=0xfff) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, {0xa, 0x4e23, 0x23, @empty, 0x8001}, 0x0, {[0x80000001, 0x40, 0x8, 0x7, 0x21e8, 0x3, 0x0, 0x5752]}}, 0x5c) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x71, [0x1, 0x1], 0x1}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x9f, 0x0, 0x7, 0x50565559, [0x6, 0x2], [0x7fff, 0x1], 0x1}}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x8, 0xb763, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x1, 0x48503) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x4) read$midi(r0, 0x0, 0xffffffffffffffb7) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) (async) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000000)={0x80}) 09:32:13 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r1, 0x4) (async, rerun: 64) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x3, @name="1d238a74f034b120493f9ca1f3173c5a81d6d39b74fd40f504638f01d540e5bd"}, 0x8, 0x6e4, 0x38000000000}) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfeff, 0x3}, 0x6) (async) write$bt_hci(r2, 0x0, 0x15) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x800, 0x6, 0x4, 0x2, 0xfffffffe, {0x0, 0xea60}, {0x5, 0xc, 0x2, 0x1, 0x7, 0x8, "53e1f4c8"}, 0xfff, 0x4, {}, 0x9}) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x1, 0x48503) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x4) (async) read$midi(r0, 0x0, 0xffffffffffffffb7) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) (async) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000000)={0x80}) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x8, 0xb763, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x8, 0xb763, 0x1}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 09:32:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x9f, 0x0, 0x7, 0x50565559, [0x6, 0x2], [0x7fff, 0x1], 0x1}}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) socket(0x1, 0x0, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xffffff00, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @vbi={0x9f, 0x0, 0x7, 0x50565559, [0x6, 0x2], [0x7fff, 0x1], 0x1}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000200)) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) socket(0x1, 0x0, 0x7) (async, rerun: 64) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xffffff00, 0x4) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @sdr={0x31384142, 0x3d}}) r1 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x5, @pix={0x2, 0x8, 0x20363159, 0x5, 0x43f4, 0x6, 0x7, 0x631e5f56, 0x1, 0x0, 0x1, 0x7}}) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x8, 0xb763, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x8, 0xb763, 0x1}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000200)) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) (async) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000200)) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) (async) 09:32:13 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @sdr={0x31384142, 0x3d}}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x5, @pix={0x2, 0x8, 0x20363159, 0x5, 0x43f4, 0x6, 0x7, 0x631e5f56, 0x1, 0x0, 0x1, 0x7}}) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) socket(0x1, 0x0, 0x7) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0xffffff00, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000001c0)={0x1}) (async) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, &(0x7f0000000200)) (async, rerun: 64) read$midi(r0, 0x0, 0x0) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000080)) 09:32:13 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @sdr={0x31384142, 0x3d}}) r1 = syz_open_dev$vivid(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x5, @pix={0x2, 0x8, 0x20363159, 0x5, 0x43f4, 0x6, 0x7, 0x631e5f56, 0x1, 0x0, 0x1, 0x7}}) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x15) 09:32:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000080)) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x72c) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) (rerun: 64) 09:32:13 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x87, 0x9a, '\x00', &(0x7f0000000040)=0x5}) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x2, "5f5e9212964ea545c571e742ff40e56e3eec65e3b84029d427caee9749cab424", 0x1, 0x80000001, 0x7, 0x3200e0, 0x2000100, 0x2}) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x15) 09:32:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async, rerun: 64) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x72c) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x52f9, [0xf043, 0x2], 0x4}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x3ff, 0xbf, &(0x7f0000000140)=""/191, 0x41100, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x1000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='netfs_rreq\x00', r2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x87, 0x9a, '\x00', &(0x7f0000000040)=0x5}) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x15) (async) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x87, 0x9a, '\x00', &(0x7f0000000040)=0x5}) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x52f9, [0xf043, 0x2], 0x4}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x3ff, 0xbf, &(0x7f0000000140)=""/191, 0x41100, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x1000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='netfs_rreq\x00', r2}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x2, "5f5e9212964ea545c571e742ff40e56e3eec65e3b84029d427caee9749cab424", 0x1, 0x80000001, 0x7, 0x3200e0, 0x2000100, 0x2}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x2, "5f5e9212964ea545c571e742ff40e56e3eec65e3b84029d427caee9749cab424", 0x1, 0x80000001, 0x7, 0x3200e0, 0x2000100, 0x2}) (async) 09:32:13 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000080)) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x72c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000080)) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x72c) (async) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x2, "5f5e9212964ea545c571e742ff40e56e3eec65e3b84029d427caee9749cab424", 0x1, 0x80000001, 0x7, 0x3200e0, 0x2000100, 0x2}) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x1) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x3, 0x2, @start}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x52f9, [0xf043, 0x2], 0x4}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], &(0x7f0000000100)='GPL\x00', 0x3ff, 0xbf, &(0x7f0000000140)=""/191, 0x41100, 0x1, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x1000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='netfs_rreq\x00', r2}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:13 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x3, 0x2, @start}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x3, 0x2, @start}) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x1) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x1) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)) (async) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x1) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) 09:32:13 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000080)={0x3, 0x2, @start}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x8, 0x0, 0x0, 0x0, 0x0}}) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x8, 0x3010, 0x2, 0x15, 0x8, 0x1, 0x4}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x2, 0x0, 0x0, 0xfb29}, 0x0, 0x7, 0x0, 0x9e0e, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x8, "9ae16a273d447eff9e0157ee84378a8b2f49cf9aa0f0f66ac2bb2d6d5cb9b55a", 0x2, 0x7fffffff, 0x3b, 0x200000, 0x2}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000040)=0x200) write$bt_hci(r0, 0x0, 0x15) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, 0xfffffffffffffffc) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x8, 0x3010, 0x2, 0x15, 0x8, 0x1, 0x4}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x2, 0x0, 0x0, 0xfb29}, 0x0, 0x7, 0x0, 0x9e0e, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x41c581) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@echo=0x6) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000040)=0x200) write$bt_hci(r0, 0x0, 0x15) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, 0xfffffffffffffffc) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x8, "9ae16a273d447eff9e0157ee84378a8b2f49cf9aa0f0f66ac2bb2d6d5cb9b55a", 0x2, 0x7fffffff, 0x3b, 0x200000, 0x2}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x8, "9ae16a273d447eff9e0157ee84378a8b2f49cf9aa0f0f66ac2bb2d6d5cb9b55a", 0x2, 0x7fffffff, 0x3b, 0x200000, 0x2}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) (async) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x41c581) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@echo=0x6) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x8, 0x3010, 0x2, 0x15, 0x8, 0x1, 0x4}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x2, 0x0, 0x0, 0xfb29}, 0x0, 0x7, 0x0, 0x9e0e, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x5, 0x8, 0x3010, 0x2, 0x15, 0x8, 0x1, 0x4}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x2, 0x0, 0x0, 0xfb29}, 0x0, 0x7, 0x0, 0x9e0e, 0x0}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) (async) 09:32:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 32) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 32) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000040)=0x200) write$bt_hci(r0, 0x0, 0x15) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async, rerun: 32) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, 0xfffffffffffffffc) (rerun: 32) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x8, "9ae16a273d447eff9e0157ee84378a8b2f49cf9aa0f0f66ac2bb2d6d5cb9b55a", 0x2, 0x7fffffff, 0x3b, 0x200000, 0x2}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_neg_reply={{0x201b, 0x2}, {0xc8}}}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x8, "9ae16a273d447eff9e0157ee84378a8b2f49cf9aa0f0f66ac2bb2d6d5cb9b55a", 0x2, 0x7fffffff, 0x3b, 0x200000, 0x2}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) (async) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x41c581) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@echo=0x6) (async) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x6, 0x2, 0x10, 0x10000000}, 0x6, 0x4, 0x0, 0x0, 0x0}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2, 0xeb2, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x1, 0x8, 0x2}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000500)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x609b, 0x1f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x98091b, 0x16, '\x00', @value64=0x4}}) 09:32:13 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) 09:32:13 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x401, "d7c6677cdd041408dfce42e521197f6bc9f3a12a901628502996d40d2dcd89f5", 0x2, 0x2, 0x5, 0xff, 0x2, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x4, 0x41], 0x107}, 0x10) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="b2c0ec7cd5876b0ca8231540ac", @ANYBLOB="ad64ddc438f18f8822e1e4bf61c3f63e7f42f95983d95d05b1dc87e517962f9c7fe6a3ebf2af9f6b518326a3391510f137c231f79d05f94e50d4aa01d8b142f617ce0d793f36e95447a99ea7574a04991b9ad8c8c217fbd208b2ef51b667708191ab7e566896269231f3ba5c60fd6886913046520778f58a63e1d807c646e6646b41aa0bf101efa72d551b89"], 0x15) 09:32:13 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x6, 0x2, 0x10, 0x10000000}, 0x6, 0x4, 0x0, 0x0, 0x0}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2, 0xeb2, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x1, 0x8, 0x2}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000500)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x609b, 0x1f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x98091b, 0x16, '\x00', @value64=0x4}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x6, 0x2, 0x10, 0x10000000}, 0x6, 0x4, 0x0, 0x0, 0x0}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2, 0xeb2, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x1, 0x8, 0x2}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000500)) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x609b, 0x1f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x98091b, 0x16, '\x00', @value64=0x4}}) (async) 09:32:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8441, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000080)=0x32) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:13 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x401, "d7c6677cdd041408dfce42e521197f6bc9f3a12a901628502996d40d2dcd89f5", 0x2, 0x2, 0x5, 0xff, 0x2, 0x2}) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r1, 0x0, 0x15) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async, rerun: 32) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x4, 0x41], 0x107}, 0x10) (rerun: 32) 09:32:13 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:13 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="b2c0ec7cd5876b0ca8231540ac", @ANYBLOB="ad64ddc438f18f8822e1e4bf61c3f63e7f42f95983d95d05b1dc87e517962f9c7fe6a3ebf2af9f6b518326a3391510f137c231f79d05f94e50d4aa01d8b142f617ce0d793f36e95447a99ea7574a04991b9ad8c8c217fbd208b2ef51b667708191ab7e566896269231f3ba5c60fd6886913046520778f58a63e1d807c646e6646b41aa0bf101efa72d551b89"], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="b2c0ec7cd5876b0ca8231540ac", @ANYBLOB="ad64ddc438f18f8822e1e4bf61c3f63e7f42f95983d95d05b1dc87e517962f9c7fe6a3ebf2af9f6b518326a3391510f137c231f79d05f94e50d4aa01d8b142f617ce0d793f36e95447a99ea7574a04991b9ad8c8c217fbd208b2ef51b667708191ab7e566896269231f3ba5c60fd6886913046520778f58a63e1d807c646e6646b41aa0bf101efa72d551b89"], 0x15) (async) 09:32:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8441, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000080)=0x32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8441, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000080)=0x32) (async) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYBLOB="b2c0ec7cd5876b0ca8231540ac", @ANYBLOB="ad64ddc438f18f8822e1e4bf61c3f63e7f42f95983d95d05b1dc87e517962f9c7fe6a3ebf2af9f6b518326a3391510f137c231f79d05f94e50d4aa01d8b142f617ce0d793f36e95447a99ea7574a04991b9ad8c8c217fbd208b2ef51b667708191ab7e566896269231f3ba5c60fd6886913046520778f58a63e1d807c646e6646b41aa0bf101efa72d551b89"], 0x15) 09:32:14 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x401, "d7c6677cdd041408dfce42e521197f6bc9f3a12a901628502996d40d2dcd89f5", 0x2, 0x2, 0x5, 0xff, 0x2, 0x2}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x4, 0x41], 0x107}, 0x10) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x6, 0x2, 0x10, 0x10000000}, 0x6, 0x4, 0x0, 0x0, 0x0}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x2, 0xeb2, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x1, 0x8, 0x2}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000500)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x609b, 0x1f, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x98091b, 0x16, '\x00', @value64=0x4}}) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x112) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x112) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x112) (async) 09:32:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x180040, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)={0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000140)="5a6d93d3401aadbf46c4f4c6a0cd93d8a47b09a9db09e2d0aa79252c77a042c3c7162681db921c96eac7f0a7929b2a1ea542a86daa5198b55da44e1cd97e5b2ff9bc60291308922607790c44b49798b968747bd813b6e437b76cbb5b1b57a0622615afa29c04e8f8849c4915aff6babef790fbcb352052958ad85f6e837b200dbf44593f63ef9627c2cbe85cffc5801305d273000ae8f387c1c284c95453ddd8c0915d83b3bf0c7f7fed") r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x9, 0x48100) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000100)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8441, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000080)=0x32) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x112) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x112) (async) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) 09:32:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x180040, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)={0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000140)="5a6d93d3401aadbf46c4f4c6a0cd93d8a47b09a9db09e2d0aa79252c77a042c3c7162681db921c96eac7f0a7929b2a1ea542a86daa5198b55da44e1cd97e5b2ff9bc60291308922607790c44b49798b968747bd813b6e437b76cbb5b1b57a0622615afa29c04e8f8849c4915aff6babef790fbcb352052958ad85f6e837b200dbf44593f63ef9627c2cbe85cffc5801305d273000ae8f387c1c284c95453ddd8c0915d83b3bf0c7f7fed") r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x9, 0x48100) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000100)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x180040, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)={0x1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000140)="5a6d93d3401aadbf46c4f4c6a0cd93d8a47b09a9db09e2d0aa79252c77a042c3c7162681db921c96eac7f0a7929b2a1ea542a86daa5198b55da44e1cd97e5b2ff9bc60291308922607790c44b49798b968747bd813b6e437b76cbb5b1b57a0622615afa29c04e8f8849c4915aff6babef790fbcb352052958ad85f6e837b200dbf44593f63ef9627c2cbe85cffc5801305d273000ae8f387c1c284c95453ddd8c0915d83b3bf0c7f7fed") (async) syz_open_dev$dmmidi(&(0x7f00000000c0), 0x9, 0x48100) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000100)) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) (async) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xc, @raw_data="77f4add8ad8a4034dabb3823635b19e5ece73f8a9967cabc1934d31c631c645f618a7357171a7e6d5ef9283c96393983e51777a24e4bde6779ab2212065f60a582c722d81f924eac2cd557b720382fafdc1f0a506433950715887fafbb33a3d9c70335ec065c65686ebeb1d65b09355072e29a3408c041873bffa64ebd4210535a5d912bcb6a6a124bda9442000e393c70b3fd4b88de90f583217517210f50ea5236ad9f2b306e07f619af992cd3538a8eaca89f24b6a2869956da0bcd17c2c506fb8e4a921dfacb"}) 09:32:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) (async) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x180040, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000080)={0x1}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000140)="5a6d93d3401aadbf46c4f4c6a0cd93d8a47b09a9db09e2d0aa79252c77a042c3c7162681db921c96eac7f0a7929b2a1ea542a86daa5198b55da44e1cd97e5b2ff9bc60291308922607790c44b49798b968747bd813b6e437b76cbb5b1b57a0622615afa29c04e8f8849c4915aff6babef790fbcb352052958ad85f6e837b200dbf44593f63ef9627c2cbe85cffc5801305d273000ae8f387c1c284c95453ddd8c0915d83b3bf0c7f7fed") (async) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x9, 0x48100) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000100)) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xc, @raw_data="77f4add8ad8a4034dabb3823635b19e5ece73f8a9967cabc1934d31c631c645f618a7357171a7e6d5ef9283c96393983e51777a24e4bde6779ab2212065f60a582c722d81f924eac2cd557b720382fafdc1f0a506433950715887fafbb33a3d9c70335ec065c65686ebeb1d65b09355072e29a3408c041873bffa64ebd4210535a5d912bcb6a6a124bda9442000e393c70b3fd4b88de90f583217517210f50ea5236ad9f2b306e07f619af992cd3538a8eaca89f24b6a2869956da0bcd17c2c506fb8e4a921dfacb"}) (rerun: 64) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x7fffffffffffffff, 0x208240) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x0, 0x6}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x0) 09:32:14 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f00000000c0)={0x7, 'syz0\x00'}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x1a00, 0x1ff], 0x43}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xc, @raw_data="77f4add8ad8a4034dabb3823635b19e5ece73f8a9967cabc1934d31c631c645f618a7357171a7e6d5ef9283c96393983e51777a24e4bde6779ab2212065f60a582c722d81f924eac2cd557b720382fafdc1f0a506433950715887fafbb33a3d9c70335ec065c65686ebeb1d65b09355072e29a3408c041873bffa64ebd4210535a5d912bcb6a6a124bda9442000e393c70b3fd4b88de90f583217517210f50ea5236ad9f2b306e07f619af992cd3538a8eaca89f24b6a2869956da0bcd17c2c506fb8e4a921dfacb"}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xc, @raw_data="77f4add8ad8a4034dabb3823635b19e5ece73f8a9967cabc1934d31c631c645f618a7357171a7e6d5ef9283c96393983e51777a24e4bde6779ab2212065f60a582c722d81f924eac2cd557b720382fafdc1f0a506433950715887fafbb33a3d9c70335ec065c65686ebeb1d65b09355072e29a3408c041873bffa64ebd4210535a5d912bcb6a6a124bda9442000e393c70b3fd4b88de90f583217517210f50ea5236ad9f2b306e07f619af992cd3538a8eaca89f24b6a2869956da0bcd17c2c506fb8e4a921dfacb"}) (async) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x0) 09:32:14 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f00000000c0)={0x7, 'syz0\x00'}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x1a00, 0x1ff], 0x43}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x7fffffffffffffff, 0x208240) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x0, 0x6}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000001c0)={0x1, [0x100, 0x401823c0], 0x6}, 0x10) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)="cf12e215266aa11e33f774d9634bc6c0d3a48912ea54d42356b6d087d1517627ef4c8ffe454800d9994a547d76bdf59a9af6ab73a5f7ca159d6ffbef6f8e94a7e9b306fb31d0687d3c4bfac81cfd42a3ed5d7823d465b9853fa2be6ed9ad80c334a04c449a8b9e27e6e2051a39d44414f71adf31c8dcb7676c8c5cd464b53e51c1af2c1b") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0xffffffff, 0x1], 0x2}, 0x10) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x58f6}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x88}) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x0) 09:32:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x84c, 0x9, 0x10000, 0x80}}) 09:32:14 executing program 4: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f00000000c0)={0x7, 'syz0\x00'}) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x0, [0x1a00, 0x1ff], 0x43}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000001c0)={0x1, [0x100, 0x401823c0], 0x6}, 0x10) (async) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)="cf12e215266aa11e33f774d9634bc6c0d3a48912ea54d42356b6d087d1517627ef4c8ffe454800d9994a547d76bdf59a9af6ab73a5f7ca159d6ffbef6f8e94a7e9b306fb31d0687d3c4bfac81cfd42a3ed5d7823d465b9853fa2be6ed9ad80c334a04c449a8b9e27e6e2051a39d44414f71adf31c8dcb7676c8c5cd464b53e51c1af2c1b") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0xffffffff, 0x1], 0x2}, 0x10) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x58f6}) (async, rerun: 64) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x88}) (rerun: 64) 09:32:14 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1f, 0x80000) read$midi(r0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x400, 0x1, 0x1, 0xa95, 0x7ffd, 0x8, 0x1ff, 0x10001, 0x0, 0x0, 0x157, 0x2, 0x9, 0x15, 0x1, {0x41cd2465, 0x102}, 0x3f, 0x74}}) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$admmidi(&(0x7f0000000000), 0x7fffffffffffffff, 0x208240) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x0, 0x6}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x7fffffffffffffff, 0x208240) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x0, 0x6}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:14 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffd89) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xe05, 0x4) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xdffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1f, 0x80000) read$midi(r0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x400, 0x1, 0x1, 0xa95, 0x7ffd, 0x8, 0x1ff, 0x10001, 0x0, 0x0, 0x157, 0x2, 0x9, 0x15, 0x1, {0x41cd2465, 0x102}, 0x3f, 0x74}}) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, 0x0, 0x15) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000001c0)={0x1, [0x100, 0x401823c0], 0x6}, 0x10) (async) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000100)="cf12e215266aa11e33f774d9634bc6c0d3a48912ea54d42356b6d087d1517627ef4c8ffe454800d9994a547d76bdf59a9af6ab73a5f7ca159d6ffbef6f8e94a7e9b306fb31d0687d3c4bfac81cfd42a3ed5d7823d465b9853fa2be6ed9ad80c334a04c449a8b9e27e6e2051a39d44414f71adf31c8dcb7676c8c5cd464b53e51c1af2c1b") (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x8000, [0xffffffff, 0x1], 0x2}, 0x10) (async, rerun: 32) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x0, 0x58f6}) (async, rerun: 32) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x88}) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xe05, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xdffd, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0xb0, 0x6, 0x4, 0x100, 0x6, {0x77359400}, {0x4, 0x1, 0x0, 0x54, 0x3, 0x40, "0d2a2a9b"}, 0x8000, 0x1, {}, 0x2}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8441, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d00, &(0x7f0000000080)=0x32) 09:32:14 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1f, 0x80000) read$midi(r0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x400, 0x1, 0x1, 0xa95, 0x7ffd, 0x8, 0x1ff, 0x10001, 0x0, 0x0, 0x157, 0x2, 0x9, 0x15, 0x1, {0x41cd2465, 0x102}, 0x3f, 0x74}}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$sndmidi(&(0x7f0000000000), 0x1f, 0x80000) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x7, 0x400, 0x1, 0x1, 0xa95, 0x7ffd, 0x8, 0x1ff, 0x10001, 0x0, 0x0, 0x157, 0x2, 0x9, 0x15, 0x1, {0x41cd2465, 0x102}, 0x3f, 0x74}}) (async) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xe05, 0x4) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xdffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xe05, 0x4) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xdffd, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:14 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async, rerun: 64) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0xb0, 0x6, 0x4, 0x100, 0x6, {0x77359400}, {0x4, 0x1, 0x0, 0x54, 0x3, 0x40, "0d2a2a9b"}, 0x8000, 0x1, {}, 0x2}) (rerun: 64) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) (async, rerun: 32) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (rerun: 32) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x1, 0x7fff, 0x1, 0x1}) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:14 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@mmap={0xb0, 0x6, 0x4, 0x100, 0x6, {0x77359400}, {0x4, 0x1, 0x0, 0x54, 0x3, 0x40, "0d2a2a9b"}, 0x8000, 0x1, {}, 0x2}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x1, 0x7fff, 0x1, 0x1}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x10000) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x1, 0x7fff, 0x1, 0x1}) (async) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 2: syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x0, 0x1, 0x7fff, 0x1, 0x1}) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 09:32:14 executing program 2: syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x3ff, 0x48503) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) read$midi(r0, 0x0, 0x0) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_trigger_flush\x00'}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1e, 0x7, 0xe370, 0x401, 0x1220, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x15, &(0x7f0000000140)=""/21, 0x41100, 0x10, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x0, @name="4fd83cf897350ade8501b5370adbace0043fb100c048aa4b327afb38defef68a"}, 0x8, 0x9, 0xfcc3}) write$bt_hci(r0, 0x0, 0x15) 09:32:14 executing program 2: syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x3ff, 0x48503) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) read$midi(r0, 0x0, 0x0) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x0, @name="4fd83cf897350ade8501b5370adbace0043fb100c048aa4b327afb38defef68a"}, 0x8, 0x9, 0xfcc3}) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x0, @name="4fd83cf897350ade8501b5370adbace0043fb100c048aa4b327afb38defef68a"}, 0x8, 0x9, 0xfcc3}) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @sdr={0x30314142, 0x3969594c}}) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)={0x6, [0x8, 0xd0], 0x101}, 0x10) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0xd3, '\x00', &(0x7f0000000080)=0x80}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000600)={0x0, {0x8, 0x5}}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000003c0)) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000005c0)={0xb83f, 0x2, 0x8, 0x0, 0x1f, 0x4, 0x2}) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000580)) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000680)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x1f, 0x8a4b, 0x4, 0xd1d, 0x0, 0xfffffe01, 0x100, 0x6, 0x1, 0x5, 0x0, 0x40, 0x4, 0x40, 0x4, 0x2, 0x8, 0xce, 0x3, 0x7, 0x8, 0xfffffff8, 0x1, 0xdf, 0x4, 0x4, 0xfffffffa, 0x2, 0x1ff, 0x7f, 0x200]}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x5, 0xc, 0x4, 0x70000, 0x200, {0x0, 0xea60}, {0x5, 0x1, 0x24, 0xe0, 0x3f, 0x0, 'R0\bH'}, 0x6, 0x2, {&(0x7f00000002c0)=[{0xa8, 0x3, {&(0x7f0000000240)}, 0x800}, {0x5, 0x7f, {&(0x7f0000000280)}, 0x3}]}, 0x0, 0x0, r5}) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_trigger_flush\x00'}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1e, 0x7, 0xe370, 0x401, 0x1220, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x15, &(0x7f0000000140)=""/21, 0x41100, 0x10, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff]}, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_trigger_flush\x00'}, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1e, 0x7, 0xe370, 0x401, 0x1220, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x15, &(0x7f0000000140)=""/21, 0x41100, 0x10, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x3ff, 0x48503) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) read$midi(r0, 0x0, 0x0) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @sdr={0x30314142, 0x3969594c}}) (rerun: 32) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)={0x6, [0x8, 0xd0], 0x101}, 0x10) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0xd3, '\x00', &(0x7f0000000080)=0x80}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000600)={0x0, {0x8, 0x5}}) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000003c0)) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000005c0)={0xb83f, 0x2, 0x8, 0x0, 0x1f, 0x4, 0x2}) (async, rerun: 64) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000580)) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000680)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x1f, 0x8a4b, 0x4, 0xd1d, 0x0, 0xfffffe01, 0x100, 0x6, 0x1, 0x5, 0x0, 0x40, 0x4, 0x40, 0x4, 0x2, 0x8, 0xce, 0x3, 0x7, 0x8, 0xfffffff8, 0x1, 0xdf, 0x4, 0x4, 0xfffffffa, 0x2, 0x1ff, 0x7f, 0x200]}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x5, 0xc, 0x4, 0x70000, 0x200, {0x0, 0xea60}, {0x5, 0x1, 0x24, 0xe0, 0x3f, 0x0, 'R0\bH'}, 0x6, 0x2, {&(0x7f00000002c0)=[{0xa8, 0x3, {&(0x7f0000000240)}, 0x800}, {0x5, 0x7f, {&(0x7f0000000280)}, 0x3}]}, 0x0, 0x0, r5}) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x0, @name="4fd83cf897350ade8501b5370adbace0043fb100c048aa4b327afb38defef68a"}, 0x8, 0x9, 0xfcc3}) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x0, @name="4fd83cf897350ade8501b5370adbace0043fb100c048aa4b327afb38defef68a"}, 0x8, 0x9, 0xfcc3}) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_trigger_flush\x00'}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1e, 0x7, 0xe370, 0x401, 0x1220, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3f}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x15, &(0x7f0000000140)=""/21, 0x41100, 0x10, '\x00', r3, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r4, 0xffffffffffffffff]}, 0x80) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x1ff, "711971", 0x7, 0x6}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x7ff) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="7386f175bdd915d329fd4c94dce11524ea881e65c532347ce516b7db8cc8abc9115e262e294609cf6a83da69047e46a3caff2506ad343324a1b6c70c6320775eaa1e4c59") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xc4, [0x9, 0x4], 0x5}, 0x9) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x8000, @local, 0x4}, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1, {[0x800, 0x0, 0x7, 0x0, 0xf27e, 0xb71, 0x1f, 0x7fffffff]}}, 0x5c) r1 = socket(0x27, 0xa, 0x14000000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x8, "1f1dc8", 0x84, 0xc7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:14 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x9, @sdr={0x30314142, 0x3969594c}}) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)={0x6, [0x8, 0xd0], 0x101}, 0x10) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0xd3, '\x00', &(0x7f0000000080)=0x80}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000600)={0x0, {0x8, 0x5}}) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000003c0)) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000005c0)={0xb83f, 0x2, 0x8, 0x0, 0x1f, 0x4, 0x2}) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000580)) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async, rerun: 32) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 32) write$bt_hci(r5, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000680)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x1f, 0x8a4b, 0x4, 0xd1d, 0x0, 0xfffffe01, 0x100, 0x6, 0x1, 0x5, 0x0, 0x40, 0x4, 0x40, 0x4, 0x2, 0x8, 0xce, 0x3, 0x7, 0x8, 0xfffffff8, 0x1, 0xdf, 0x4, 0x4, 0xfffffffa, 0x2, 0x1ff, 0x7f, 0x200]}) (async) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000340)=@multiplanar_userptr={0x5, 0xc, 0x4, 0x70000, 0x200, {0x0, 0xea60}, {0x5, 0x1, 0x24, 0xe0, 0x3f, 0x0, 'R0\bH'}, 0x6, 0x2, {&(0x7f00000002c0)=[{0xa8, 0x3, {&(0x7f0000000240)}, 0x800}, {0x5, 0x7f, {&(0x7f0000000280)}, 0x3}]}, 0x0, 0x0, r5}) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x48503) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x7ff) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={0x2, 0x96, &(0x7f0000000040)=""/150}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000180)) write$bt_hci(r0, 0x0, 0x15) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="7386f175bdd915d329fd4c94dce11524ea881e65c532347ce516b7db8cc8abc9115e262e294609cf6a83da69047e46a3caff2506ad343324a1b6c70c6320775eaa1e4c59") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xc4, [0x9, 0x4], 0x5}, 0x9) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x8000, @local, 0x4}, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1, {[0x800, 0x0, 0x7, 0x0, 0xf27e, 0xb71, 0x1f, 0x7fffffff]}}, 0x5c) r1 = socket(0x27, 0xa, 0x14000000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x8, "1f1dc8", 0x84, 0xc7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="7386f175bdd915d329fd4c94dce11524ea881e65c532347ce516b7db8cc8abc9115e262e294609cf6a83da69047e46a3caff2506ad343324a1b6c70c6320775eaa1e4c59") (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xc4, [0x9, 0x4], 0x5}, 0x9) (async) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x8000, @local, 0x4}, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1, {[0x800, 0x0, 0x7, 0x0, 0xf27e, 0xb71, 0x1f, 0x7fffffff]}}, 0x5c) (async) socket(0x27, 0xa, 0x14000000) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x8, "1f1dc8", 0x84, 0xc7}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x1) write$bt_hci(r0, 0x0, 0x15) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={0x2, 0x96, &(0x7f0000000040)=""/150}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000180)) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) (rerun: 64) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x48503) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000000)=0x7ff) 09:32:14 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0xc1, 0x0, 0xffff, 0x1}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0xf41, 0x9, 0x11, "7d62505362674a029584ea3fde9ef1a43dcf7de241cdb00fd230b23db9048dda6aa7ecd4bb007ce3e5c9039311005451468a7cdaa97f73adb4d6332e", 0x29, "a28d865a78c80a05d9104551e704e4d5f92b7c24c34704317153dc371a32967627200cb22f25a556afd0f4c497f32ea77eaacb5780f5fcb793165055", 0x38}) 09:32:14 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="7386f175bdd915d329fd4c94dce11524ea881e65c532347ce516b7db8cc8abc9115e262e294609cf6a83da69047e46a3caff2506ad343324a1b6c70c6320775eaa1e4c59") setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xc4, [0x9, 0x4], 0x5}, 0x9) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x8000, @local, 0x4}, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1, {[0x800, 0x0, 0x7, 0x0, 0xf27e, 0xb71, 0x1f, 0x7fffffff]}}, 0x5c) r1 = socket(0x27, 0xa, 0x14000000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x8, "1f1dc8", 0x84, 0xc7}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000100)="7386f175bdd915d329fd4c94dce11524ea881e65c532347ce516b7db8cc8abc9115e262e294609cf6a83da69047e46a3caff2506ad343324a1b6c70c6320775eaa1e4c59") (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000001c0)={0xc4, [0x9, 0x4], 0x5}, 0x9) (async) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x8000, @local, 0x4}, {0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1, {[0x800, 0x0, 0x7, 0x0, 0xf27e, 0xb71, 0x1f, 0x7fffffff]}}, 0x5c) (async) socket(0x27, 0xa, 0x14000000) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x8, "1f1dc8", 0x84, 0xc7}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:14 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:14 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0xc1, 0x0, 0xffff, 0x1}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0xf41, 0x9, 0x11, "7d62505362674a029584ea3fde9ef1a43dcf7de241cdb00fd230b23db9048dda6aa7ecd4bb007ce3e5c9039311005451468a7cdaa97f73adb4d6332e", 0x29, "a28d865a78c80a05d9104551e704e4d5f92b7c24c34704317153dc371a32967627200cb22f25a556afd0f4c497f32ea77eaacb5780f5fcb793165055", 0x38}) 09:32:14 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000080)) read$midi(r0, 0x0, 0x0) 09:32:14 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={0x2, 0x96, &(0x7f0000000040)=""/150}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f0000000180)) write$bt_hci(r0, 0x0, 0x15) 09:32:14 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 64) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x103, 0x2, {0xc1, 0x0, 0xffff, 0x1}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0xf41, 0x9, 0x11, "7d62505362674a029584ea3fde9ef1a43dcf7de241cdb00fd230b23db9048dda6aa7ecd4bb007ce3e5c9039311005451468a7cdaa97f73adb4d6332e", 0x29, "a28d865a78c80a05d9104551e704e4d5f92b7c24c34704317153dc371a32967627200cb22f25a556afd0f4c497f32ea77eaacb5780f5fcb793165055", 0x38}) 09:32:14 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x1) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x33, 0x5, 0x9, 0x6}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000080)) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000080)) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8000000, 0x1, 0x1}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x800, 0xd76}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x4, 0x0}}) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @stop_pts=0x400}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3c8358787dbd33ad, @pix={0x200, 0x7f, 0x32435750, 0x5, 0x7971, 0x3, 0xc, 0x7ff, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0xb, 0x101, 0x0, {0x3a1, 0x4, 0x0, 0x6}}) ioctl$BLKRRPART(r2, 0x125f, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x1) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x33, 0x5, 0x9, 0x6}, 0x6) (rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10001, 0x1) (async) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000080)) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000080)) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8000000, 0x1, 0x1}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x800, 0xd76}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x4, 0x0}}) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @stop_pts=0x400}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3c8358787dbd33ad, @pix={0x200, 0x7f, 0x32435750, 0x5, 0x7971, 0x3, 0xc, 0x7ff, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0xb, 0x101, 0x0, {0x3a1, 0x4, 0x0, 0x6}}) ioctl$BLKRRPART(r2, 0x125f, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8000000, 0x1, 0x1}) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x800, 0xd76}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x4, 0x0}}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @stop_pts=0x400}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3c8358787dbd33ad, @pix={0x200, 0x7f, 0x32435750, 0x5, 0x7971, 0x3, 0xc, 0x7ff, 0x1, 0x2}}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0xb, 0x101, 0x0, {0x3a1, 0x4, 0x0, 0x6}}) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0xd6000, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x5, 0x81, 0x401, 0x4f424752, [0x2, 0x7], [0x70000000, 0xa3], 0x108}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000080)=0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x7fffffff, 0x7f], 0x2}, 0x10) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000040)={0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8000000, 0x1, 0x1}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x800, 0xd76}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x4, 0x0}}) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @stop_pts=0x400}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3c8358787dbd33ad, @pix={0x200, 0x7f, 0x32435750, 0x5, 0x7971, 0x3, 0xc, 0x7ff, 0x1, 0x2}}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0xb, 0x101, 0x0, {0x3a1, 0x4, 0x0, 0x6}}) ioctl$BLKRRPART(r2, 0x125f, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000100)={0x8000000, 0x1, 0x1}) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000000)={0x0, {0x800, 0xd76}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x4, 0x0}}) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000280)={0x1, 0x1, @stop_pts=0x400}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x3c8358787dbd33ad, @pix={0x200, 0x7f, 0x32435750, 0x5, 0x7971, 0x3, 0xc, 0x7ff, 0x1, 0x2}}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000080)) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0xb, 0x101, 0x0, {0x3a1, 0x4, 0x0, 0x6}}) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) (async) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x33, 0x5, 0x9, 0x6}, 0x6) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, 0x0, 0x15) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1100, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000200), 0x0, 0x2c8303) syz_open_dev$admmidi(&(0x7f0000000000), 0xc93, 0x100) syz_open_dev$admmidi(&(0x7f0000000080), 0x8, 0xc002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000001c0)=0x2) read$midi(r0, 0x0, 0x0) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x2, 0xb, 0x4, 0x20, 0x6, {0x77359400}, {0x5, 0xc, 0x8d, 0x4, 0x7, 0x80, "e77bca39"}, 0x7, 0x4, {}, 0x4, 0x0, r1}) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, "5da2aa", 0x69, 0x1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1100, 0x0) (async) r0 = syz_open_dev$amidi(&(0x7f0000000200), 0x0, 0x2c8303) syz_open_dev$admmidi(&(0x7f0000000000), 0xc93, 0x100) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0x8, 0xc002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000001c0)=0x2) (async) read$midi(r0, 0x0, 0x0) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x2, 0xb, 0x4, 0x20, 0x6, {0x77359400}, {0x5, 0xc, 0x8d, 0x4, 0x7, 0x80, "e77bca39"}, 0x7, 0x4, {}, 0x4, 0x0, r1}) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7de, 0x1, 0x6d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 1: openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1100, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000200), 0x0, 0x2c8303) syz_open_dev$admmidi(&(0x7f0000000000), 0xc93, 0x100) syz_open_dev$admmidi(&(0x7f0000000080), 0x8, 0xc002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000001c0)=0x2) read$midi(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x1100, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000200), 0x0, 0x2c8303) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0xc93, 0x100) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0x8, 0xc002) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f00000001c0)=0x2) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=""/190, 0xbe}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0xa, 0x7fff, 0xfffffbff, 0x840}) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000080), 0x4) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x2, 0xb, 0x4, 0x20, 0x6, {0x77359400}, {0x5, 0xc, 0x8d, 0x4, 0x7, 0x80, "e77bca39"}, 0x7, 0x4, {}, 0x4, 0x0, r1}) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x9c4f, 0x4, 0x1, 0xffffff81}) write$midi(r0, &(0x7f0000000080)="7459a03329eb007e7f5ab66def3997b183c96db7a3fb66bddb365e7c8b57d05cba215c86546bc44bef01fa5d967fd52b802055594f2e22dce30089b3793dbaf3d93545a76aebb5ab674f86eed867c04ecf4fd406c47840c4ee1297225577fdfe341b3ec1dab48a6808330b0eab9afe1e7f8d86dab318f7b6cd1c243ec4b55095e13d42bf594f0794829efd3e6a0389369b799dd21b943f321125deab19da5bb75af37b53f2149c60fce5d9f009e27e2ce93317986885", 0xb6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x101, 'M?\x00', 0x20, 0x80}) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x1, 0x5, 0x9, 0x1, 0xed0000}) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (fail_nth: 1) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7de, 0x1, 0x6d, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x64c341, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x9c4f, 0x4, 0x1, 0xffffff81}) (async) write$midi(r0, &(0x7f0000000080)="7459a03329eb007e7f5ab66def3997b183c96db7a3fb66bddb365e7c8b57d05cba215c86546bc44bef01fa5d967fd52b802055594f2e22dce30089b3793dbaf3d93545a76aebb5ab674f86eed867c04ecf4fd406c47840c4ee1297225577fdfe341b3ec1dab48a6808330b0eab9afe1e7f8d86dab318f7b6cd1c243ec4b55095e13d42bf594f0794829efd3e6a0389369b799dd21b943f321125deab19da5bb75af37b53f2149c60fce5d9f009e27e2ce93317986885", 0xb6) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x101, 'M?\x00', 0x20, 0x80}) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x1, 0x5, 0x9, 0x1, 0xed0000}) 09:32:15 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7de, 0x1, 0x6d, 0x0, 0x0}) (rerun: 32) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x64c341, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x64c341, 0x0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) (async) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) [ 3488.582705] FAULT_INJECTION: forcing a failure. [ 3488.582705] name failslab, interval 1, probability 0, space 0, times 0 [ 3488.601186] CPU: 1 PID: 29655 Comm: syz-executor.0 Not tainted 4.14.290-syzkaller #0 [ 3488.609082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3488.618434] Call Trace: [ 3488.621020] dump_stack+0x1b2/0x281 [ 3488.624650] should_fail.cold+0x10a/0x149 [ 3488.628805] should_failslab+0xd6/0x130 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x10000, 0x3, 0x1, 0xfffffffc, 0x3f, 0x4, 0x0, 0x401]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x15) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) [ 3488.632781] __kmalloc+0x2c1/0x400 [ 3488.636319] ? hci_sock_sendmsg+0x889/0x1d00 [ 3488.640732] hci_sock_sendmsg+0x889/0x1d00 [ 3488.644968] ? _kstrtoull+0x1f2/0x450 [ 3488.648772] ? aa_file_perm+0x2dd/0xab0 [ 3488.652758] ? hci_send_to_channel+0x200/0x200 [ 3488.657338] ? lock_acquire+0x170/0x3f0 [ 3488.661306] ? security_socket_sendmsg+0x83/0xb0 [ 3488.666057] ? hci_send_to_channel+0x200/0x200 [ 3488.670637] sock_sendmsg+0xb5/0x100 [ 3488.674351] sock_write_iter+0x22c/0x370 [ 3488.678404] ? sock_sendmsg+0x100/0x100 [ 3488.682378] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3488.687306] ? iov_iter_init+0xa6/0x1c0 [ 3488.691367] __vfs_write+0x44c/0x630 [ 3488.695082] ? kernel_read+0x110/0x110 [ 3488.698978] ? rw_verify_area+0xe1/0x2a0 [ 3488.703040] vfs_write+0x17f/0x4d0 [ 3488.706580] SyS_write+0xf2/0x210 [ 3488.710029] ? SyS_read+0x210/0x210 [ 3488.713652] ? __do_page_fault+0x159/0xad0 [ 3488.717883] ? do_syscall_64+0x4c/0x640 [ 3488.721845] ? SyS_read+0x210/0x210 [ 3488.725586] do_syscall_64+0x1d5/0x640 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (fail_nth: 2) 09:32:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x10000, 0x3, 0x1, 0xfffffffc, 0x3f, 0x4, 0x0, 0x401]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x10000, 0x3, 0x1, 0xfffffffc, 0x3f, 0x4, 0x0, 0x401]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x15) (async) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x4, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x9c4f, 0x4, 0x1, 0xffffff81}) (async) write$midi(r0, &(0x7f0000000080)="7459a03329eb007e7f5ab66def3997b183c96db7a3fb66bddb365e7c8b57d05cba215c86546bc44bef01fa5d967fd52b802055594f2e22dce30089b3793dbaf3d93545a76aebb5ab674f86eed867c04ecf4fd406c47840c4ee1297225577fdfe341b3ec1dab48a6808330b0eab9afe1e7f8d86dab318f7b6cd1c243ec4b55095e13d42bf594f0794829efd3e6a0389369b799dd21b943f321125deab19da5bb75af37b53f2149c60fce5d9f009e27e2ce93317986885", 0xb6) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x101, 'M?\x00', 0x20, 0x80}) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000180)={0x1, 0x5, 0x9, 0x1, 0xed0000}) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x64c341, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x64c341, 0x0) (async) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000080)) (async) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) (async) [ 3488.729457] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3488.734630] RIP: 0033:0x7f701b7ca209 [ 3488.738330] RSP: 002b:00007f701a13f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3488.746030] RAX: ffffffffffffffda RBX: 00007f701b8dcf60 RCX: 00007f701b7ca209 [ 3488.753288] RDX: 0000000000000016 RSI: 0000000020000040 RDI: 0000000000000004 [ 3488.760811] RBP: 00007f701a13f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3488.768062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3488.775323] R13: 00007ffcbd6829bf R14: 00007f701a13f300 R15: 0000000000022000 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x4, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x4, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x602000) read$midi(r0, 0x0, 0x0) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x9, 0xfd0, r2, 0x0, &(0x7f00000001c0)={0x980906, 0x9, '\x00', @p_u32=&(0x7f0000000180)=0x6}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x80000000, [0x800, 0x7], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x200, 0x6, 0x9, 0x8, 0x1, 0x1, 0x6, 0x4}}) socket(0x8, 0x1, 0x80000000) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011a201200100f9568615e8ab883006a42695b0a12b1cf9b8063a19adc36572f40603ca03c66026df55b7d1813a053359fbedc74e3402508f144d0"], 0x16) 09:32:15 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x10000, 0x3, 0x1, 0xfffffffc, 0x3f, 0x4, 0x0, 0x401]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x10000, 0x3, 0x1, 0xfffffffc, 0x3f, 0x4, 0x0, 0x401]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x15) (async) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109440, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000100)) write$bt_hci(r1, 0x0, 0x0) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x0, 0x0, 0x8, 0x47}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, 0x0, 0x15) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x9, 0xfd0, r2, 0x0, &(0x7f00000001c0)={0x980906, 0x9, '\x00', @p_u32=&(0x7f0000000180)=0x6}}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x80000000, [0x800, 0x7], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x200, 0x6, 0x9, 0x8, 0x1, 0x1, 0x6, 0x4}}) (async) socket(0x8, 0x1, 0x80000000) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011a201200100f9568615e8ab883006a42695b0a12b1cf9b8063a19adc36572f40603ca03c66026df55b7d1813a053359fbedc74e3402508f144d0"], 0x16) 09:32:15 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109440, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async, rerun: 64) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000100)) (rerun: 64) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 32) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x0, 0x0, 0x8, 0x47}, 0x6) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x15) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x602000) (async) read$midi(r0, 0x0, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"97fc2f2f1e0e9244974b498cc516ad605e4bd657d15a902afa5d1f99909c", 0x20, 0x2, 0x401, 0x2c7d, 0x2, 0x8, 0x9, 0x1, [0xa7, 0xfffffff8, 0xfff, 0x3, 0x80000000, 0xff, 0x0, 0x77, 0x117, 0x10001, 0x3, 0x3, 0x6c, 0x80, 0x1, 0xb5f, 0x7, 0x7, 0x3]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x9, 0xfd0, r2, 0x0, &(0x7f00000001c0)={0x980906, 0x9, '\x00', @p_u32=&(0x7f0000000180)=0x6}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x80000000, [0x800, 0x7], 0x7}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x200, 0x6, 0x9, 0x8, 0x1, 0x1, 0x6, 0x4}}) socket(0x8, 0x1, 0x80000000) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011a201200100f9568615e8ab883006a42695b0a12b1cf9b8063a19adc36572f40603ca03c66026df55b7d1813a053359fbedc74e3402508f144d0"], 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x9, 0xfd0, r2, 0x0, &(0x7f00000001c0)={0x980906, 0x9, '\x00', @p_u32=&(0x7f0000000180)=0x6}}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x80000000, [0x800, 0x7], 0x7}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0x200, 0x6, 0x9, 0x8, 0x1, 0x1, 0x6, 0x4}}) (async) socket(0x8, 0x1, 0x80000000) (async) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="011a201200100f9568615e8ab883006a42695b0a12b1cf9b8063a19adc36572f40603ca03c66026df55b7d1813a053359fbedc74e3402508f144d0"], 0x16) (async) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x4, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x4, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async, rerun: 64) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"97fc2f2f1e0e9244974b498cc516ad605e4bd657d15a902afa5d1f99909c", 0x20, 0x2, 0x401, 0x2c7d, 0x2, 0x8, 0x9, 0x1, [0xa7, 0xfffffff8, 0xfff, 0x3, 0x80000000, 0xff, 0x0, 0x77, 0x117, 0x10001, 0x3, 0x3, 0x6c, 0x80, 0x1, 0xb5f, 0x7, 0x7, 0x3]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xfff, 0x3f, 0x1, 0x1, 0xd433, 0xfffffffffffffff9, 0x17, 0x1}}) 09:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x602000) (async) read$midi(r0, 0x0, 0x0) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"97fc2f2f1e0e9244974b498cc516ad605e4bd657d15a902afa5d1f99909c", 0x20, 0x2, 0x401, 0x2c7d, 0x2, 0x8, 0x9, 0x1, [0xa7, 0xfffffff8, 0xfff, 0x3, 0x80000000, 0xff, 0x0, 0x77, 0x117, 0x10001, 0x3, 0x3, 0x6c, 0x80, 0x1, 0xb5f, 0x7, 0x7, 0x3]}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109440, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000100)) (async) write$bt_hci(r1, 0x0, 0x0) (async) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x0, 0x0, 0x8, 0x47}, 0x6) (async, rerun: 32) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(0xffffffffffffffff, 0x0, 0x15) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a20d2525714e060bc1512b1f6a37f9e7827bc047f13ed577a302963703f4d557673d0a19a02fff5000000804d2a93d6516410982bfb8a2612cfa80cace178bde90cd24d6763d7d5c8ed2f53af40981c598b1a7d639572ddf9ac8a97dc3f39fa11024666d94a2af77337602f31878c3c7b8e3eb6e72c2af21313c9c1fbd3ff6e7d0b717d796c46c32f44afa5d6164279"], 0x16) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xfff, 0x3f, 0x1, 0x1, 0xd433, 0xfffffffffffffff9, 0x17, 0x1}}) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x2}}}, 0x8) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="9f59b364636293efab7a1f4e91e96220b5c45f1f58d2c5b2fdfe4a44995e76") write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x9}, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r1, 0x0, 0x0) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @bt={0xfff, 0x3f, 0x1, 0x1, 0xd433, 0xfffffffffffffff9, 0x17, 0x1}}) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x2}}}, 0x8) (async, rerun: 32) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="9f59b364636293efab7a1f4e91e96220b5c45f1f58d2c5b2fdfe4a44995e76") (rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a20d2525714e060bc1512b1f6a37f9e7827bc047f13ed577a302963703f4d557673d0a19a02fff5000000804d2a93d6516410982bfb8a2612cfa80cace178bde90cd24d6763d7d5c8ed2f53af40981c598b1a7d639572ddf9ac8a97dc3f39fa11024666d94a2af77337602f31878c3c7b8e3eb6e72c2af21313c9c1fbd3ff6e7d0b717d796c46c32f44afa5d6164279"], 0x16) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x6, 0x0, 0x0, 0x2, 0x0}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x7, @raw_data="ef8d94046fb8c8219c55fccfe71d91ce5f04588d6e8d99f5e7960c025277189d0fafa1de885acb12a69813cf55a30731c4f276095728c675b832ec2446889db76d8e7a9b9cabd531a488f8b37b4777faac7bf30a5e295493865524735d1adb67f1c97cdcc63a050e297ff8bb8a91ef25cc2db970b236ea693fb0f10cf8cd5d3756fb93309adf3b108e5868de54651842f35adad16648900d1fa2d8387690dd8ede70fa6bc9583995ba4bd2db6014684c17695a6097a00957c29ed3f56493b25b99ac591eeeed37a2"}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000340)={0x0, {0x0, 0x6}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x60342, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000300)) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)={0x1, @write_link_policy={{0x80d, 0x4}, {0xc8, 0x2}}}, 0x8) (async) ioctl$sock_bt_hci(r1, 0x400448e3, &(0x7f0000000040)="9f59b364636293efab7a1f4e91e96220b5c45f1f58d2c5b2fdfe4a44995e76") (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:15 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x6, 0x0, 0x0, 0x2, 0x0}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x7, @raw_data="ef8d94046fb8c8219c55fccfe71d91ce5f04588d6e8d99f5e7960c025277189d0fafa1de885acb12a69813cf55a30731c4f276095728c675b832ec2446889db76d8e7a9b9cabd531a488f8b37b4777faac7bf30a5e295493865524735d1adb67f1c97cdcc63a050e297ff8bb8a91ef25cc2db970b236ea693fb0f10cf8cd5d3756fb93309adf3b108e5868de54651842f35adad16648900d1fa2d8387690dd8ede70fa6bc9583995ba4bd2db6014684c17695a6097a00957c29ed3f56493b25b99ac591eeeed37a2"}) (async) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000340)={0x0, {0x0, 0x6}}) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x60342, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000300)) 09:32:15 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x9}, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x9}, 0x6) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4}, 0x6) (async) 09:32:15 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "d474bb35e5b248898d43714b0da0e30aab5fced17c919e4951ac760826a6af40", 0xd85, 0xffffffe1, 0x100, 0x772, 0x1}) r3 = socket(0x22, 0x5, 0x8) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) socket(0x0, 0x3, 0x8) 09:32:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a20d2525714e060bc1512b1f6a37f9e7827bc047f13ed577a302963703f4d557673d0a19a02fff5000000804d2a93d6516410982bfb8a2612cfa80cace178bde90cd24d6763d7d5c8ed2f53af40981c598b1a7d639572ddf9ac8a97dc3f39fa11024666d94a2af77337602f31878c3c7b8e3eb6e72c2af21313c9c1fbd3ff6e7d0b717d796c46c32f44afa5d6164279"], 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a20d2525714e060bc1512b1f6a37f9e7827bc047f13ed577a302963703f4d557673d0a19a02fff5000000804d2a93d6516410982bfb8a2612cfa80cace178bde90cd24d6763d7d5c8ed2f53af40981c598b1a7d639572ddf9ac8a97dc3f39fa11024666d94a2af77337602f31878c3c7b8e3eb6e72c2af21313c9c1fbd3ff6e7d0b717d796c46c32f44afa5d6164279"], 0x16) (async) 09:32:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x9}, 0x6) (async) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r1, 0x0, 0x0) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "d474bb35e5b248898d43714b0da0e30aab5fced17c919e4951ac760826a6af40", 0xd85, 0xffffffe1, 0x100, 0x772, 0x1}) r3 = socket(0x22, 0x5, 0x8) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) socket(0x0, 0x3, 0x8) 09:32:16 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x6, 0x0, 0x0, 0x2, 0x0}}) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x7, @raw_data="ef8d94046fb8c8219c55fccfe71d91ce5f04588d6e8d99f5e7960c025277189d0fafa1de885acb12a69813cf55a30731c4f276095728c675b832ec2446889db76d8e7a9b9cabd531a488f8b37b4777faac7bf30a5e295493865524735d1adb67f1c97cdcc63a050e297ff8bb8a91ef25cc2db970b236ea693fb0f10cf8cd5d3756fb93309adf3b108e5868de54651842f35adad16648900d1fa2d8387690dd8ede70fa6bc9583995ba4bd2db6014684c17695a6097a00957c29ed3f56493b25b99ac591eeeed37a2"}) (async) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000200)) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000340)={0x0, {0x0, 0x6}}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x60342, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000300)) 09:32:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0xf, 0x4, 0xe) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffda4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a2012004200000000000000000000000000000000c1c01975ad3bcd018edf4d857949859bda4be307c3403b0376682706698fef7dd7296cad807c2220e2c10462756132e35bbe51f5b123a89c86e55e157618de07cb2438139a7766526aa931db71"], 0x16) 09:32:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:16 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @raw_data="ba0d705638d485914ff321b34fc058ee6e39fc477bdb3d8f3597122ab31bf867a8ae3a4b51cb63c8ea409917a6fef85bd507ac13b88c7e5c7181481729333ab54f9579d42d449cbb06358ab6214ced3b23d645fbe5a32aaffbcc38d669c0a8008b9cfa1da11a870ed63e5e5685530ed5ad904e98d6f27e6cca6c00a4acd11fae44fd1f2c1a3cba503a29763fbee8abe7717a64b8fa09cb8240418ddf62a1032266a9433164d78fa360afea3b837601257c02b68fef8a956595bd5d00ca8151a43d5eaecbd48e9d73"}) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000100)={0x0, 0x3, "d474bb35e5b248898d43714b0da0e30aab5fced17c919e4951ac760826a6af40", 0xd85, 0xffffffe1, 0x100, 0x772, 0x1}) (async) r3 = socket(0x22, 0x5, 0x8) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x3}, 0x6) (async) socket(0x0, 0x3, 0x8) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) 09:32:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:16 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @raw_data="ba0d705638d485914ff321b34fc058ee6e39fc477bdb3d8f3597122ab31bf867a8ae3a4b51cb63c8ea409917a6fef85bd507ac13b88c7e5c7181481729333ab54f9579d42d449cbb06358ab6214ced3b23d645fbe5a32aaffbcc38d669c0a8008b9cfa1da11a870ed63e5e5685530ed5ad904e98d6f27e6cca6c00a4acd11fae44fd1f2c1a3cba503a29763fbee8abe7717a64b8fa09cb8240418ddf62a1032266a9433164d78fa360afea3b837601257c02b68fef8a956595bd5d00ca8151a43d5eaecbd48e9d73"}) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @raw_data="ba0d705638d485914ff321b34fc058ee6e39fc477bdb3d8f3597122ab31bf867a8ae3a4b51cb63c8ea409917a6fef85bd507ac13b88c7e5c7181481729333ab54f9579d42d449cbb06358ab6214ced3b23d645fbe5a32aaffbcc38d669c0a8008b9cfa1da11a870ed63e5e5685530ed5ad904e98d6f27e6cca6c00a4acd11fae44fd1f2c1a3cba503a29763fbee8abe7717a64b8fa09cb8240418ddf62a1032266a9433164d78fa360afea3b837601257c02b68fef8a956595bd5d00ca8151a43d5eaecbd48e9d73"}) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) (async) 09:32:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket(0xf, 0x4, 0xe) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffda4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a2012004200000000000000000000000000000000c1c01975ad3bcd018edf4d857949859bda4be307c3403b0376682706698fef7dd7296cad807c2220e2c10462756132e35bbe51f5b123a89c86e55e157618de07cb2438139a7766526aa931db71"], 0x16) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:16 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @raw_data="ba0d705638d485914ff321b34fc058ee6e39fc477bdb3d8f3597122ab31bf867a8ae3a4b51cb63c8ea409917a6fef85bd507ac13b88c7e5c7181481729333ab54f9579d42d449cbb06358ab6214ced3b23d645fbe5a32aaffbcc38d669c0a8008b9cfa1da11a870ed63e5e5685530ed5ad904e98d6f27e6cca6c00a4acd11fae44fd1f2c1a3cba503a29763fbee8abe7717a64b8fa09cb8240418ddf62a1032266a9433164d78fa360afea3b837601257c02b68fef8a956595bd5d00ca8151a43d5eaecbd48e9d73"}) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, @raw_data="ba0d705638d485914ff321b34fc058ee6e39fc477bdb3d8f3597122ab31bf867a8ae3a4b51cb63c8ea409917a6fef85bd507ac13b88c7e5c7181481729333ab54f9579d42d449cbb06358ab6214ced3b23d645fbe5a32aaffbcc38d669c0a8008b9cfa1da11a870ed63e5e5685530ed5ad904e98d6f27e6cca6c00a4acd11fae44fd1f2c1a3cba503a29763fbee8abe7717a64b8fa09cb8240418ddf62a1032266a9433164d78fa360afea3b837601257c02b68fef8a956595bd5d00ca8151a43d5eaecbd48e9d73"}) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000000)) (async) 09:32:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) (async) 09:32:16 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xe, 0xd47, 0xffffffff, 0x800}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000180)) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1003, 0x4}, 0x6) write$bt_hci(r1, 0x0, 0x15) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x800, 0x4) 09:32:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0xf, 0x4, 0xe) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffda4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a2012004200000000000000000000000000000000c1c01975ad3bcd018edf4d857949859bda4be307c3403b0376682706698fef7dd7296cad807c2220e2c10462756132e35bbe51f5b123a89c86e55e157618de07cb2438139a7766526aa931db71"], 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0xf, 0x4, 0xe) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffda4) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a2012004200000000000000000000000000000000c1c01975ad3bcd018edf4d857949859bda4be307c3403b0376682706698fef7dd7296cad807c2220e2c10462756132e35bbe51f5b123a89c86e55e157618de07cb2438139a7766526aa931db71"], 0x16) (async) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:16 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xe, 0xd47, 0xffffffff, 0x800}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000180)) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1003, 0x4}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x800, 0x4) 09:32:16 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x10000, 0x3, 0x1, 0xfffffffc, 0x3f, 0x4, 0x0, 0x401]}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x15) 09:32:16 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7, 0x58, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x1f, 0x6, 0x2, 0x6, 0x401, 0x4, 0x4, 0x0, 0x8001, 0x4, 0x0, 0x4, 0x80000000, 0x80, 0x7, 0x3, 0x6, 0x101, 0x7ff, 0x7fff, 0x1, 0x800, 0x1, 0x5, 0x10001]}) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) r2 = syz_open_dev$vivid(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000340)={0x0, @frame_sync}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0x1, 0x35, 0x2005, 0x4, 0x3, 0xd, 0x0, 0x5}}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @vbi={0x6, 0xc3740000, 0x800, 0x32314d56, [0xd9, 0x100], [0x8, 0x7], 0x1}}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000300)={{0x1, @addr=0x7fffffff}, 0x8, 0x10001, 0x1}) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x7, 0xd03) read$midi(r0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x1) syz_open_dev$admmidi(&(0x7f00000000c0), 0x1f, 0x200000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) 09:32:16 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (fail_nth: 1) 09:32:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0xfa, 0x1f], 0xddf}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x3, {0xe5d, 0x5a, 0x3, 0x7}}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011a20127800000600000006124714793dff7142b1cf9b"], 0x16) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:16 executing program 5: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xe, 0xd47, 0xffffffff, 0x800}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000180)) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x1003, 0x4}, 0x6) write$bt_hci(r1, 0x0, 0x15) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=0x800, 0x4) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x7, 0xd03) read$midi(r0, 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x1) syz_open_dev$admmidi(&(0x7f00000000c0), 0x1f, 0x200000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) syz_open_dev$amidi(&(0x7f0000000040), 0x7, 0xd03) (async) read$midi(r0, 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x1) (async) syz_open_dev$admmidi(&(0x7f00000000c0), 0x1f, 0x200000) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) (async) 09:32:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffba, 0x1}, 0xfffffffffffffdc5) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xa) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000140)=0x4) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES64=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x1, 0x6, 0x5, 0x413}}) r4 = socket(0x1d, 0x4, 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "6f29cf", 0x2, 0x7}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x7, 0xd03) read$midi(r0, 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x8000, 0x1) syz_open_dev$admmidi(&(0x7f00000000c0), 0x1f, 0x200000) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) 09:32:16 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffba, 0x1}, 0xfffffffffffffdc5) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xa) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000140)=0x4) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES64=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x1, 0x6, 0x5, 0x413}}) (async) r4 = socket(0x1d, 0x4, 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "6f29cf", 0x2, 0x7}) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) 09:32:16 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x678cc) [ 3489.535879] FAULT_INJECTION: forcing a failure. [ 3489.535879] name failslab, interval 1, probability 0, space 0, times 0 [ 3489.558519] CPU: 1 PID: 29960 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 3489.566414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3489.575749] Call Trace: [ 3489.578316] dump_stack+0x1b2/0x281 [ 3489.581924] should_fail.cold+0x10a/0x149 [ 3489.586054] should_failslab+0xd6/0x130 [ 3489.590044] kmem_cache_alloc_node+0x54/0x410 [ 3489.594533] __alloc_skb+0x5c/0x510 [ 3489.598137] create_monitor_ctrl_open+0x130/0x630 [ 3489.602954] ? hci_sock_setsockopt+0x5b0/0x5b0 [ 3489.607516] ? security_capable+0x88/0xb0 [ 3489.611653] hci_sock_ioctl+0x549/0x6c0 [ 3489.615604] ? hci_sock_sendmsg+0x1d00/0x1d00 [ 3489.620078] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3489.624981] ? __handle_mm_fault+0x80f/0x4620 [ 3489.629454] ? SyS_write+0x1b7/0x210 [ 3489.633151] sock_ioctl+0x2cc/0x4c0 [ 3489.636771] ? sock_release+0x1e0/0x1e0 [ 3489.640721] do_vfs_ioctl+0x75a/0xff0 [ 3489.644503] ? lock_acquire+0x170/0x3f0 [ 3489.648450] ? ioctl_preallocate+0x1a0/0x1a0 [ 3489.652835] ? __fget+0x265/0x3e0 [ 3489.656265] ? do_vfs_ioctl+0xff0/0xff0 [ 3489.660216] ? security_file_ioctl+0x83/0xb0 [ 3489.664603] SyS_ioctl+0x7f/0xb0 [ 3489.667946] ? do_vfs_ioctl+0xff0/0xff0 [ 3489.671902] do_syscall_64+0x1d5/0x640 [ 3489.675786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3489.680951] RIP: 0033:0x7f5b10276209 [ 3489.684638] RSP: 002b:00007f5b0ebeb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3489.692322] RAX: ffffffffffffffda RBX: 00007f5b10388f60 RCX: 00007f5b10276209 [ 3489.699569] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000005 [ 3489.706819] RBP: 00007f5b0ebeb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3489.714066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3489.721316] R13: 00007ffe8528724f R14: 00007f5b0ebeb300 R15: 0000000000022000 09:32:17 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7, 0x58, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x1f, 0x6, 0x2, 0x6, 0x401, 0x4, 0x4, 0x0, 0x8001, 0x4, 0x0, 0x4, 0x80000000, 0x80, 0x7, 0x3, 0x6, 0x101, 0x7ff, 0x7fff, 0x1, 0x800, 0x1, 0x5, 0x10001]}) (async) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) (async) r2 = syz_open_dev$vivid(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000340)={0x0, @frame_sync}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0x1, 0x35, 0x2005, 0x4, 0x3, 0xd, 0x0, 0x5}}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @vbi={0x6, 0xc3740000, 0x800, 0x32314d56, [0xd9, 0x100], [0x8, 0x7], 0x1}}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000300)={{0x1, @addr=0x7fffffff}, 0x8, 0x10001, 0x1}) 09:32:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffba, 0x1}, 0xfffffffffffffdc5) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xa) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000140)=0x4) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES64=r0], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x1, 0x6, 0x5, 0x413}}) r4 = socket(0x1d, 0x4, 0x9) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "6f29cf", 0x2, 0x7}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffba, 0x1}, 0xfffffffffffffdc5) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0xa) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x42200, 0x0) (async) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000140)=0x4) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES64=r0], 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0x1, 0x6, 0x5, 0x413}}) (async) socket(0x1d, 0x4, 0x9) (async) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x0, 0x4, "6f29cf", 0x2, 0x7}) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) (async) 09:32:17 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x678cc) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x678cc) (async) 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) (async) 09:32:17 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0xfa, 0x1f], 0xddf}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x3, {0xe5d, 0x5a, 0x3, 0x7}}) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011a20127800000600000006124714793dff7142b1cf9b"], 0x16) 09:32:17 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (fail_nth: 2) 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="ab1c0b466a9e521cee1c1f3b8ab8c9c8d19b4e3f13387fa689cd83d2df7c8ff614eb828cca3bbd3731f147e49deba6507a6c49c76b244f23b0727defcf904bdb09ada998c64292b8af62e03833636191f3fc646576dbb6ebd527e956c8eef2b98535f55f7b090c100cbb65f8f28c1360734a7259f2adbf43399ecc17041c1b0f7145b8ab88f31da1eec83c5914ef7c1fc777609f4f70268d4252938799dbd5bee9ddd4972ec7") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) [ 3490.329438] FAULT_INJECTION: forcing a failure. [ 3490.329438] name failslab, interval 1, probability 0, space 0, times 0 [ 3490.351571] CPU: 1 PID: 29976 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 3490.359466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3490.368837] Call Trace: [ 3490.371436] dump_stack+0x1b2/0x281 [ 3490.375056] should_fail.cold+0x10a/0x149 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="ab1c0b466a9e521cee1c1f3b8ab8c9c8d19b4e3f13387fa689cd83d2df7c8ff614eb828cca3bbd3731f147e49deba6507a6c49c76b244f23b0727defcf904bdb09ada998c64292b8af62e03833636191f3fc646576dbb6ebd527e956c8eef2b98535f55f7b090c100cbb65f8f28c1360734a7259f2adbf43399ecc17041c1b0f7145b8ab88f31da1eec83c5914ef7c1fc777609f4f70268d4252938799dbd5bee9ddd4972ec7") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="ab1c0b466a9e521cee1c1f3b8ab8c9c8d19b4e3f13387fa689cd83d2df7c8ff614eb828cca3bbd3731f147e49deba6507a6c49c76b244f23b0727defcf904bdb09ada998c64292b8af62e03833636191f3fc646576dbb6ebd527e956c8eef2b98535f55f7b090c100cbb65f8f28c1360734a7259f2adbf43399ecc17041c1b0f7145b8ab88f31da1eec83c5914ef7c1fc777609f4f70268d4252938799dbd5bee9ddd4972ec7") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="ab1c0b466a9e521cee1c1f3b8ab8c9c8d19b4e3f13387fa689cd83d2df7c8ff614eb828cca3bbd3731f147e49deba6507a6c49c76b244f23b0727defcf904bdb09ada998c64292b8af62e03833636191f3fc646576dbb6ebd527e956c8eef2b98535f55f7b090c100cbb65f8f28c1360734a7259f2adbf43399ecc17041c1b0f7145b8ab88f31da1eec83c5914ef7c1fc777609f4f70268d4252938799dbd5bee9ddd4972ec7") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="ab1c0b466a9e521cee1c1f3b8ab8c9c8d19b4e3f13387fa689cd83d2df7c8ff614eb828cca3bbd3731f147e49deba6507a6c49c76b244f23b0727defcf904bdb09ada998c64292b8af62e03833636191f3fc646576dbb6ebd527e956c8eef2b98535f55f7b090c100cbb65f8f28c1360734a7259f2adbf43399ecc17041c1b0f7145b8ab88f31da1eec83c5914ef7c1fc777609f4f70268d4252938799dbd5bee9ddd4972ec7") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) [ 3490.379201] should_failslab+0xd6/0x130 [ 3490.383175] kmem_cache_alloc_node_trace+0x58/0x400 [ 3490.388192] __kmalloc_node_track_caller+0x38/0x70 [ 3490.393120] __alloc_skb+0x96/0x510 [ 3490.396830] create_monitor_ctrl_open+0x130/0x630 [ 3490.401666] ? hci_sock_setsockopt+0x5b0/0x5b0 [ 3490.406242] ? security_capable+0x88/0xb0 [ 3490.410390] hci_sock_ioctl+0x549/0x6c0 [ 3490.414363] ? hci_sock_sendmsg+0x1d00/0x1d00 [ 3490.418853] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3490.423778] ? __handle_mm_fault+0x80f/0x4620 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0xfffffffffffffc59) write$bt_hci(r0, 0x0, 0x15) 09:32:17 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0xfffffffffffffc59) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0xfffffffffffffc59) (async) write$bt_hci(r0, 0x0, 0x15) (async) [ 3490.428267] ? SyS_write+0x1b7/0x210 [ 3490.432002] sock_ioctl+0x2cc/0x4c0 [ 3490.435625] ? sock_release+0x1e0/0x1e0 [ 3490.439603] do_vfs_ioctl+0x75a/0xff0 [ 3490.443413] ? lock_acquire+0x170/0x3f0 [ 3490.447402] ? ioctl_preallocate+0x1a0/0x1a0 [ 3490.451811] ? __fget+0x265/0x3e0 [ 3490.455264] ? do_vfs_ioctl+0xff0/0xff0 [ 3490.459241] ? security_file_ioctl+0x83/0xb0 [ 3490.463651] SyS_ioctl+0x7f/0xb0 [ 3490.467018] ? do_vfs_ioctl+0xff0/0xff0 [ 3490.470993] do_syscall_64+0x1d5/0x640 [ 3490.474883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3490.480063] RIP: 0033:0x7f5b10276209 [ 3490.483770] RSP: 002b:00007f5b0ebeb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3490.491475] RAX: ffffffffffffffda RBX: 00007f5b10388f60 RCX: 00007f5b10276209 [ 3490.498819] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000005 [ 3490.506072] RBP: 00007f5b0ebeb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3490.513330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3490.520684] R13: 00007ffe8528724f R14: 00007f5b0ebeb300 R15: 0000000000022000 09:32:18 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0x7, 0x58, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x1f, 0x6, 0x2, 0x6, 0x401, 0x4, 0x4, 0x0, 0x8001, 0x4, 0x0, 0x4, 0x80000000, 0x80, 0x7, 0x3, 0x6, 0x101, 0x7ff, 0x7fff, 0x1, 0x800, 0x1, 0x5, 0x10001]}) r1 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) (async) r2 = syz_open_dev$vivid(&(0x7f0000000240), 0x2, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000340)={0x0, @frame_sync}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0x1, 0x35, 0x2005, 0x4, 0x3, 0xd, 0x0, 0x5}}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000180)) (async, rerun: 32) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x3, @vbi={0x6, 0xc3740000, 0x800, 0x32314d56, [0xd9, 0x100], [0x8, 0x7], 0x1}}) (async, rerun: 32) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000300)={{0x1, @addr=0x7fffffff}, 0x8, 0x10001, 0x1}) 09:32:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb, 0x3}, 0xfffffffffffffc59) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:18 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x10000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x28400, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) 09:32:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0xfa, 0x1f], 0xddf}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x102, 0x3, {0xe5d, 0x5a, 0x3, 0x7}}) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="011a20127800000600000006124714793dff7142b1cf9b"], 0x16) 09:32:18 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 64) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x678cc) (rerun: 64) 09:32:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (fail_nth: 3) 09:32:18 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x10000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x28400, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) [ 3491.237305] FAULT_INJECTION: forcing a failure. [ 3491.237305] name failslab, interval 1, probability 0, space 0, times 0 [ 3491.248786] CPU: 0 PID: 30040 Comm: syz-executor.3 Not tainted 4.14.290-syzkaller #0 [ 3491.256665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3491.266014] Call Trace: [ 3491.268601] dump_stack+0x1b2/0x281 [ 3491.272233] should_fail.cold+0x10a/0x149 [ 3491.276407] should_failslab+0xd6/0x130 [ 3491.280468] kmem_cache_alloc+0x40/0x3c0 [ 3491.284523] skb_clone+0x126/0x9a0 [ 3491.288048] hci_send_to_channel+0x135/0x200 [ 3491.292437] hci_sock_ioctl+0x56b/0x6c0 [ 3491.296392] ? hci_sock_sendmsg+0x1d00/0x1d00 [ 3491.300869] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 3491.305778] ? SyS_write+0x1b7/0x210 [ 3491.309471] sock_ioctl+0x2cc/0x4c0 [ 3491.313078] ? sock_release+0x1e0/0x1e0 [ 3491.317033] do_vfs_ioctl+0x75a/0xff0 [ 3491.320816] ? lock_acquire+0x170/0x3f0 [ 3491.324795] ? ioctl_preallocate+0x1a0/0x1a0 [ 3491.329182] ? __fget+0x265/0x3e0 [ 3491.332615] ? do_vfs_ioctl+0xff0/0xff0 [ 3491.336568] ? security_file_ioctl+0x83/0xb0 [ 3491.340957] SyS_ioctl+0x7f/0xb0 [ 3491.344300] ? do_vfs_ioctl+0xff0/0xff0 [ 3491.348255] do_syscall_64+0x1d5/0x640 [ 3491.352125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3491.357291] RIP: 0033:0x7f5b10276209 [ 3491.360992] RSP: 002b:00007f5b0ebeb168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3491.368689] RAX: ffffffffffffffda RBX: 00007f5b10388f60 RCX: 00007f5b10276209 [ 3491.375947] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000005 09:32:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x122a, @rand_addr=' \x01\x00', 0x3}, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0xffffffffffffffff, {[0x100, 0xa68, 0x4, 0x8, 0xba9, 0x7, 0x7fff, 0x8]}}, 0x5c) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x3, 0x0, [0xe90b, 0x7ff, 0x7, 0x4, 0x31ac6e93, 0x1, 0x4, 0x3]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:18 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x5, 0x640000) syz_open_dev$amidi(&(0x7f0000000080), 0x4, 0x400900) syz_open_dev$admmidi(&(0x7f0000000000), 0x7, 0x101402) read$midi(r0, 0x0, 0x0) 09:32:18 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x5, 0x640000) (async) syz_open_dev$amidi(&(0x7f0000000080), 0x4, 0x400900) syz_open_dev$admmidi(&(0x7f0000000000), 0x7, 0x101402) (async) read$midi(r0, 0x0, 0x0) 09:32:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7b, 0x140) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="6c23435b748ffb48088b9e05d80286db29fa0e84515bea1cf17f5b185b338ea1264b811cf9b282b34117a6ed", 0x2c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x10400, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="01cf9b2963a19a026df5"], 0x16) 09:32:18 executing program 4: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x10000) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) (async) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x28400, 0x0) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) [ 3491.383193] RBP: 00007f5b0ebeb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3491.390440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3491.397687] R13: 00007ffe8528724f R14: 00007f5b0ebeb300 R15: 0000000000022000 09:32:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x122a, @rand_addr=' \x01\x00', 0x3}, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0xffffffffffffffff, {[0x100, 0xa68, 0x4, 0x8, 0xba9, 0x7, 0x7fff, 0x8]}}, 0x5c) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x3, 0x0, [0xe90b, 0x7ff, 0x7, 0x4, 0x31ac6e93, 0x1, 0x4, 0x3]}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (fail_nth: 4) 09:32:18 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x5, 0x640000) syz_open_dev$amidi(&(0x7f0000000080), 0x4, 0x400900) (async) syz_open_dev$admmidi(&(0x7f0000000000), 0x7, 0x101402) (async) read$midi(r0, 0x0, 0x0) 09:32:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7b, 0x140) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="6c23435b748ffb48088b9e05d80286db29fa0e84515bea1cf17f5b185b338ea1264b811cf9b282b34117a6ed", 0x2c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x10400, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="01cf9b2963a19a026df5"], 0x16) 09:32:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x4, 0xffff, 0x1009, 0x0, 0x0, 0xe, 0x2, 0x6}}) 09:32:18 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0xbd, r3, 0x10001}, 0xc) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7b, 0x140) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="6c23435b748ffb48088b9e05d80286db29fa0e84515bea1cf17f5b185b338ea1264b811cf9b282b34117a6ed", 0x2c, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x10400, 0x0) write$bt_hci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="01cf9b2963a19a026df5"], 0x16) 09:32:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xfff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x6, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x5, [0x3, 0x9], 0x8001}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:18 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x4, 0xffff, 0x1009, 0x0, 0x0, 0xe, 0x2, 0x6}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x4, 0xffff, 0x1009, 0x0, 0x0, 0xe, 0x2, 0x6}}) (async) 09:32:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x122a, @rand_addr=' \x01\x00', 0x3}, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0xffffffffffffffff, {[0x100, 0xa68, 0x4, 0x8, 0xba9, 0x7, 0x7fff, 0x8]}}, 0x5c) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x3, 0x0, [0xe90b, 0x7ff, 0x7, 0x4, 0x31ac6e93, 0x1, 0x4, 0x3]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) 09:32:19 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0xbd, r3, 0x10001}, 0xc) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xfff, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x5, [0x3, 0x9], 0x8001}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000040)={0x1, 0x0, {0x4, 0xffff, 0x1009, 0x0, 0x0, 0xe, 0x2, 0x6}}) 09:32:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdffb, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 32) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 32) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000080)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) 09:32:19 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xfff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x6, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x5, [0x3, 0x9], 0x8001}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0xfff, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x5, [0x3, 0x9], 0x8001}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:19 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0xbd, r3, 0x10001}, 0xc) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0xbd, r3, 0x10001}, 0xc) (async) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdffb, 0x3}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYBLOB="c4d01b68576e6db35fcc83524bb19f17ce2b0c7841e8b6e502dc6c2c68126b9bbc170f4c3a5a7d424a2dea24784c0f68fc4118ca3a40e88d181b5ec5a1", @ANYBLOB="01db431856cce8fa9ce7f0506461ddd43bbc62cbb74359dd758bf30734c1ae0721015740b74fc8eb3b958b948ae01ea70705fae7ebdc035e964b30becd84624edd913c0f0128c0a548136f5f332b695b5b6b09817f6128368689cd672cb4261b26ba2b5b9f18694c1e650a3e727e5e9e8811219738c023ae5368f5334dc866018422f61aedc6322c8c9d4706cab0f97f846b05bf2cb4338db833aab8b3faf31b845d425b8ae882ed5072be79", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX=r3], 0x15) 09:32:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000080)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) (async) 09:32:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) (rerun: 64) 09:32:19 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 64) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYBLOB="c4d01b68576e6db35fcc83524bb19f17ce2b0c7841e8b6e502dc6c2c68126b9bbc170f4c3a5a7d424a2dea24784c0f68fc4118ca3a40e88d181b5ec5a1", @ANYBLOB="01db431856cce8fa9ce7f0506461ddd43bbc62cbb74359dd758bf30734c1ae0721015740b74fc8eb3b958b948ae01ea70705fae7ebdc035e964b30becd84624edd913c0f0128c0a548136f5f332b695b5b6b09817f6128368689cd672cb4261b26ba2b5b9f18694c1e650a3e727e5e9e8811219738c023ae5368f5334dc866018422f61aedc6322c8c9d4706cab0f97f846b05bf2cb4338db833aab8b3faf31b845d425b8ae882ed5072be79", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX=r3], 0x15) (rerun: 32) 09:32:19 executing program 2: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="0c8a18a5c57a7349f473c93d35fd8135bc69a41b7ccb0a4c049175bdca255f0356669a35901eba92e7ac7ac22cc24164ddbb9e899352880c17966995ba012512b722faea03ef67c84d49546415decb25b85a1c5e85f2b7e7d65fa07466c8995c881d071f7153ec2ce519353d41248ed2cd4b73e95c25357b18e2067ea54a5337d6f25a168b25b0337b941125e85e3f9f25c585fc106e2e8f83cdf63616601e7eead8e48bbafdd966b138b55c9d2e16abc462080bddc2080e7493b1a7debc55a96a1d3d382c84823d"}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdffb, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x5, 0x4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0xfff, 0x101, 0x9113, 0x1000, 0x2, 0x8, 0x80000001, 0x6, 0xf7, 0x8, 0x1, 0x5af, 0x6f, 0x1, 0x3, 0x0, 0x9, 0x1, 0x5, 0x8, 0x88, 0x7fffffff, 0x1, 0x10001, 0x9, 0x3, 0x6, 0x200000, 0x4, 0x5b15, 0x9]}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) 09:32:19 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2}}}, 0x5) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x2, 0x401, "001c00", 0x7, 0xe9}) 09:32:19 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="714df597f46f490995b2850686ad8f011a2012c9cd6a4269410612b1cf9b2963a19a9fc6cc5aad56836489b3c44312d54b5cfcade60d43226a570a85226a82834111bda55f16f2523edbd629b9a22bf6577070bb56478741192eebbd3e878435daadb8d3336cc2cd977a13c92c"], 0x16) 09:32:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0xfff, 0x101, 0x9113, 0x1000, 0x2, 0x8, 0x80000001, 0x6, 0xf7, 0x8, 0x1, 0x5af, 0x6f, 0x1, 0x3, 0x0, 0x9, 0x1, 0x5, 0x8, 0x88, 0x7fffffff, 0x1, 0x10001, 0x9, 0x3, 0x6, 0x200000, 0x4, 0x5b15, 0x9]}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0xfff, 0x101, 0x9113, 0x1000, 0x2, 0x8, 0x80000001, 0x6, 0xf7, 0x8, 0x1, 0x5af, 0x6f, 0x1, 0x3, 0x0, 0x9, 0x1, 0x5, 0x8, 0x88, 0x7fffffff, 0x1, 0x10001, 0x9, 0x3, 0x6, 0x200000, 0x4, 0x5b15, 0x9]}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) (async) 09:32:19 executing program 2: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="0c8a18a5c57a7349f473c93d35fd8135bc69a41b7ccb0a4c049175bdca255f0356669a35901eba92e7ac7ac22cc24164ddbb9e899352880c17966995ba012512b722faea03ef67c84d49546415decb25b85a1c5e85f2b7e7d65fa07466c8995c881d071f7153ec2ce519353d41248ed2cd4b73e95c25357b18e2067ea54a5337d6f25a168b25b0337b941125e85e3f9f25c585fc106e2e8f83cdf63616601e7eead8e48bbafdd966b138b55c9d2e16abc462080bddc2080e7493b1a7debc55a96a1d3d382c84823d"}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="714df597f46f490995b2850686ad8f011a2012c9cd6a4269410612b1cf9b2963a19a9fc6cc5aad56836489b3c44312d54b5cfcade60d43226a570a85226a82834111bda55f16f2523edbd629b9a22bf6577070bb56478741192eebbd3e878435daadb8d3336cc2cd977a13c92c"], 0x16) 09:32:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="714df597f46f490995b2850686ad8f011a2012c9cd6a4269410612b1cf9b2963a19a9fc6cc5aad56836489b3c44312d54b5cfcade60d43226a570a85226a82834111bda55f16f2523edbd629b9a22bf6577070bb56478741192eebbd3e878435daadb8d3336cc2cd977a13c92c"], 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="714df597f46f490995b2850686ad8f011a2012c9cd6a4269410612b1cf9b2963a19a9fc6cc5aad56836489b3c44312d54b5cfcade60d43226a570a85226a82834111bda55f16f2523edbd629b9a22bf6577070bb56478741192eebbd3e878435daadb8d3336cc2cd977a13c92c"], 0x16) (async) 09:32:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r2, @ANYBLOB="c4d01b68576e6db35fcc83524bb19f17ce2b0c7841e8b6e502dc6c2c68126b9bbc170f4c3a5a7d424a2dea24784c0f68fc4118ca3a40e88d181b5ec5a1", @ANYBLOB="01db431856cce8fa9ce7f0506461ddd43bbc62cbb74359dd758bf30734c1ae0721015740b74fc8eb3b958b948ae01ea70705fae7ebdc035e964b30becd84624edd913c0f0128c0a548136f5f332b695b5b6b09817f6128368689cd672cb4261b26ba2b5b9f18694c1e650a3e727e5e9e8811219738c023ae5368f5334dc866018422f61aedc6322c8c9d4706cab0f97f846b05bf2cb4338db833aab8b3faf31b845d425b8ae882ed5072be79", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRES16=r2, @ANYRES64=r3, @ANYRESHEX=r3], 0x15) 09:32:19 executing program 2: ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="0c8a18a5c57a7349f473c93d35fd8135bc69a41b7ccb0a4c049175bdca255f0356669a35901eba92e7ac7ac22cc24164ddbb9e899352880c17966995ba012512b722faea03ef67c84d49546415decb25b85a1c5e85f2b7e7d65fa07466c8995c881d071f7153ec2ce519353d41248ed2cd4b73e95c25357b18e2067ea54a5337d6f25a168b25b0337b941125e85e3f9f25c585fc106e2e8f83cdf63616601e7eead8e48bbafdd966b138b55c9d2e16abc462080bddc2080e7493b1a7debc55a96a1d3d382c84823d"}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x3, @raw_data="0c8a18a5c57a7349f473c93d35fd8135bc69a41b7ccb0a4c049175bdca255f0356669a35901eba92e7ac7ac22cc24164ddbb9e899352880c17966995ba012512b722faea03ef67c84d49546415decb25b85a1c5e85f2b7e7d65fa07466c8995c881d071f7153ec2ce519353d41248ed2cd4b73e95c25357b18e2067ea54a5337d6f25a168b25b0337b941125e85e3f9f25c585fc106e2e8f83cdf63616601e7eead8e48bbafdd966b138b55c9d2e16abc462080bddc2080e7493b1a7debc55a96a1d3d382c84823d"}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:19 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0xfff, 0x101, 0x9113, 0x1000, 0x2, 0x8, 0x80000001, 0x6, 0xf7, 0x8, 0x1, 0x5af, 0x6f, 0x1, 0x3, 0x0, 0x9, 0x1, 0x5, 0x8, 0x88, 0x7fffffff, 0x1, 0x10001, 0x9, 0x3, 0x6, 0x200000, 0x4, 0x5b15, 0x9]}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0xfff, 0x101, 0x9113, 0x1000, 0x2, 0x8, 0x80000001, 0x6, 0xf7, 0x8, 0x1, 0x5af, 0x6f, 0x1, 0x3, 0x0, 0x9, 0x1, 0x5, 0x8, 0x88, 0x7fffffff, 0x1, 0x10001, 0x9, 0x3, 0x6, 0x200000, 0x4, 0x5b15, 0x9]}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000000)={0x1}) (async) 09:32:19 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:19 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x6, "3a9e72faf1db63724c990a19acda16174d7ef8452fb21685560a037b2fba7258", 0x1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="011a201200006a4269bc06836e39e3df7df12963a101000000507b34a36d0a25199aa8b4e00000000000000000"], 0x16) 09:32:20 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000080)='bic\x00', 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:20 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2a41, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x81, 0xfffff800, 0x2, 0x3f}}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000300)=0x6) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0xe568, 0xa6, 0x2024, 0x6, 0x2, 0x2, 0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000340), 0x2080, 0x2) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) socket(0x5, 0x800, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x2, 0x5, {0x4, 0x1, 0x1f, 0x1f}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 09:32:20 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xfffffffffffffff8, 0x40c343) read$midi(r0, 0x0, 0x0) 09:32:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2}}}, 0x5) (async) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x2, 0x401, "001c00", 0x7, 0xe9}) 09:32:20 executing program 2: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x6e53, 0x1, 0x4, 0x0, 0x677, {0x77359400}, {0x4, 0xc, 0x8, 0x20, 0x8, 0x7, "01f3c6dc"}, 0x2, 0x4, {}, 0x7}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0xc, @pix_mp={0x7, 0x9, 0x3147504d, 0x7, 0xa, [{0x50f, 0x80}, {0x9, 0x8000}, {0x9fb, 0x80000000}, {0x4, 0xffff}, {0x7, 0xccbe}, {0x4, 0xffffffff}, {0x2, 0x3ff}, {0x7f, 0x4}], 0x2, 0x9, 0x1, 0x1, 0x5}}) 09:32:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) (async, rerun: 32) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) (rerun: 32) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x6, "3a9e72faf1db63724c990a19acda16174d7ef8452fb21685560a037b2fba7258", 0x1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async, rerun: 32) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="011a201200006a4269bc06836e39e3df7df12963a101000000507b34a36d0a25199aa8b4e00000000000000000"], 0x16) (rerun: 32) 09:32:20 executing program 2: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x6e53, 0x1, 0x4, 0x0, 0x677, {0x77359400}, {0x4, 0xc, 0x8, 0x20, 0x8, 0x7, "01f3c6dc"}, 0x2, 0x4, {}, 0x7}) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0xc, @pix_mp={0x7, 0x9, 0x3147504d, 0x7, 0xa, [{0x50f, 0x80}, {0x9, 0x8000}, {0x9fb, 0x80000000}, {0x4, 0xffff}, {0x7, 0xccbe}, {0x4, 0xffffffff}, {0x2, 0x3ff}, {0x7f, 0x4}], 0x2, 0x9, 0x1, 0x1, 0x5}}) 09:32:20 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000000c0)) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 64) write$tcp_congestion(r1, &(0x7f0000000080)='bic\x00', 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (rerun: 64) 09:32:20 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xfffffffffffffff8, 0x40c343) read$midi(r0, 0x0, 0x0) 09:32:20 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2a41, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x81, 0xfffff800, 0x2, 0x3f}}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000300)=0x6) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0xe568, 0xa6, 0x2024, 0x6, 0x2, 0x2, 0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000340), 0x2080, 0x2) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) socket(0x5, 0x800, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x2, 0x5, {0x4, 0x1, 0x1f, 0x1f}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2a41, 0x0) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x81, 0xfffff800, 0x2, 0x3f}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000300)=0x6) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0xe568, 0xa6, 0x2024, 0x6, 0x2, 0x2, 0x0, 0x1}}) (async) syz_open_dev$vim2m(&(0x7f0000000340), 0x2080, 0x2) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) (async) socket(0x5, 0x800, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x2, 0x5, {0x4, 0x1, 0x1f, 0x1f}}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) 09:32:20 executing program 2: ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x6e53, 0x1, 0x4, 0x0, 0x677, {0x77359400}, {0x4, 0xc, 0x8, 0x20, 0x8, 0x7, "01f3c6dc"}, 0x2, 0x4, {}, 0x7}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0xc, @pix_mp={0x7, 0x9, 0x3147504d, 0x7, 0xa, [{0x50f, 0x80}, {0x9, 0x8000}, {0x9fb, 0x80000000}, {0x4, 0xffff}, {0x7, 0xccbe}, {0x4, 0xffffffff}, {0x2, 0x3ff}, {0x7f, 0x4}], 0x2, 0x9, 0x1, 0x1, 0x5}}) 09:32:20 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x6, "3a9e72faf1db63724c990a19acda16174d7ef8452fb21685560a037b2fba7258", 0x1}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="011a201200006a4269bc06836e39e3df7df12963a101000000507b34a36d0a25199aa8b4e00000000000000000"], 0x16) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x402101, 0x0) (async) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x6, "3a9e72faf1db63724c990a19acda16174d7ef8452fb21685560a037b2fba7258", 0x1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x0, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="011a201200006a4269bc06836e39e3df7df12963a101000000507b34a36d0a25199aa8b4e00000000000000000"], 0x16) (async) 09:32:20 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xfffffffffffffff8, 0x40c343) read$midi(r0, 0x0, 0x0) 09:32:20 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2a41, 0x0) r2 = syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x81, 0xfffff800, 0x2, 0x3f}}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000300)=0x6) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0xe568, 0xa6, 0x2024, 0x6, 0x2, 0x2, 0x0, 0x1}}) syz_open_dev$vim2m(&(0x7f0000000340), 0x2080, 0x2) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) socket(0x5, 0x800, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x2, 0x5, {0x4, 0x1, 0x1f, 0x1f}}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2a41, 0x0) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000100)={0x0, 0x0, {0x81, 0xfffff800, 0x2, 0x3f}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000300)=0x6) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000280)={0x1, 0x0, {0xe568, 0xa6, 0x2024, 0x6, 0x2, 0x2, 0x0, 0x1}}) (async) syz_open_dev$vim2m(&(0x7f0000000340), 0x2080, 0x2) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408) (async) socket(0x5, 0x800, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x2, 0x2, 0x5, {0x4, 0x1, 0x1f, 0x1f}}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) 09:32:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2}}}, 0x5) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x2, 0x401, "001c00", 0x7, 0xe9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @write_ssp_mode={{0xc56, 0x1}, {0x2}}}, 0x5) (async) write$bt_hci(r0, 0x0, 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x2, 0x401, "001c00", 0x7, 0xe9}) (async) 09:32:21 executing program 4: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000000c0)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000080)='bic\x00', 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) write$tcp_congestion(r1, &(0x7f0000000080)='bic\x00', 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x408700) read$midi(r0, 0x0, 0x0) 09:32:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f00000001c0)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x6, 0x7459, 0x0, 0x3, 0x6, 0x200, 0x0, 0x5a5, 0x1, 0x10001, 0xba4, 0x7, 0x2, 0x0, 0xa, 0x1, {0x3, 0xa2900}, 0x6}}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x4, @name="9e112eae3e3c5480619b8be40b85c17e02da123da915758f16e45990fb8be5bb"}, 0x8, 0x3ff, 0x1}) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000540)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x2a6) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x2a6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x2a6) (async) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x408700) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x408700) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x15) 09:32:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f00000001c0)) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x6, 0x7459, 0x0, 0x3, 0x6, 0x200, 0x0, 0x5a5, 0x1, 0x10001, 0xba4, 0x7, 0x2, 0x0, 0xa, 0x1, {0x3, 0xa2900}, 0x6}}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x4, @name="9e112eae3e3c5480619b8be40b85c17e02da123da915758f16e45990fb8be5bb"}, 0x8, 0x3ff, 0x1}) (async) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000540)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x15) 09:32:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="a2521b12a50cb9ad8230d56da834a8c6d548c6") 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x2a6) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x408700) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x0, 0x408700) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) 09:32:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f00000001c0)) (async) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x6, 0x7459, 0x0, 0x3, 0x6, 0x200, 0x0, 0x5a5, 0x1, 0x10001, 0xba4, 0x7, 0x2, 0x0, 0xa, 0x1, {0x3, 0xa2900}, 0x6}}) (async) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x4, @name="9e112eae3e3c5480619b8be40b85c17e02da123da915758f16e45990fb8be5bb"}, 0x8, 0x3ff, 0x1}) (async) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000540)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], 0x15) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000040)="7bd98c45016e07a6e4a706f8b2dfc771b9e0390424e671fbed1dd6b4d8abae361d9d0db745238f4dd1f52e370a04cb264f55997b1d518b9820d883d64edc791f9dcb03dcc28db3bd4d8f569b2410a7aa056e6f30e43fb4c43f227de72231e7d07d9f6350b40af75fb4ad732270997d3d8d63fffa1bc0538658bb37650809f35b2ccecd9902a8d717b121ab1aa5537aa4ffc461c315e63d869d945ce0a3cfec948ddeb8d6") 09:32:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="a2521b12a50cb9ad8230d56da834a8c6d548c6") 09:32:21 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x5, '\x00', &(0x7f0000000040)=0x7f}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$amidi(&(0x7f0000000000), 0x8000000000000001, 0x10000) syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x20040) read$midi(r0, 0x0, 0x0) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x6, {0x8, 0x8, 0x9, 0x6}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x0, 0x103, 0x4, {0x3d8, 0x6d26, 0x5, 0x1}}) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x6, {0x2, 0x4f, 0x1277, 0xfffffffa}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, 0x0, 0x15) (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000040)="a2521b12a50cb9ad8230d56da834a8c6d548c6") 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000040)="7bd98c45016e07a6e4a706f8b2dfc771b9e0390424e671fbed1dd6b4d8abae361d9d0db745238f4dd1f52e370a04cb264f55997b1d518b9820d883d64edc791f9dcb03dcc28db3bd4d8f569b2410a7aa056e6f30e43fb4c43f227de72231e7d07d9f6350b40af75fb4ad732270997d3d8d63fffa1bc0538658bb37650809f35b2ccecd9902a8d717b121ab1aa5537aa4ffc461c315e63d869d945ce0a3cfec948ddeb8d6") [ 3494.532936] Bluetooth: hci2 command 0x0401 tx timeout 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x8000000000000001, 0x10000) syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x20040) (async) read$midi(r0, 0x0, 0x0) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x5, '\x00', &(0x7f0000000040)=0x7f}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x5, '\x00', &(0x7f0000000040)=0x7f}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x6, {0x8, 0x8, 0x9, 0x6}}) (async) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x0, 0x103, 0x4, {0x3d8, 0x6d26, 0x5, 0x1}}) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x6, {0x2, 0x4f, 0x1277, 0xfffffffa}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f0000000040)="7bd98c45016e07a6e4a706f8b2dfc771b9e0390424e671fbed1dd6b4d8abae361d9d0db745238f4dd1f52e370a04cb264f55997b1d518b9820d883d64edc791f9dcb03dcc28db3bd4d8f569b2410a7aa056e6f30e43fb4c43f227de72231e7d07d9f6350b40af75fb4ad732270997d3d8d63fffa1bc0538658bb37650809f35b2ccecd9902a8d717b121ab1aa5537aa4ffc461c315e63d869d945ce0a3cfec948ddeb8d6") 09:32:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x7) write$bt_hci(r2, 0x0, 0x15) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4b, 0xb9, &(0x7f0000000100)=""/185, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x8000000000000001, 0x10000) syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x20040) (async) read$midi(r0, 0x0, 0x0) 09:32:21 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x5, '\x00', &(0x7f0000000040)=0x7f}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) 09:32:21 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000140)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xffffffff, 0xfff, 0x300d, 0x6, 0x0, 0x8, 0x0, 0x1}}) r5 = socket(0xb, 0x1, 0x6) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000180)={0x1, 0x1, 0x87, r8, 0xfffff61f}, 0xc) 09:32:21 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x1, 0x0, 0x0, 0x6, {0x8, 0x8, 0x9, 0x6}}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0x0, 0x103, 0x4, {0x3d8, 0x6d26, 0x5, 0x1}}) (async) syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000180)={0x6, {0x2, 0x4f, 0x1277, 0xfffffffa}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x7) write$bt_hci(r2, 0x0, 0x15) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4000000000000009, 0x20e582) read$midi(r0, 0x0, 0x0) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4b, 0xb9, &(0x7f0000000100)=""/185, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000140)) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xffffffff, 0xfff, 0x300d, 0x6, 0x0, 0x8, 0x0, 0x1}}) (async) r5 = socket(0xb, 0x1, 0x6) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000180)={0x1, 0x1, 0x87, r8, 0xfffff61f}, 0xc) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x13b2, [0x300, 0x7], 0x2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:21 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @raw_data="86aa6f07b44ba6d1b5deb0b545d711f4950d6ee48df39e523df39a08fb1bd04d0fdfe007e3a5b0064c835df532ca7edf7036fd170d41f08d61afdefa2a35a6914c77825d86d105c7be25f9bc085bd1a729b47584c4f020d5fc643110a0b2754da6101e477f51f77d1adcf5ef1f5433a6e30b1ae7d2771711541ad277a9d33c8ef1b1f2fac3a770a9368d36ddbc5739234a30fe2b98b02878b23f957d6bdfd9589c2de2546d7007f893cb6dceddba93a83a4cd466b27d5b9ebabe704358ad2b8309526427c208fa72"}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000100)={0x0, @frame_sync}) 09:32:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x7) write$bt_hci(r2, 0x0, 0x15) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x7) (async) write$bt_hci(r2, 0x0, 0x15) (async) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4000000000000009, 0x20e582) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x4000000000000009, 0x20e582) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:21 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000140)) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xffffffff, 0xfff, 0x300d, 0x6, 0x0, 0x8, 0x0, 0x1}}) (async) r5 = socket(0xb, 0x1, 0x6) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000180)={0x1, 0x1, 0x87, r8, 0xfffff61f}, 0xc) 09:32:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4b, 0xb9, &(0x7f0000000100)=""/185, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xa, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (rerun: 64) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x13b2, [0x300, 0x7], 0x2}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:21 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) (rerun: 32) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @raw_data="86aa6f07b44ba6d1b5deb0b545d711f4950d6ee48df39e523df39a08fb1bd04d0fdfe007e3a5b0064c835df532ca7edf7036fd170d41f08d61afdefa2a35a6914c77825d86d105c7be25f9bc085bd1a729b47584c4f020d5fc643110a0b2754da6101e477f51f77d1adcf5ef1f5433a6e30b1ae7d2771711541ad277a9d33c8ef1b1f2fac3a770a9368d36ddbc5739234a30fe2b98b02878b23f957d6bdfd9589c2de2546d7007f893cb6dceddba93a83a4cd466b27d5b9ebabe704358ad2b8309526427c208fa72"}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000100)={0x0, @frame_sync}) 09:32:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000140)) write$bt_hci(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x898f, 0x4000a, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000200)) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000000c0)={0x1, "339f90e4e25eb054048da79249365022a2f97e6118b99c812a45ed427311689a"}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x800, 0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r6, 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000280)) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f00000000c0), 0x4) write$bt_hci(r5, 0x0, 0x15) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4000000000000009, 0x20e582) read$midi(r0, 0x0, 0x0) 09:32:21 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000140)) write$bt_hci(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x898f, 0x4000a, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000200)) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000000c0)={0x1, "339f90e4e25eb054048da79249365022a2f97e6118b99c812a45ed427311689a"}) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x800, 0x3}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r6, 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000280)) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f00000000c0), 0x4) write$bt_hci(r5, 0x0, 0x15) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000140)) (async) write$bt_hci(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x898f, 0x4000a, 0x2}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000200)) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000000c0)={0x1, "339f90e4e25eb054048da79249365022a2f97e6118b99c812a45ed427311689a"}) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x800, 0x3}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r6, 0x0, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000280)) (async) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f00000000c0), 0x4) (async) write$bt_hci(r5, 0x0, 0x15) (async) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x13b2, [0x300, 0x7], 0x2}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:21 executing program 2: syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @raw_data="86aa6f07b44ba6d1b5deb0b545d711f4950d6ee48df39e523df39a08fb1bd04d0fdfe007e3a5b0064c835df532ca7edf7036fd170d41f08d61afdefa2a35a6914c77825d86d105c7be25f9bc085bd1a729b47584c4f020d5fc643110a0b2754da6101e477f51f77d1adcf5ef1f5433a6e30b1ae7d2771711541ad277a9d33c8ef1b1f2fac3a770a9368d36ddbc5739234a30fe2b98b02878b23f957d6bdfd9589c2de2546d7007f893cb6dceddba93a83a4cd466b27d5b9ebabe704358ad2b8309526427c208fa72"}) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000100)={0x0, @frame_sync}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000080), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @raw_data="86aa6f07b44ba6d1b5deb0b545d711f4950d6ee48df39e523df39a08fb1bd04d0fdfe007e3a5b0064c835df532ca7edf7036fd170d41f08d61afdefa2a35a6914c77825d86d105c7be25f9bc085bd1a729b47584c4f020d5fc643110a0b2754da6101e477f51f77d1adcf5ef1f5433a6e30b1ae7d2771711541ad277a9d33c8ef1b1f2fac3a770a9368d36ddbc5739234a30fe2b98b02878b23f957d6bdfd9589c2de2546d7007f893cb6dceddba93a83a4cd466b27d5b9ebabe704358ad2b8309526427c208fa72"}) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000100)={0x0, @frame_sync}) (async) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x81, 0x6, 0x0, 0x400}) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x3) 09:32:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000140)={"9c79d5d54e090a6cf27818046f9116cc3ceea55aee601a6ee0e8735947fd", 0x0, 0x1, 0x1, 0xfffffe4a, 0x4, 0x1d, 0x4, 0x2, [0xa14, 0x9, 0x8, 0x6, 0xff, 0x8, 0x2d7b, 0x5, 0x8, 0x4, 0x5, 0x80000001, 0x8, 0x400, 0x2, 0x80, 0x7, 0x7]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x40000, 0x48, 0x2, 0x6}}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 09:32:21 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x7) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:21 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x3, 0x10001}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x745083, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000000c0)) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:21 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x81, 0x6, 0x0, 0x400}) (async, rerun: 32) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x3) 09:32:22 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000140)) write$bt_hci(r0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x898f, 0x4000a, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000200)) r4 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000000c0)={0x1, "339f90e4e25eb054048da79249365022a2f97e6118b99c812a45ed427311689a"}) (async) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x800, 0x3}) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r6, 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000280)) (async) setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f00000000c0), 0x4) write$bt_hci(r5, 0x0, 0x15) 09:32:22 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000080)=0x7) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:22 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x3, 0x10001}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x745083, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000000c0)) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000140)={"9c79d5d54e090a6cf27818046f9116cc3ceea55aee601a6ee0e8735947fd", 0x0, 0x1, 0x1, 0xfffffe4a, 0x4, 0x1d, 0x4, 0x2, [0xa14, 0x9, 0x8, 0x6, 0xff, 0x8, 0x2d7b, 0x5, 0x8, 0x4, 0x5, 0x80000001, 0x8, 0x400, 0x2, 0x80, 0x7, 0x7]}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x40000, 0x48, 0x2, 0x6}}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x81, 0x6, 0x0, 0x400}) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x3) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x81, 0x6, 0x0, 0x400}) (async) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000000c0)=0x3) (async) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_open_dev$admmidi(&(0x7f0000000080), 0xfffffffffffff3d3, 0x100) 09:32:22 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0xb9cc, "8cab48", 0x9, 0x5b}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x602000, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x0, [0x3, 0x2], 0x9f}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000300)={0x7}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x0, @pix_mp={0xf94, 0x7f, 0x32314d4e, 0x1, 0x5, [{0x9, 0x7fff}, {0x3, 0x3}, {0x7ff, 0x5}, {0x8, 0x3a}, {0x324b, 0xca}, {0x1, 0x4}, {0xffff0000, 0x5}, {0x5, 0x1f}], 0x3, 0x3, 0x4, 0x0, 0x4}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0xc, @pix_mp={0x1, 0x81, 0x34343452, 0x6, 0xb, [{0xfff, 0x10001}, {0x16f400, 0xfffffff7}, {0x7, 0x75}, {0x800, 0x1ff}, {0x8, 0x1}, {0x8}, {0x5ddc, 0x101}, {0x0, 0x6}], 0x7f, 0x1, 0x0, 0x1, 0xddcd93f0973ada4a}}) read$midi(0xffffffffffffffff, &(0x7f0000000100)=""/64, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x7, [0x6, 0xfffffffc], 0xa11}, 0x10) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0xfffffffffffff3d3, 0x100) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x490820, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) read$midi(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) read$midi(r0, &(0x7f0000000080)=""/215, 0xd7) 09:32:22 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x3, 0x10001}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x745083, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f00000000c0)) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0xb9cc, "8cab48", 0x9, 0x5b}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x602000, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x0, [0x3, 0x2], 0x9f}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000300)={0x7}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x0, @pix_mp={0xf94, 0x7f, 0x32314d4e, 0x1, 0x5, [{0x9, 0x7fff}, {0x3, 0x3}, {0x7ff, 0x5}, {0x8, 0x3a}, {0x324b, 0xca}, {0x1, 0x4}, {0xffff0000, 0x5}, {0x5, 0x1f}], 0x3, 0x3, 0x4, 0x0, 0x4}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0xc, @pix_mp={0x1, 0x81, 0x34343452, 0x6, 0xb, [{0xfff, 0x10001}, {0x16f400, 0xfffffff7}, {0x7, 0x75}, {0x800, 0x1ff}, {0x8, 0x1}, {0x8}, {0x5ddc, 0x101}, {0x0, 0x6}], 0x7f, 0x1, 0x0, 0x1, 0xddcd93f0973ada4a}}) read$midi(0xffffffffffffffff, &(0x7f0000000100)=""/64, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x7, [0x6, 0xfffffffc], 0xa11}, 0x10) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0xb9cc, "8cab48", 0x9, 0x5b}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x602000, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x0, [0x3, 0x2], 0x9f}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) (async) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000300)={0x7}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x0, @pix_mp={0xf94, 0x7f, 0x32314d4e, 0x1, 0x5, [{0x9, 0x7fff}, {0x3, 0x3}, {0x7ff, 0x5}, {0x8, 0x3a}, {0x324b, 0xca}, {0x1, 0x4}, {0xffff0000, 0x5}, {0x5, 0x1f}], 0x3, 0x3, 0x4, 0x0, 0x4}}) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0xc, @pix_mp={0x1, 0x81, 0x34343452, 0x6, 0xb, [{0xfff, 0x10001}, {0x16f400, 0xfffffff7}, {0x7, 0x75}, {0x800, 0x1ff}, {0x8, 0x1}, {0x8}, {0x5ddc, 0x101}, {0x0, 0x6}], 0x7f, 0x1, 0x0, 0x1, 0xddcd93f0973ada4a}}) (async) read$midi(0xffffffffffffffff, &(0x7f0000000100)=""/64, 0x40) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x7, [0x6, 0xfffffffc], 0xa11}, 0x10) (async) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) (async) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x490820, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) (async) read$midi(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32) read$midi(r0, &(0x7f0000000080)=""/215, 0xd7) (rerun: 32) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000140)={"9c79d5d54e090a6cf27818046f9116cc3ceea55aee601a6ee0e8735947fd", 0x0, 0x1, 0x1, 0xfffffe4a, 0x4, 0x1d, 0x4, 0x2, [0xa14, 0x9, 0x8, 0x6, 0xff, 0x8, 0x2d7b, 0x5, 0x8, 0x4, 0x5, 0x80000001, 0x8, 0x400, 0x2, 0x80, 0x7, 0x7]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x40000, 0x48, 0x2, 0x6}}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000140)={"9c79d5d54e090a6cf27818046f9116cc3ceea55aee601a6ee0e8735947fd", 0x0, 0x1, 0x1, 0xfffffe4a, 0x4, 0x1d, 0x4, 0x2, [0xa14, 0x9, 0x8, 0x6, 0xff, 0x8, 0x2d7b, 0x5, 0x8, 0x4, 0x5, 0x80000001, 0x8, 0x400, 0x2, 0x80, 0x7, 0x7]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x0, 0x0, {0x40000, 0x48, 0x2, 0x6}}) (async) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_open_dev$admmidi(&(0x7f0000000080), 0xfffffffffffff3d3, 0x100) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0xfffffffffffff3d3, 0x100) (async) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000080)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:22 executing program 5: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0xb9cc, "8cab48", 0x9, 0x5b}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x602000, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x0, [0x3, 0x2], 0x9f}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000300)={0x7}) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x0, @pix_mp={0xf94, 0x7f, 0x32314d4e, 0x1, 0x5, [{0x9, 0x7fff}, {0x3, 0x3}, {0x7ff, 0x5}, {0x8, 0x3a}, {0x324b, 0xca}, {0x1, 0x4}, {0xffff0000, 0x5}, {0x5, 0x1f}], 0x3, 0x3, 0x4, 0x0, 0x4}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0xc, @pix_mp={0x1, 0x81, 0x34343452, 0x6, 0xb, [{0xfff, 0x10001}, {0x16f400, 0xfffffff7}, {0x7, 0x75}, {0x800, 0x1ff}, {0x8, 0x1}, {0x8}, {0x5ddc, 0x101}, {0x0, 0x6}], 0x7f, 0x1, 0x0, 0x1, 0xddcd93f0973ada4a}}) read$midi(0xffffffffffffffff, &(0x7f0000000100)=""/64, 0x40) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x7, [0x6, 0xfffffffc], 0xa11}, 0x10) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)={0x2, 0xb9cc, "8cab48", 0x9, 0x5b}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x602000, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x0, [0x3, 0x2], 0x9f}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) (async) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000080)) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000000300)={0x7}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000200)={0x0, @pix_mp={0xf94, 0x7f, 0x32314d4e, 0x1, 0x5, [{0x9, 0x7fff}, {0x3, 0x3}, {0x7ff, 0x5}, {0x8, 0x3a}, {0x324b, 0xca}, {0x1, 0x4}, {0xffff0000, 0x5}, {0x5, 0x1f}], 0x3, 0x3, 0x4, 0x0, 0x4}}) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0xc, @pix_mp={0x1, 0x81, 0x34343452, 0x6, 0xb, [{0xfff, 0x10001}, {0x16f400, 0xfffffff7}, {0x7, 0x75}, {0x800, 0x1ff}, {0x8, 0x1}, {0x8}, {0x5ddc, 0x101}, {0x0, 0x6}], 0x7f, 0x1, 0x0, 0x1, 0xddcd93f0973ada4a}}) (async) read$midi(0xffffffffffffffff, &(0x7f0000000100)=""/64, 0x40) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x7, [0x6, 0xfffffffc], 0xa11}, 0x10) (async) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) (async) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000080)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x490820, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) (async) read$midi(r0, 0x0, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) read$midi(r0, &(0x7f0000000080)=""/215, 0xd7) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) write$bt_hci(r0, 0x0, 0x15) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 64) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000080)) (rerun: 64) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x7) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x2, 0x3, 0x6) (async) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:22 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x1, 0x9}) write$bt_hci(r0, 0x0, 0x0) read$midi(r0, 0x0, 0x0) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x2, 0x3, 0x6) (async) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:22 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x1, 0x9}) write$bt_hci(r0, 0x0, 0x0) (async) read$midi(r0, 0x0, 0x0) 09:32:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x7) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xff, 0x5, 0xf22}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000080)=0x401) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x7) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x7) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @add_sco={{0x407, 0x4}, {0xc9, 0x1e1}}}, 0x8) 09:32:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) write$bt_hci(r0, 0x0, 0x15) 09:32:22 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x3, 0x7, 0x1, 0x9}) (async) write$bt_hci(r0, 0x0, 0x0) (async) read$midi(r0, 0x0, 0x0) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xff, 0x5, 0xf22}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000080)=0x401) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 32) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 32) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) (rerun: 32) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = socket(0x28, 0x6, 0xffffbfc1) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x0, {[0xffff, 0x1, 0x5, 0x2, 0x7, 0x1, 0x4, 0xdf45]}}, 0x5c) syz_open_dev$amidi(&(0x7f0000000000), 0xfff, 0x400201) read$midi(r0, 0x0, 0x0) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x50000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xff, 0x5, 0xf22}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000080)=0x401) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @add_sco={{0x407, 0x4}, {0xc9, 0x1e1}}}, 0x8) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x81, 0x10001, '\x00', &(0x7f0000000000)=0x74}) 09:32:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0xb, 0x80000, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, 0x0, 0x15) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = socket(0x28, 0x6, 0xffffbfc1) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x0, {[0xffff, 0x1, 0x5, 0x2, 0x7, 0x1, 0x4, 0xdf45]}}, 0x5c) syz_open_dev$amidi(&(0x7f0000000000), 0xfff, 0x400201) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) socket(0x28, 0x6, 0xffffbfc1) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x0, {[0xffff, 0x1, 0x5, 0x2, 0x7, 0x1, 0x4, 0xdf45]}}, 0x5c) (async) syz_open_dev$amidi(&(0x7f0000000000), 0xfff, 0x400201) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @add_sco={{0x407, 0x4}, {0xc9, 0x1e1}}}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @add_sco={{0x407, 0x4}, {0xc9, 0x1e1}}}, 0x8) (async) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x81, 0x10001, '\x00', &(0x7f0000000000)=0x74}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x81, 0x10001, '\x00', &(0x7f0000000000)=0x74}) (async) 09:32:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0xb, 0x80000, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket(0xb, 0x80000, 0x9) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) socket$inet_udplite(0x2, 0x2, 0x88) 09:32:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000080)={0x1854, 0x100, "f176b9ef7687f222a3a712e0d9ac91e69fdbd132aef47f537a02bfb875d66788", 0x2, 0x1000, 0x3, 0x32ac, 0x224}) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x0, 0x2, 0x1}) 09:32:22 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x81, 0x10001, '\x00', &(0x7f0000000000)=0x74}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x81, 0x10001, '\x00', &(0x7f0000000000)=0x74}) (async) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) socket$inet_udplite(0x2, 0x2, 0x88) 09:32:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (rerun: 32) 09:32:22 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = socket(0x28, 0x6, 0xffffbfc1) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x0, {[0xffff, 0x1, 0x5, 0x2, 0x7, 0x1, 0x4, 0xdf45]}}, 0x5c) syz_open_dev$amidi(&(0x7f0000000000), 0xfff, 0x400201) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) socket(0x28, 0x6, 0xffffbfc1) (async) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, {0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, 0x0, {[0xffff, 0x1, 0x5, 0x2, 0x7, 0x1, 0x4, 0xdf45]}}, 0x5c) (async) syz_open_dev$amidi(&(0x7f0000000000), 0xfff, 0x400201) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:22 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0xb, 0x80000, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket(0xb, 0x80000, 0x9) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) 09:32:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) write$bt_hci(r4, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}}}, 0xe) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x9, 0x8520, 0xce9, 0x80000}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0xcfd, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x0, 0x89], 0x6e63}, 0x10) 09:32:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000080)={0x1854, 0x100, "f176b9ef7687f222a3a712e0d9ac91e69fdbd132aef47f537a02bfb875d66788", 0x2, 0x1000, 0x3, 0x32ac, 0x224}) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x0, 0x2, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000080)={0x1854, 0x100, "f176b9ef7687f222a3a712e0d9ac91e69fdbd132aef47f537a02bfb875d66788", 0x2, 0x1000, 0x3, 0x32ac, 0x224}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x0, 0x2, 0x1}) (async) 09:32:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "f5005e4b1d00"}}}, 0x16) 09:32:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x2625c2) read$midi(r1, 0x0, 0x0) 09:32:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) write$bt_hci(r4, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}}}, 0xe) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x9, 0x8520, 0xce9, 0x80000}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0xcfd, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x0, 0x89], 0x6e63}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r4, &(0x7f0000000000), 0x6) (async) write$bt_hci(r4, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}}}, 0xe) (async) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x9, 0x8520, 0xce9, 0x80000}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0xcfd, 0x4) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x0, 0x89], 0x6e63}, 0x10) (async) 09:32:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x3, @private1, 0x9}, {0xa, 0x4e20, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x10001, 0x9, 0x4d1, 0x5, 0xbda, 0x5, 0x8000, 0x8]}}, 0x5c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x2, '4`B', 0x7, 0x3}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @sdr={0x38414761, 0x2}}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x1, [0x8, 0x8], 0x100}, 0x10) 09:32:23 executing program 2: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0xffff, 0x9, 0x8, 0x32315559, [0x200, 0x6], [0x0, 0x2], 0x1}}) 09:32:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) (async) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x2625c2) read$midi(r1, 0x0, 0x0) 09:32:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "f5005e4b1d00"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "f5005e4b1d00"}}}, 0x16) (async) 09:32:23 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x2625c2) read$midi(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @read_enc_key_size={{0x1408, 0x2}, {0xc9}}}, 0x6) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x2625c2) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0x6) write$bt_hci(r4, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}}}, 0xe) (async) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000100)={0x9, 0x8520, 0xce9, 0x80000}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000080)=0xcfd, 0x4) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x0, 0x89], 0x6e63}, 0x10) 09:32:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "f5005e4b1d00"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc9, "f5005e4b1d00"}}}, 0x16) (async) 09:32:23 executing program 2: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0xffff, 0x9, 0x8, 0x32315559, [0x200, 0x6], [0x0, 0x2], 0x1}}) 09:32:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000080)={0x1854, 0x100, "f176b9ef7687f222a3a712e0d9ac91e69fdbd132aef47f537a02bfb875d66788", 0x2, 0x1000, 0x3, 0x32ac, 0x224}) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x0, 0x2, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000080)={0x1854, 0x100, "f176b9ef7687f222a3a712e0d9ac91e69fdbd132aef47f537a02bfb875d66788", 0x2, 0x1000, 0x3, 0x32ac, 0x224}) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000140)={0x0, 0x2, 0x1}) (async) 09:32:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x1, 0x7ff, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x29, 0xb3, 0x6, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20, 0xb808, 0x1, 0x8}}) 09:32:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df5da0fe7774676310fa2ccc8651fbf3bd69a8359e05482065eea32fb519b66f8b8c9923e85aa303413e6a9562547948f0807a2f3a7db1aff57ae991ab15475eef2c59884cbce5cced9baf40eb91fea4e9162c9a5b0efcbb21ed6e46509552e129dcffd586f3b05475a56af3a651c47cda48f5c06be895045fa694e286135ed3ab1ba016b5a5ad07e6a5da7d8a3"], 0x16) 09:32:23 executing program 2: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0xffff, 0x9, 0x8, 0x32315559, [0x200, 0x6], [0x0, 0x2], 0x1}}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000400)={0x2, @vbi={0xffff, 0x9, 0x8, 0x32315559, [0x200, 0x6], [0x0, 0x2], 0x1}}) (async) [ 3496.612734] Bluetooth: hci2 command 0x0401 tx timeout 09:32:23 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x3, @private1, 0x9}, {0xa, 0x4e20, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x10001, 0x9, 0x4d1, 0x5, 0xbda, 0x5, 0x8000, 0x8]}}, 0x5c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x2, '4`B', 0x7, 0x3}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @sdr={0x38414761, 0x2}}) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x1, [0x8, 0x8], 0x100}, 0x10) 09:32:23 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x8000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x4, "2c3e6f689d560178c2bcd0247833ef9c7a9e3b5deedebdcee7987639331ea2db"}) 09:32:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x1, 0x7ff, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x4, 0x2}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x29, 0xb3, 0x6, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20, 0xb808, 0x1, 0x8}}) 09:32:23 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @bt={0x9, 0x9, 0x9, 0x100000, 0x1, 0x10f, 0x14}}) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0xb1, 0x9, '\x00', &(0x7f0000000140)=0x1}) 09:32:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x81, [0x282f, 0x6bf], 0x3ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df5da0fe7774676310fa2ccc8651fbf3bd69a8359e05482065eea32fb519b66f8b8c9923e85aa303413e6a9562547948f0807a2f3a7db1aff57ae991ab15475eef2c59884cbce5cced9baf40eb91fea4e9162c9a5b0efcbb21ed6e46509552e129dcffd586f3b05475a56af3a651c47cda48f5c06be895045fa694e286135ed3ab1ba016b5a5ad07e6a5da7d8a3"], 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df5da0fe7774676310fa2ccc8651fbf3bd69a8359e05482065eea32fb519b66f8b8c9923e85aa303413e6a9562547948f0807a2f3a7db1aff57ae991ab15475eef2c59884cbce5cced9baf40eb91fea4e9162c9a5b0efcbb21ed6e46509552e129dcffd586f3b05475a56af3a651c47cda48f5c06be895045fa694e286135ed3ab1ba016b5a5ad07e6a5da7d8a3"], 0x16) (async) 09:32:24 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @bt={0x9, 0x9, 0x9, 0x100000, 0x1, 0x10f, 0x14}}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0xb1, 0x9, '\x00', &(0x7f0000000140)=0x1}) 09:32:24 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x8000) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x4, "2c3e6f689d560178c2bcd0247833ef9c7a9e3b5deedebdcee7987639331ea2db"}) 09:32:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x81, [0x282f, 0x6bf], 0x3ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x1, 0x7ff, 0x1, @dev={0xfe, 0x80, '\x00', 0x3e}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x20, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r2, 0x29, 0xb3, 0x6, 0x0, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20, 0xb808, 0x1, 0x8}}) 09:32:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df5da0fe7774676310fa2ccc8651fbf3bd69a8359e05482065eea32fb519b66f8b8c9923e85aa303413e6a9562547948f0807a2f3a7db1aff57ae991ab15475eef2c59884cbce5cced9baf40eb91fea4e9162c9a5b0efcbb21ed6e46509552e129dcffd586f3b05475a56af3a651c47cda48f5c06be895045fa694e286135ed3ab1ba016b5a5ad07e6a5da7d8a3"], 0x16) (rerun: 64) 09:32:24 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000080)) (async) r1 = syz_open_dev$vivid(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x1) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @bt={0x9, 0x9, 0x9, 0x100000, 0x1, 0x10f, 0x14}}) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0xb1, 0x9, '\x00', &(0x7f0000000140)=0x1}) 09:32:24 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e23, 0x3, @private1, 0x9}, {0xa, 0x4e20, 0x101, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0xffffffffffffffff, {[0x10001, 0x9, 0x4d1, 0x5, 0xbda, 0x5, 0x8000, 0x8]}}, 0x5c) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x2, '4`B', 0x7, 0x3}) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0xb, @sdr={0x38414761, 0x2}}) (async, rerun: 32) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x1, [0x8, 0x8], 0x100}, 0x10) (rerun: 32) 09:32:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) clock_gettime(0x1, &(0x7f0000000080)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x3ff00, 0x5, 0x10000, 0x400, 0x400, 0x7, 0x8}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:24 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x8000) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 64) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x4, "2c3e6f689d560178c2bcd0247833ef9c7a9e3b5deedebdcee7987639331ea2db"}) 09:32:24 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x2500, 0x5, '\x00', &(0x7f0000000100)=0x5}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000040)="6c7dd33dc30da53e274a1720bf96483f190e9c54d75da8b4ce8f28d89c532c704e06fe2b7253f93e1c4073c2f20da94ba19ea14de22a51eb9c00823a95989ce69049d7048b20326e3a6591c6ff24f6a75ebfaf27601b849e6f87c7ba706687e13cfe538e7c18657e0ac81d95b581345305a687d58a27e5c0faa03d28a923e770877a1a4c71dc59b8fd282ad1c6f92db434b2804b14") write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x131) 09:32:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x81, [0x282f, 0x6bf], 0x3ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x81, [0x282f, 0x6bf], 0x3ff}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:24 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x1, 0x8000}, 0x0, 0x0, 0x0, 0x5, 0x0}}) 09:32:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) clock_gettime(0x1, &(0x7f0000000080)) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x3ff00, 0x5, 0x10000, 0x400, 0x400, 0x7, 0x8}) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0x6, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000180)="32ab367f0131e5940a21ff8954c01edba374a14a5f3d58228f293d1e491b5ff174e671c547f8070a9ac50dcc32db43d0fa3df9101aa6c9d51effae00f8bd57b919624f5cec3652469c0299d3a45964653fce575654f21dbcdb57ac26d9c54549c1db041a43011cd5de56579b3d04572bf6133805c739ecd58d6ab2d3223bf44d85e67963f18dc10d5b15cdbbfcb1da231d1be07583a0da90ff70bbda64654fb41f1b4e46b02800e6e51431bcdc72ff671c098954be18531cf0a527fc4923dac4629f331643da83d4e33b3b3435989bd4cb766ec70775d9155de7fd26a903a344140f5fffe606a43d97a9e1e38cb5a57fa68c43472cd3453d") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x388aaad94f65a83b, 0xe8, 0x0, 0x9}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:24 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x1, 0x8000}, 0x0, 0x0, 0x0, 0x5, 0x0}}) 09:32:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) clock_gettime(0x1, &(0x7f0000000080)) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x3ff00, 0x5, 0x10000, 0x400, 0x400, 0x7, 0x8}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) clock_gettime(0x1, &(0x7f0000000080)) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000000c0)={0x3ff00, 0x5, 0x10000, 0x400, 0x400, 0x7, 0x8}) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:24 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x2500, 0x5, '\x00', &(0x7f0000000100)=0x5}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000040)="6c7dd33dc30da53e274a1720bf96483f190e9c54d75da8b4ce8f28d89c532c704e06fe2b7253f93e1c4073c2f20da94ba19ea14de22a51eb9c00823a95989ce69049d7048b20326e3a6591c6ff24f6a75ebfaf27601b849e6f87c7ba706687e13cfe538e7c18657e0ac81d95b581345305a687d58a27e5c0faa03d28a923e770877a1a4c71dc59b8fd282ad1c6f92db434b2804b14") write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x131) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x2500, 0x5, '\x00', &(0x7f0000000100)=0x5}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000040)="6c7dd33dc30da53e274a1720bf96483f190e9c54d75da8b4ce8f28d89c532c704e06fe2b7253f93e1c4073c2f20da94ba19ea14de22a51eb9c00823a95989ce69049d7048b20326e3a6591c6ff24f6a75ebfaf27601b849e6f87c7ba706687e13cfe538e7c18657e0ac81d95b581345305a687d58a27e5c0faa03d28a923e770877a1a4c71dc59b8fd282ad1c6f92db434b2804b14") (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x131) (async) 09:32:24 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0xa02) write$midi(r0, &(0x7f0000000080)="c3", 0x1) syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x10082) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000000c0)=0x7) write$bt_hci(r1, 0x0, 0x0) read$midi(r1, 0x0, 0x0) [ 3498.372617] Bluetooth: hci1 command 0x0401 tx timeout [ 3498.702581] Bluetooth: hci2 command 0x0401 tx timeout 09:32:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x101280) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) 09:32:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0x6, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000180)="32ab367f0131e5940a21ff8954c01edba374a14a5f3d58228f293d1e491b5ff174e671c547f8070a9ac50dcc32db43d0fa3df9101aa6c9d51effae00f8bd57b919624f5cec3652469c0299d3a45964653fce575654f21dbcdb57ac26d9c54549c1db041a43011cd5de56579b3d04572bf6133805c739ecd58d6ab2d3223bf44d85e67963f18dc10d5b15cdbbfcb1da231d1be07583a0da90ff70bbda64654fb41f1b4e46b02800e6e51431bcdc72ff671c098954be18531cf0a527fc4923dac4629f331643da83d4e33b3b3435989bd4cb766ec70775d9155de7fd26a903a344140f5fffe606a43d97a9e1e38cb5a57fa68c43472cd3453d") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x388aaad94f65a83b, 0xe8, 0x0, 0x9}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:25 executing program 4: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x2500, 0x5, '\x00', &(0x7f0000000100)=0x5}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000040)="6c7dd33dc30da53e274a1720bf96483f190e9c54d75da8b4ce8f28d89c532c704e06fe2b7253f93e1c4073c2f20da94ba19ea14de22a51eb9c00823a95989ce69049d7048b20326e3a6591c6ff24f6a75ebfaf27601b849e6f87c7ba706687e13cfe538e7c18657e0ac81d95b581345305a687d58a27e5c0faa03d28a923e770877a1a4c71dc59b8fd282ad1c6f92db434b2804b14") write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x131) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x2500, 0x5, '\x00', &(0x7f0000000100)=0x5}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000040)="6c7dd33dc30da53e274a1720bf96483f190e9c54d75da8b4ce8f28d89c532c704e06fe2b7253f93e1c4073c2f20da94ba19ea14de22a51eb9c00823a95989ce69049d7048b20326e3a6591c6ff24f6a75ebfaf27601b849e6f87c7ba706687e13cfe538e7c18657e0ac81d95b581345305a687d58a27e5c0faa03d28a923e770877a1a4c71dc59b8fd282ad1c6f92db434b2804b14") (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x131) (async) 09:32:25 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x1, 0x8000}, 0x0, 0x0, 0x0, 0x5, 0x0}}) 09:32:25 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0xa02) write$midi(r0, &(0x7f0000000080)="c3", 0x1) syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x10082) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000000c0)=0x7) write$bt_hci(r1, 0x0, 0x0) read$midi(r1, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0xa02) (async) write$midi(r0, &(0x7f0000000080)="c3", 0x1) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x10082) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000000c0)=0x7) (async) write$bt_hci(r1, 0x0, 0x0) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x7e}}}, 0x5) r2 = socket(0xf, 0x800, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 09:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x7e}}}, 0x5) r2 = socket(0xf, 0x800, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 09:32:25 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r0 = syz_open_dev$admmidi(&(0x7f0000000040), 0x0, 0xa02) write$midi(r0, &(0x7f0000000080)="c3", 0x1) syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x10082) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000000c0)=0x7) (async) write$bt_hci(r1, 0x0, 0x0) (async) read$midi(r1, 0x0, 0x0) 09:32:25 executing program 2: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000080)={0x1}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000140)=0x6, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000180)="32ab367f0131e5940a21ff8954c01edba374a14a5f3d58228f293d1e491b5ff174e671c547f8070a9ac50dcc32db43d0fa3df9101aa6c9d51effae00f8bd57b919624f5cec3652469c0299d3a45964653fce575654f21dbcdb57ac26d9c54549c1db041a43011cd5de56579b3d04572bf6133805c739ecd58d6ab2d3223bf44d85e67963f18dc10d5b15cdbbfcb1da231d1be07583a0da90ff70bbda64654fb41f1b4e46b02800e6e51431bcdc72ff671c098954be18531cf0a527fc4923dac4629f331643da83d4e33b3b3435989bd4cb766ec70775d9155de7fd26a903a344140f5fffe606a43d97a9e1e38cb5a57fa68c43472cd3453d") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) (async) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x388aaad94f65a83b, 0xe8, 0x0, 0x9}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0xb4, 0x0, "48a5105d3afd876412de455f4bb81b28a23accf9dcc870c513f94a7b299a2d95", 0x5, 0x8000, 0x3, 0x81, 0x106}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x101280) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x2}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) 09:32:25 executing program 2: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000080)={0x1}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_remove_cig={{0x2065, 0x1}, {0x7e}}}, 0x5) (async) r2 = socket(0xf, 0x800, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 09:32:25 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x4a503) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x7) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0xfffffffc, '\x00', &(0x7f0000000100)=0xe4}) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x8, 0xf92f, 0x2, 0x0, 0x4, 0xef73, 0x200, 0x400]}) 09:32:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x7, @sliced={0x2, [0x4, 0x5fb, 0xff, 0x1f, 0x0, 0xfff9, 0x7, 0x20, 0x97, 0x28, 0x6a5a, 0x6, 0x80, 0x4, 0x258, 0x4, 0x371, 0x3, 0x40, 0x20, 0x3, 0x0, 0x401, 0xffff, 0xff00, 0x2, 0x1ff, 0x2, 0x11, 0x4, 0x89, 0x1, 0xffff, 0x7, 0x52a, 0x5, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x1, 0x6, 0x7, 0xffe0, 0x40, 0x401, 0x6], 0x2}}) 09:32:25 executing program 2: ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000080)={0x1}) (async, rerun: 32) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (rerun: 32) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0xb4, 0x0, "48a5105d3afd876412de455f4bb81b28a23accf9dcc870c513f94a7b299a2d95", 0x5, 0x8000, 0x3, 0x81, 0x106}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:25 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x101280) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000080)={0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) 09:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x6fe, "801b52", 0x40, 0x8}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01240c00e80f1e730d2d38e3103642c0e73bda1ce1df284ec62f2cfb9e54ed7d3dfc3de26a785420e85a91e8b93be0eea28cc406e0f723f5f3741d9ef66a49fe85419309a3f9e18461d63e94708f6e0dbd108158b75c4bfd3e97c95a9e69186de1c32f4f364ee7"], 0x16) 09:32:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x7, @sliced={0x2, [0x4, 0x5fb, 0xff, 0x1f, 0x0, 0xfff9, 0x7, 0x20, 0x97, 0x28, 0x6a5a, 0x6, 0x80, 0x4, 0x258, 0x4, 0x371, 0x3, 0x40, 0x20, 0x3, 0x0, 0x401, 0xffff, 0xff00, 0x2, 0x1ff, 0x2, 0x11, 0x4, 0x89, 0x1, 0xffff, 0x7, 0x52a, 0x5, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x1, 0x6, 0x7, 0xffe0, 0x40, 0x401, 0x6], 0x2}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x7, @sliced={0x2, [0x4, 0x5fb, 0xff, 0x1f, 0x0, 0xfff9, 0x7, 0x20, 0x97, 0x28, 0x6a5a, 0x6, 0x80, 0x4, 0x258, 0x4, 0x371, 0x3, 0x40, 0x20, 0x3, 0x0, 0x401, 0xffff, 0xff00, 0x2, 0x1ff, 0x2, 0x11, 0x4, 0x89, 0x1, 0xffff, 0x7, 0x52a, 0x5, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x1, 0x6, 0x7, 0xffe0, 0x40, 0x401, 0x6], 0x2}}) (async) 09:32:25 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x4a503) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x7) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0xfffffffc, '\x00', &(0x7f0000000100)=0xe4}) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x8, 0xf92f, 0x2, 0x0, 0x4, 0xef73, 0x200, 0x400]}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x4a503) (async) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x7) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0xfffffffc, '\x00', &(0x7f0000000100)=0xe4}) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x8, 0xf92f, 0x2, 0x0, 0x4, 0xef73, 0x200, 0x400]}) (async) 09:32:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, 0x0, 0xffffffffffffff30) 09:32:25 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000000)) 09:32:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0xb4, 0x0, "48a5105d3afd876412de455f4bb81b28a23accf9dcc870c513f94a7b299a2d95", 0x5, 0x8000, 0x3, 0x81, 0x106}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb}, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x6fe, "801b52", 0x40, 0x8}) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01240c00e80f1e730d2d38e3103642c0e73bda1ce1df284ec62f2cfb9e54ed7d3dfc3de26a785420e85a91e8b93be0eea28cc406e0f723f5f3741d9ef66a49fe85419309a3f9e18461d63e94708f6e0dbd108158b75c4bfd3e97c95a9e69186de1c32f4f364ee7"], 0x16) 09:32:25 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000000)) 09:32:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, 0x0, 0xffffffffffffff30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) write$bt_hci(r2, 0x0, 0xffffffffffffff30) (async) 09:32:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffb}, 0x6) (async, rerun: 32) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x6fe, "801b52", 0x40, 0x8}) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01240c00e80f1e730d2d38e3103642c0e73bda1ce1df284ec62f2cfb9e54ed7d3dfc3de26a785420e85a91e8b93be0eea28cc406e0f723f5f3741d9ef66a49fe85419309a3f9e18461d63e94708f6e0dbd108158b75c4bfd3e97c95a9e69186de1c32f4f364ee7"], 0x16) 09:32:25 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x4a503) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x7) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0xfffffffc, '\x00', &(0x7f0000000100)=0xe4}) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x8, 0xf92f, 0x2, 0x0, 0x4, 0xef73, 0x200, 0x400]}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x4a503) (async) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x7) (async) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0xfffffffc, '\x00', &(0x7f0000000100)=0xe4}) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000080)={0x3, 0x1, [0x8, 0xf92f, 0x2, 0x0, 0x4, 0xef73, 0x200, 0x400]}) (async) 09:32:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$isdn_base(0x22, 0x3, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000040)={0x7, @sliced={0x2, [0x4, 0x5fb, 0xff, 0x1f, 0x0, 0xfff9, 0x7, 0x20, 0x97, 0x28, 0x6a5a, 0x6, 0x80, 0x4, 0x258, 0x4, 0x371, 0x3, 0x40, 0x20, 0x3, 0x0, 0x401, 0xffff, 0xff00, 0x2, 0x1ff, 0x2, 0x11, 0x4, 0x89, 0x1, 0xffff, 0x7, 0x52a, 0x5, 0x3, 0x2, 0x7, 0x3ff, 0x6, 0x1, 0x6, 0x7, 0xffe0, 0x40, 0x401, 0x6], 0x2}}) 09:32:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x404, "cede76", 0x0, 0x7}) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000140)=0x118) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, 0x0, 0x1bc}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1b, &(0x7f00000001c0)=""/27, 0x1f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x1, 0x5b}, 0x10, 0xffffffffffffffff}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x401, 0x3ff, 0x4, 0x20, r1, 0x3f, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xe}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x6, 0xff, 0x6, 0x9a22, 0x14, @dev={0xfe, 0x80, '\x00', 0x35}, @private1, 0x20, 0x40, 0x8, 0x9}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x3, 0x1f, 0x80000000, 0x882, r2, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x2, 0x6, 0x0, 0x3, 0xfffffffffffffff0, 0xf}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0xc20, 0xc1, &(0x7f0000000540)=""/193, 0x41100, 0x8, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r6, r7]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r2}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0xfe, 0x3, 0x7, 0x2}}}, 0xa) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000340)={"8890e489e26a5fd3ead3b6284470387b4400c94ce2adde842316b965cdc3", 0x5, 0x0, 0x401, 0x857, 0x7fff, 0x2, 0x1f, 0x6, [0x8, 0x9, 0x73, 0x4, 0x10001, 0x5, 0x0, 0x8001, 0x7f, 0x7, 0x5, 0x6, 0x200, 0x7, 0x2, 0x10000, 0x1, 0x0, 0x8000]}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x3, @addr=0x1}, 0x8, 0xc298, 0x39b721a9}) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x404, "cede76", 0x0, 0x7}) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000140)=0x118) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, 0x0, 0x1bc}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1b, &(0x7f00000001c0)=""/27, 0x1f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x1, 0x5b}, 0x10, 0xffffffffffffffff}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x401, 0x3ff, 0x4, 0x20, r1, 0x3f, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xe}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x6, 0xff, 0x6, 0x9a22, 0x14, @dev={0xfe, 0x80, '\x00', 0x35}, @private1, 0x20, 0x40, 0x8, 0x9}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x3, 0x1f, 0x80000000, 0x882, r2, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x2, 0x6, 0x0, 0x3, 0xfffffffffffffff0, 0xf}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0xc20, 0xc1, &(0x7f0000000540)=""/193, 0x41100, 0x8, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r6, r7]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r2}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0xfe, 0x3, 0x7, 0x2}}}, 0xa) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000340)={"8890e489e26a5fd3ead3b6284470387b4400c94ce2adde842316b965cdc3", 0x5, 0x0, 0x401, 0x857, 0x7fff, 0x2, 0x1f, 0x6, [0x8, 0x9, 0x73, 0x4, 0x10001, 0x5, 0x0, 0x8001, 0x7f, 0x7, 0x5, 0x6, 0x200, 0x7, 0x2, 0x10000, 0x1, 0x0, 0x8000]}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x3, @addr=0x1}, 0x8, 0xc298, 0x39b721a9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x404, "cede76", 0x0, 0x7}) (async) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000140)=0x118) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, 0x0, 0x1bc}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1b, &(0x7f00000001c0)=""/27, 0x1f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x1, 0x5b}, 0x10, 0xffffffffffffffff}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x401, 0x3ff, 0x4, 0x20, r1, 0x3f, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xe}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x6, 0xff, 0x6, 0x9a22, 0x14, @dev={0xfe, 0x80, '\x00', 0x35}, @private1, 0x20, 0x40, 0x8, 0x9}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x3, 0x1f, 0x80000000, 0x882, r2, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r7, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x2, 0x6, 0x0, 0x3, 0xfffffffffffffff0, 0xf}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0xc20, 0xc1, &(0x7f0000000540)=""/193, 0x41100, 0x8, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r6, r7]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r2}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0xfe, 0x3, 0x7, 0x2}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000340)={"8890e489e26a5fd3ead3b6284470387b4400c94ce2adde842316b965cdc3", 0x5, 0x0, 0x401, 0x857, 0x7fff, 0x2, 0x1f, 0x6, [0x8, 0x9, 0x73, 0x4, 0x10001, 0x5, 0x0, 0x8001, 0x7f, 0x7, 0x5, 0x6, 0x200, 0x7, 0x2, 0x10000, 0x1, 0x0, 0x8000]}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x3, @addr=0x1}, 0x8, 0xc298, 0x39b721a9}) (async) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, 0x0, 0xffffffffffffff30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) write$bt_hci(r2, 0x0, 0xffffffffffffff30) (async) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x18, 0x0, 0xffff7fff) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:26 executing program 1: syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x4000, 0x6c3, {}, {0x2, 0x0, 0xf9, 0x21, 0x0, 0x2, "11a941ea"}, 0x2b, 0x4, {}, 0x80040001, 0x0, r0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x1, @sliced={0x5, [0xf0, 0xfb56, 0x1, 0xd2, 0x4, 0x8cf, 0x9, 0x9, 0x8, 0x8000, 0x200, 0x3, 0x7ff, 0x35f0, 0x60, 0x5, 0x7f, 0x9, 0x2, 0xfaca, 0x1ff, 0x20, 0x299, 0x939, 0x1, 0x9, 0x8, 0x7, 0x7, 0xbb, 0x9, 0xf14, 0x5, 0x3, 0x4, 0x1f, 0xfff, 0x5, 0x80, 0xf17, 0x9, 0x401, 0x7, 0x4b, 0x1e, 0x7, 0x3, 0x3], 0x7}}) r3 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r3, 0x0, 0x0) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async, rerun: 64) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000000)) (rerun: 64) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x3, "1ecbdfc02b3def33a7f28737718dec8955fc41664a060268dfddaf06dd6a1b84", 0x0, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x3, "37c447", 0x3, 0x1f}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe}, 0xfda8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x1c00, 0x20303159, 0x1, @discrete={0x1ff, 0x9}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x8, 0x1ff, 0x3, 0x0, 0x0, 0x9, 0x10001, 0x10001, 0x80, 0x191, 0x8001, 0x850, 0x1, 0x4, 0x7, 0x3, 0x2, 0x101, 0x80, 0x6, 0x2b1, 0x6, 0x4, 0x9, 0x7fffffff, 0x6, 0x9c6, 0xa8, 0x1ff, 0x1, 0x8]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) write$bt_hci(r3, &(0x7f0000000200)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 09:32:26 executing program 1: syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x4000, 0x6c3, {}, {0x2, 0x0, 0xf9, 0x21, 0x0, 0x2, "11a941ea"}, 0x2b, 0x4, {}, 0x80040001, 0x0, r0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x1, @sliced={0x5, [0xf0, 0xfb56, 0x1, 0xd2, 0x4, 0x8cf, 0x9, 0x9, 0x8, 0x8000, 0x200, 0x3, 0x7ff, 0x35f0, 0x60, 0x5, 0x7f, 0x9, 0x2, 0xfaca, 0x1ff, 0x20, 0x299, 0x939, 0x1, 0x9, 0x8, 0x7, 0x7, 0xbb, 0x9, 0xf14, 0x5, 0x3, 0x4, 0x1f, 0xfff, 0x5, 0x80, 0xf17, 0x9, 0x401, 0x7, 0x4b, 0x1e, 0x7, 0x3, 0x3], 0x7}}) r3 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r3, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x4000, 0x6c3, {}, {0x2, 0x0, 0xf9, 0x21, 0x0, 0x2, "11a941ea"}, 0x2b, 0x4, {}, 0x80040001, 0x0, r0}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x1, @sliced={0x5, [0xf0, 0xfb56, 0x1, 0xd2, 0x4, 0x8cf, 0x9, 0x9, 0x8, 0x8000, 0x200, 0x3, 0x7ff, 0x35f0, 0x60, 0x5, 0x7f, 0x9, 0x2, 0xfaca, 0x1ff, 0x20, 0x299, 0x939, 0x1, 0x9, 0x8, 0x7, 0x7, 0xbb, 0x9, 0xf14, 0x5, 0x3, 0x4, 0x1f, 0xfff, 0x5, 0x80, 0xf17, 0x9, 0x401, 0x7, 0x4b, 0x1e, 0x7, 0x3, 0x3], 0x7}}) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r3, 0x0, 0x0) (async) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x404, "cede76", 0x0, 0x7}) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000140)=0x118) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, 0x0, 0x1bc}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1b, &(0x7f00000001c0)=""/27, 0x1f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x1, 0x5b}, 0x10, 0xffffffffffffffff}, 0x80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x401, 0x3ff, 0x4, 0x20, r1, 0x3f, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xe}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x6, 0xff, 0x6, 0x9a22, 0x14, @dev={0xfe, 0x80, '\x00', 0x35}, @private1, 0x20, 0x40, 0x8, 0x9}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x3, 0x1f, 0x80000000, 0x882, r2, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x2, 0x6, 0x0, 0x3, 0xfffffffffffffff0, 0xf}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0xc20, 0xc1, &(0x7f0000000540)=""/193, 0x41100, 0x8, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r6, r7]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r2}, 0x10) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0xfe, 0x3, 0x7, 0x2}}}, 0xa) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000340)={"8890e489e26a5fd3ead3b6284470387b4400c94ce2adde842316b965cdc3", 0x5, 0x0, 0x401, 0x857, 0x7fff, 0x2, 0x1f, 0x6, [0x8, 0x9, 0x73, 0x4, 0x10001, 0x5, 0x0, 0x8001, 0x7f, 0x7, 0x5, 0x6, 0x200, 0x7, 0x2, 0x10000, 0x1, 0x0, 0x8000]}) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x3, @addr=0x1}, 0x8, 0xc298, 0x39b721a9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x404, "cede76", 0x0, 0x7}) (async) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000140)=0x118) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, 0x0, 0x1bc}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1b, &(0x7f00000001c0)=""/27, 0x1f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x6, 0x1, 0x5b}, 0x10, 0xffffffffffffffff}, 0x80) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x401, 0x3ff, 0x4, 0x20, r1, 0x3f, '\x00', 0x0, r1, 0x2, 0x3, 0x2, 0xe}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x6, 0xff, 0x6, 0x9a22, 0x14, @dev={0xfe, 0x80, '\x00', 0x35}, @private1, 0x20, 0x40, 0x8, 0x9}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x3, 0x1f, 0x80000000, 0x882, r2, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r7, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x3}, @ldst={0x2, 0x2, 0x6, 0x0, 0x3, 0xfffffffffffffff0, 0xf}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000500)='GPL\x00', 0xc20, 0xc1, &(0x7f0000000540)=""/193, 0x41100, 0x8, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000700)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x9, 0x5, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r6, r7]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r2}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_scan_enable={{0x2042, 0x6}, {0xfe, 0x3, 0x7, 0x2}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000340)={"8890e489e26a5fd3ead3b6284470387b4400c94ce2adde842316b965cdc3", 0x5, 0x0, 0x401, 0x857, 0x7fff, 0x2, 0x1f, 0x6, [0x8, 0x9, 0x73, 0x4, 0x10001, 0x5, 0x0, 0x8001, 0x7f, 0x7, 0x5, 0x6, 0x200, 0x7, 0x2, 0x10000, 0x1, 0x0, 0x8000]}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000100)={{0x3, @addr=0x1}, 0x8, 0xc298, 0x39b721a9}) (async) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x3, "1ecbdfc02b3def33a7f28737718dec8955fc41664a060268dfddaf06dd6a1b84", 0x0, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x3, "37c447", 0x3, 0x1f}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe}, 0xfda8) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x1c00, 0x20303159, 0x1, @discrete={0x1ff, 0x9}}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x8, 0x1ff, 0x3, 0x0, 0x0, 0x9, 0x10001, 0x10001, 0x80, 0x191, 0x8001, 0x850, 0x1, 0x4, 0x7, 0x3, 0x2, 0x101, 0x80, 0x6, 0x2b1, 0x6, 0x4, 0x9, 0x7fffffff, 0x6, 0x9c6, 0xa8, 0x1ff, 0x1, 0x8]}) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) write$bt_hci(r3, &(0x7f0000000200)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x18, 0x0, 0xffff7fff) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x18, 0x0, 0xffff7fff) (async) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x8, 0xb2, 0x6, 0x40}}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "a3fd23", 0x8, 0x8}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x8, 0xb2, 0x6, 0x40}}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x8, 0xb2, 0x6, 0x40}}) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) (async) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "a3fd23", 0x8, 0x8}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "a3fd23", 0x8, 0x8}) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:26 executing program 1: syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x4000, 0x6c3, {}, {0x2, 0x0, 0xf9, 0x21, 0x0, 0x2, "11a941ea"}, 0x2b, 0x4, {}, 0x80040001, 0x0, r0}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x1, @sliced={0x5, [0xf0, 0xfb56, 0x1, 0xd2, 0x4, 0x8cf, 0x9, 0x9, 0x8, 0x8000, 0x200, 0x3, 0x7ff, 0x35f0, 0x60, 0x5, 0x7f, 0x9, 0x2, 0xfaca, 0x1ff, 0x20, 0x299, 0x939, 0x1, 0x9, 0x8, 0x7, 0x7, 0xbb, 0x9, 0xf14, 0x5, 0x3, 0x4, 0x1f, 0xfff, 0x5, 0x80, 0xf17, 0x9, 0x401, 0x7, 0x4b, 0x1e, 0x7, 0x3, 0x3], 0x7}}) r3 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r3, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000240), 0x3, 0x2) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x9, 0x4, 0x4, 0x4000, 0x6c3, {}, {0x2, 0x0, 0xf9, 0x21, 0x0, 0x2, "11a941ea"}, 0x2b, 0x4, {}, 0x80040001, 0x0, r0}) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0x1, @sliced={0x5, [0xf0, 0xfb56, 0x1, 0xd2, 0x4, 0x8cf, 0x9, 0x9, 0x8, 0x8000, 0x200, 0x3, 0x7ff, 0x35f0, 0x60, 0x5, 0x7f, 0x9, 0x2, 0xfaca, 0x1ff, 0x20, 0x299, 0x939, 0x1, 0x9, 0x8, 0x7, 0x7, 0xbb, 0x9, 0xf14, 0x5, 0x3, 0x4, 0x1f, 0xfff, 0x5, 0x80, 0xf17, 0x9, 0x401, 0x7, 0x4b, 0x1e, 0x7, 0x3, 0x3], 0x7}}) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r3, 0x0, 0x0) (async) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x18, 0x0, 0xffff7fff) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x18, 0x0, 0xffff7fff) (async) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x1, "925100", 0xdc, 0xfe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x1, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000080)={0x1, 0x1, 0x4, {0x8, 0xb2, 0x6, 0x40}}) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x3, "1ecbdfc02b3def33a7f28737718dec8955fc41664a060268dfddaf06dd6a1b84", 0x0, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x3, "37c447", 0x3, 0x1f}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe}, 0xfda8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x1c00, 0x20303159, 0x1, @discrete={0x1ff, 0x9}}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x8, 0x1ff, 0x3, 0x0, 0x0, 0x9, 0x10001, 0x10001, 0x80, 0x191, 0x8001, 0x850, 0x1, 0x4, 0x7, 0x3, 0x2, 0x101, 0x80, 0x6, 0x2b1, 0x6, 0x4, 0x9, 0x7fffffff, 0x6, 0x9c6, 0xa8, 0x1ff, 0x1, 0x8]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) write$bt_hci(r3, &(0x7f0000000200)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000180)={0x3, "1ecbdfc02b3def33a7f28737718dec8955fc41664a060268dfddaf06dd6a1b84", 0x0, 0x1}) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0x3, "37c447", 0x3, 0x1f}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xfffe}, 0xfda8) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x1c00, 0x20303159, 0x1, @discrete={0x1ff, 0x9}}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0x4, 0x8, 0x1ff, 0x3, 0x0, 0x0, 0x9, 0x10001, 0x10001, 0x80, 0x191, 0x8001, 0x850, 0x1, 0x4, 0x7, 0x3, 0x2, 0x101, 0x80, 0x6, 0x2b1, 0x6, 0x4, 0x9, 0x7fffffff, 0x6, 0x9c6, 0xa8, 0x1ff, 0x1, 0x8]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) (async) write$bt_hci(r3, &(0x7f0000000200)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa) (async) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48543) read$midi(r0, 0x0, 0x0) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "a3fd23", 0x8, 0x8}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0x3, "a3fd23", 0x8, 0x8}) (async) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x5, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x1, "925100", 0xdc, 0xfe}) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0xf784, 0x3, 0x4, 0x60, 0xa24d, {0x0, 0x2710}, {0x5, 0x2, 0x36, 0x9, 0x8, 0x1f, "5da23f20"}, 0xffff0001, 0x4, {}, 0x80000001, 0x0, r2}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a18d026df5b605edf4e770785c10d02dbecd9081d445258cd3383bb3b1240bcc8c277c91acdfffde4f6d03f8267fa423b3beedff3a03d009da880dd300848eb6f814b3cd96aebef1a6ef8507a150b2429c0d"], 0x16) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0xffffffffffffffff, 0x1, "925100", 0xdc, 0xfe}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48543) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48543) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x0, 0x3f) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x2, "b82c0e", 0x3, 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x8}}}, 0x7) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x0, '\x00', &(0x7f0000000040)=0x40}) write$bt_hci(r0, 0x0, 0x15) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a18d026df5b605edf4e770785c10d02dbecd9081d445258cd3383bb3b1240bcc8c277c91acdfffde4f6d03f8267fa423b3beedff3a03d009da880dd300848eb6f814b3cd96aebef1a6ef8507a150b2429c0d"], 0x16) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0xf784, 0x3, 0x4, 0x60, 0xa24d, {0x0, 0x2710}, {0x5, 0x2, 0x36, 0x9, 0x8, 0x1f, "5da23f20"}, 0xffff0001, 0x4, {}, 0x80000001, 0x0, r2}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x0, 0x3f) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x2, "b82c0e", 0x3, 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x8}}}, 0x7) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x0, '\x00', &(0x7f0000000040)=0x40}) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x10, 0x0, 0x3f) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x2, "b82c0e", 0x3, 0x3}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x8}}}, 0x7) (async) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x0, '\x00', &(0x7f0000000040)=0x40}) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48543) read$midi(r0, 0x0, 0x0) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0xf784, 0x3, 0x4, 0x60, 0xa24d, {0x0, 0x2710}, {0x5, 0x2, 0x36, 0x9, 0x8, 0x1f, "5da23f20"}, 0xffff0001, 0x4, {}, 0x80000001, 0x0, r2}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0xf784, 0x3, 0x4, 0x60, 0xa24d, {0x0, 0x2710}, {0x5, 0x2, 0x36, 0x9, 0x8, 0x1f, "5da23f20"}, 0xffff0001, 0x4, {}, 0x80000001, 0x0, r2}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a18d026df5b605edf4e770785c10d02dbecd9081d445258cd3383bb3b1240bcc8c277c91acdfffde4f6d03f8267fa423b3beedff3a03d009da880dd300848eb6f814b3cd96aebef1a6ef8507a150b2429c0d"], 0x16) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x0, 0x3f) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x2, "b82c0e", 0x3, 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x8}}}, 0x7) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x9, 0x0, '\x00', &(0x7f0000000040)=0x40}) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5}) read$midi(r0, 0x0, 0x0) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200004a4269410612b14f9b2963a19a026df5"], 0x16) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0x7, {0x7fffffff, 0x1ff, 0x2a6e, 0x2}}) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5}) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5}) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200004a4269410612b14f9b2963a19a026df5"], 0x16) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0x7, {0x7fffffff, 0x1ff, 0x2a6e, 0x2}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200004a4269410612b14f9b2963a19a026df5"], 0x16) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x4) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0x7, {0x7fffffff, 0x1ff, 0x2a6e, 0x2}}) (async) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x220600, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x5c1202, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000050000000600000000000001000000001c004b010000000000000003000000000200000001000000000080000200000000080000000000000b0000000000000904000000000000000600000604000000090000000900000009000000ff0000000f0000008000000010000000f9e70000040000000500000009000001faffffff0030615f00"], &(0x7f0000000540)=""/20, 0x99, 0x14, 0x1}, 0x20) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x4, 0x4, 0x0, 0x1a, r3, 0xb83a, '\x00', r1, r2, 0x2, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="85200000030000008520000003000000180000008100000000000000040000009500000000000000186a00b65fd89ba2ea6fa89b00000000a537c0ff04002000d0119e4e9dfe80a35e4f8d405f9589c36f4c3df5739c99d4"], &(0x7f0000000340)='GPL\x00', 0x5, 0xbb, &(0x7f0000000380)=""/187, 0x40f00, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x1ff, 0x5}, 0x10, 0x237ae, r8, 0x0, &(0x7f00000006c0)=[r3, r9, r3]}, 0x80) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x4, 0x9, 'x_\f', 0x7, 0x6}) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x3, @name="130fe271b580cfbc230a28f1c6fa6cac9af26bfb55b4600231a23d9f43107948"}, 0x8, 0x3, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x10000, 0x2], 0x400}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x1, 0x5}) read$midi(r0, 0x0, 0x0) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200004a4269410612b14f9b2963a19a026df5"], 0x16) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x3, 0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000080)={0x7, {0x7fffffff, 0x1ff, 0x2a6e, 0x2}}) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x3, @name="130fe271b580cfbc230a28f1c6fa6cac9af26bfb55b4600231a23d9f43107948"}, 0x8, 0x3, 0x4}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x10000, 0x2], 0x400}, 0x10) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x7, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 4: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = socket(0x2341d8b7a4092dfb, 0x800, 0xac) bind$bt_hci(r1, &(0x7f0000000880)={0x1f, 0x4, 0x2}, 0x6) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x220600, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x5c1202, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000050000000600000000000001000000001c004b010000000000000003000000000200000001000000000080000200000000080000000000000b0000000000000904000000000000000600000604000000090000000900000009000000ff0000000f0000008000000010000000f9e70000040000000500000009000001faffffff0030615f00"], &(0x7f0000000540)=""/20, 0x99, 0x14, 0x1}, 0x20) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x4, 0x4, 0x0, 0x1a, r3, 0xb83a, '\x00', r1, r2, 0x2, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="85200000030000008520000003000000180000008100000000000000040000009500000000000000186a00b65fd89ba2ea6fa89b00000000a537c0ff04002000d0119e4e9dfe80a35e4f8d405f9589c36f4c3df5739c99d4"], &(0x7f0000000340)='GPL\x00', 0x5, 0xbb, &(0x7f0000000380)=""/187, 0x40f00, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x1ff, 0x5}, 0x10, 0x237ae, r8, 0x0, &(0x7f00000006c0)=[r3, r9, r3]}, 0x80) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x4, 0x9, 'x_\f', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x220600, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x5c1202, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000050000000600000000000001000000001c004b010000000000000003000000000200000001000000000080000200000000080000000000000b0000000000000904000000000000000600000604000000090000000900000009000000ff0000000f0000008000000010000000f9e70000040000000500000009000001faffffff0030615f00"], &(0x7f0000000540)=""/20, 0x99, 0x14, 0x1}, 0x20) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r8, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x4, 0x4, 0x0, 0x1a, r3, 0xb83a, '\x00', r1, r2, 0x2, 0x3, 0x3}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="85200000030000008520000003000000180000008100000000000000040000009500000000000000186a00b65fd89ba2ea6fa89b00000000a537c0ff04002000d0119e4e9dfe80a35e4f8d405f9589c36f4c3df5739c99d4"], &(0x7f0000000340)='GPL\x00', 0x5, 0xbb, &(0x7f0000000380)=""/187, 0x40f00, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x1ff, 0x5}, 0x10, 0x237ae, r8, 0x0, &(0x7f00000006c0)=[r3, r9, r3]}, 0x80) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x4, 0x9, 'x_\f', 0x7, 0x6}) (async) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x3, @name="130fe271b580cfbc230a28f1c6fa6cac9af26bfb55b4600231a23d9f43107948"}, 0x8, 0x3, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x10000, 0x2], 0x400}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x3, @name="130fe271b580cfbc230a28f1c6fa6cac9af26bfb55b4600231a23d9f43107948"}, 0x8, 0x3, 0x4}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x10000, 0x2], 0x400}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:26 executing program 4: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = socket(0x2341d8b7a4092dfb, 0x800, 0xac) bind$bt_hci(r1, &(0x7f0000000880)={0x1f, 0x4, 0x2}, 0x6) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0xfffc, "1fbeb8", 0x9, 0xff}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x2, "e54a99", 0x80, 0x1}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b0a63a19a0a6df5"], 0x16) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x9, 0x58503) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$dsp(r1, &(0x7f00000011c0)=""/12, 0xc) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="165f9f5773467aa9179bdcc017f30301187021d3a18662bc6748449df44a907860610a70d2a85df08de5e0022ae74a597c7951f8de8b12473d25fe68d50b3b3ee7b0655c54a50cb6547ee88e1785f8f736d6569893cbdf8ea8928ded65760850", 0x60, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000001180)={r2, 0x1000, &(0x7f0000000180)=""/4096}) 09:32:26 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x7fffffff, '\x00', &(0x7f0000000000)=0xf8}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @switch_role={{0x80b, 0x7}, {@none}}}, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x220600, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x5c1202, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000050000000600000000000001000000001c004b010000000000000003000000000200000001000000000080000200000000080000000000000b0000000000000904000000000000000600000604000000090000000900000009000000ff0000000f0000008000000010000000f9e70000040000000500000009000001faffffff0030615f00"], &(0x7f0000000540)=""/20, 0x99, 0x14, 0x1}, 0x20) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x4, 0x4, 0x0, 0x1a, r3, 0xb83a, '\x00', r1, r2, 0x2, 0x3, 0x3}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="85200000030000008520000003000000180000008100000000000000040000009500000000000000186a00b65fd89ba2ea6fa89b00000000a537c0ff04002000d0119e4e9dfe80a35e4f8d405f9589c36f4c3df5739c99d4"], &(0x7f0000000340)='GPL\x00', 0x5, 0xbb, &(0x7f0000000380)=""/187, 0x40f00, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x1ff, 0x5}, 0x10, 0x237ae, r8, 0x0, &(0x7f00000006c0)=[r3, r9, r3]}, 0x80) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x4, 0x9, 'x_\f', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x220600, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x5c1202, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r6, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000050000000600000000000001000000001c004b010000000000000003000000000200000001000000000080000200000000080000000000000b0000000000000904000000000000000600000604000000090000000900000009000000ff0000000f0000008000000010000000f9e70000040000000500000009000001faffffff0030615f00"], &(0x7f0000000540)=""/20, 0x99, 0x14, 0x1}, 0x20) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r8, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x4, 0x4, 0x0, 0x1a, r3, 0xb83a, '\x00', r1, r2, 0x2, 0x3, 0x3}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="85200000030000008520000003000000180000008100000000000000040000009500000000000000186a00b65fd89ba2ea6fa89b00000000a537c0ff04002000d0119e4e9dfe80a35e4f8d405f9589c36f4c3df5739c99d4"], &(0x7f0000000340)='GPL\x00', 0x5, 0xbb, &(0x7f0000000380)=""/187, 0x40f00, 0xc, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0x1ff, 0x5}, 0x10, 0x237ae, r8, 0x0, &(0x7f00000006c0)=[r3, r9, r3]}, 0x80) (async) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x4, 0x9, 'x_\f', 0x7, 0x6}) (async) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0xfffc, "1fbeb8", 0x9, 0xff}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x2, "e54a99", 0x80, 0x1}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b0a63a19a0a6df5"], 0x16) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0xfffc, "1fbeb8", 0x9, 0xff}) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x2, "e54a99", 0x80, 0x1}) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b0a63a19a0a6df5"], 0x16) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) (async) 09:32:26 executing program 4: ioctl$VIDIOC_G_ENC_INDEX(0xffffffffffffffff, 0x8818564c, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = socket(0x2341d8b7a4092dfb, 0x800, 0xac) bind$bt_hci(r1, &(0x7f0000000880)={0x1f, 0x4, 0x2}, 0x6) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x9, 0x58503) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) (async) read$midi(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (rerun: 32) read$dsp(r1, &(0x7f00000011c0)=""/12, 0xc) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="165f9f5773467aa9179bdcc017f30301187021d3a18662bc6748449df44a907860610a70d2a85df08de5e0022ae74a597c7951f8de8b12473d25fe68d50b3b3ee7b0655c54a50cb6547ee88e1785f8f736d6569893cbdf8ea8928ded65760850", 0x60, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000001180)={r2, 0x1000, &(0x7f0000000180)=""/4096}) 09:32:26 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x7fffffff, '\x00', &(0x7f0000000000)=0xf8}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @switch_role={{0x80b, 0x7}, {@none}}}, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) write$bt_hci(r2, &(0x7f0000000040)={0x1, @switch_role={{0x80b, 0x7}, {@none}}}, 0xb) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:26 executing program 2: ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x7fffffff, '\x00', &(0x7f0000000000)=0xf8}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x7fffffff, '\x00', &(0x7f0000000000)=0xf8}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0xfffc, "1fbeb8", 0x9, 0xff}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x2, "e54a99", 0x80, 0x1}) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b0a63a19a0a6df5"], 0x16) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0x1, 0xfffc, "1fbeb8", 0x9, 0xff}) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x2, 0x2, "e54a99", 0x80, 0x1}) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b0a63a19a0a6df5"], 0x16) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) (async) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) (async) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x9, 0x58503) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) (async) read$midi(r0, 0x0, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$dsp(r1, &(0x7f00000011c0)=""/12, 0xc) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="165f9f5773467aa9179bdcc017f30301187021d3a18662bc6748449df44a907860610a70d2a85df08de5e0022ae74a597c7951f8de8b12473d25fe68d50b3b3ee7b0655c54a50cb6547ee88e1785f8f736d6569893cbdf8ea8928ded65760850", 0x60, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000001180)={r2, 0x1000, &(0x7f0000000180)=""/4096}) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000066f3965d1686fe4af70279ca8128d0f52fd136aca5fb673c8eab3c61e192da9e06a68b81fd4c9ffb3e4d0bc6f011e01c44bd9fcb7bd038beeb707498d8aa04acba0792ad9c8f4f996d2f7c0df391b95611a21beca0fd8bf3433200043460171a0dc5983a3c30e529a70b13289f61cc58a7bf41585385e0f4736b0f40ea80df64397308de1daf225bcf8777a8a3e2b6440e81b28dce042ae99b8c72d8ee80f788b39432c77e73a9076d5dae377a2f"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x7, 0xfffffffb, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='netfs_sreq\x00', r1}, 0x10) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x5, 0x4) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x15) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @switch_role={{0x80b, 0x7}, {@none}}}, 0xb) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x4, [0x9, 0xfffffffd], 0xcf}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:26 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="00800010fffffa5affffffff421400480065000005049078ac1404bbe000000294040000440c59200000000200000100441c1441e000000100000077239d5551fd4803ac1414aa00000002e0000001800000008307efac141443000ca68012cc57e169f4e7633de8713962311020e01f5baafde21867460a9b4786e44f484f499b21c9b905e36e39a3552766eadd5938131415b67769b29a0b8531b3cd4c62c4722d9dc51a514a70ffcf971d8b14685381342e58c71a7606d5bd098989bc8f62f31e4745c3d3ff85bc07b469be6efe89f104e4eac24b94ec1519bac05f8f5afb0e996bf146469cf8634dc621d454234c36bc8656722164a18c056129b0da551f8a4e97b1"]}) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000500)={&(0x7f0000000340)="1cdfba2e382adb1cfd01666e12fb634f6366faf06f73ca3be08112a1b8ba30f699ebf7dea8ac7e7f9f93487684182c593283d40bc64a2c8f28d055276b2cfc0ade8ed5610d87e5888fd5b4925de55dfad49dfd37dba1b6ffbb46a68b01987282206375e8cae8ca0f95b4e6fa088c542419c2cd2648b5d02dec9efc9a6fb157bcc6aa6934457080b5303c0ff9328e429945a5b9574fd1194d168f7b0f6e028b2c3a21f629", 0xa4, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f00000005c0)={r6, 0x45, &(0x7f0000000540)=""/69}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x10, 0x7c0, 0x6, 0x400, {{0x18, 0x4, 0x2, 0x8, 0x60, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x7a1}]}, @generic={0xc3, 0x4, "c959"}, @generic={0x44, 0xf, "c473c35409a5293d8d7b464407"}, @lsrr={0x83, 0x23, 0xfa, [@broadcast, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xf98}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000180)={0x0, 0x1, [0x7f, 0x5, 0x401, 0x6, 0x7, 0x2, 0xc4cc, 0x80]}) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x15) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000066f3965d1686fe4af70279ca8128d0f52fd136aca5fb673c8eab3c61e192da9e06a68b81fd4c9ffb3e4d0bc6f011e01c44bd9fcb7bd038beeb707498d8aa04acba0792ad9c8f4f996d2f7c0df391b95611a21beca0fd8bf3433200043460171a0dc5983a3c30e529a70b13289f61cc58a7bf41585385e0f4736b0f40ea80df64397308de1daf225bcf8777a8a3e2b6440e81b28dce042ae99b8c72d8ee80f788b39432c77e73a9076d5dae377a2f"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x7, 0xfffffffb, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='netfs_sreq\x00', r1}, 0x10) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x5, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000066f3965d1686fe4af70279ca8128d0f52fd136aca5fb673c8eab3c61e192da9e06a68b81fd4c9ffb3e4d0bc6f011e01c44bd9fcb7bd038beeb707498d8aa04acba0792ad9c8f4f996d2f7c0df391b95611a21beca0fd8bf3433200043460171a0dc5983a3c30e529a70b13289f61cc58a7bf41585385e0f4736b0f40ea80df64397308de1daf225bcf8777a8a3e2b6440e81b28dce042ae99b8c72d8ee80f788b39432c77e73a9076d5dae377a2f"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x7, 0xfffffffb, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='netfs_sreq\x00', r1}, 0x10) (async) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) (async) write$bt_hci(r0, 0x0, 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x5, 0x4) (async) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000200), 0x4, 0x3ffb80d452258026) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) read$midi(r1, &(0x7f0000000000)=""/18, 0x12) read$midi(r0, &(0x7f0000000140)=""/124, 0x7c) syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f00000000c0)=0x24a) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f00000001c0)=0x2) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x4, [0x9, 0xfffffffd], 0xcf}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000200), 0x4, 0x3ffb80d452258026) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) read$midi(r1, &(0x7f0000000000)=""/18, 0x12) read$midi(r0, &(0x7f0000000140)=""/124, 0x7c) syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f00000000c0)=0x24a) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f00000001c0)=0x2) syz_open_dev$amidi(&(0x7f0000000200), 0x4, 0x3ffb80d452258026) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) (async) read$midi(r0, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) read$midi(r1, &(0x7f0000000000)=""/18, 0x12) (async) read$midi(r0, &(0x7f0000000140)=""/124, 0x7c) (async) syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) (async) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f00000000c0)=0x24a) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f00000001c0)=0x2) (async) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x1, 0x3, 0x7, {0x101, 0x3, 0x5, 0x43}}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x78, 0x5, 0x100e, 0x3, 0x3, 0x1, 0x1, 0x5}}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x2, 0x3f, &(0x7f0000000040)=""/63}) 09:32:26 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="00800010fffffa5affffffff421400480065000005049078ac1404bbe000000294040000440c59200000000200000100441c1441e000000100000077239d5551fd4803ac1414aa00000002e0000001800000008307efac141443000ca68012cc57e169f4e7633de8713962311020e01f5baafde21867460a9b4786e44f484f499b21c9b905e36e39a3552766eadd5938131415b67769b29a0b8531b3cd4c62c4722d9dc51a514a70ffcf971d8b14685381342e58c71a7606d5bd098989bc8f62f31e4745c3d3ff85bc07b469be6efe89f104e4eac24b94ec1519bac05f8f5afb0e996bf146469cf8634dc621d454234c36bc8656722164a18c056129b0da551f8a4e97b1"]}) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000500)={&(0x7f0000000340)="1cdfba2e382adb1cfd01666e12fb634f6366faf06f73ca3be08112a1b8ba30f699ebf7dea8ac7e7f9f93487684182c593283d40bc64a2c8f28d055276b2cfc0ade8ed5610d87e5888fd5b4925de55dfad49dfd37dba1b6ffbb46a68b01987282206375e8cae8ca0f95b4e6fa088c542419c2cd2648b5d02dec9efc9a6fb157bcc6aa6934457080b5303c0ff9328e429945a5b9574fd1194d168f7b0f6e028b2c3a21f629", 0xa4, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f00000005c0)={r6, 0x45, &(0x7f0000000540)=""/69}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x10, 0x7c0, 0x6, 0x400, {{0x18, 0x4, 0x2, 0x8, 0x60, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x7a1}]}, @generic={0xc3, 0x4, "c959"}, @generic={0x44, 0xf, "c473c35409a5293d8d7b464407"}, @lsrr={0x83, 0x23, 0xfa, [@broadcast, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xf98}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000180)={0x0, 0x1, [0x7f, 0x5, 0x401, 0x6, 0x7, 0x2, 0xc4cc, 0x80]}) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x4e, [0x6, 0x1], 0x7fff}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000200), 0x4, 0x3ffb80d452258026) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) (async) read$midi(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) read$midi(r1, &(0x7f0000000000)=""/18, 0x12) (async) read$midi(r0, &(0x7f0000000140)=""/124, 0x7c) syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f00000000c0)=0x24a) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r2, 0xc0045103, &(0x7f00000001c0)=0x2) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000066f3965d1686fe4af70279ca8128d0f52fd136aca5fb673c8eab3c61e192da9e06a68b81fd4c9ffb3e4d0bc6f011e01c44bd9fcb7bd038beeb707498d8aa04acba0792ad9c8f4f996d2f7c0df391b95611a21beca0fd8bf3433200043460171a0dc5983a3c30e529a70b13289f61cc58a7bf41585385e0f4736b0f40ea80df64397308de1daf225bcf8777a8a3e2b6440e81b28dce042ae99b8c72d8ee80f788b39432c77e73a9076d5dae377a2f"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x7, 0xfffffffb, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='netfs_sreq\x00', r1}, 0x10) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0)=0x5, 0x4) 09:32:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x4, [0x9, 0xfffffffd], 0xcf}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x4e, [0x6, 0x1], 0x7fff}, 0x10) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x1, 0x3, 0x7, {0x101, 0x3, 0x5, 0x43}}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x78, 0x5, 0x100e, 0x3, 0x3, 0x1, 0x1, 0x5}}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x2, 0x3f, &(0x7f0000000040)=""/63}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x1, 0x3, 0x7, {0x101, 0x3, 0x5, 0x43}}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x78, 0x5, 0x100e, 0x3, 0x3, 0x1, 0x1, 0x5}}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x2, 0x3f, &(0x7f0000000040)=""/63}) (async) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48503) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x3e, 0x101000) keyctl$join(0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x235, 0x20800) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000140)=0x88) read$midi(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000200)={0x0, 0x449, 0x6, 0x1, 0x6}) write$midi(r0, &(0x7f0000000080)="381a3639f41236c3352c3685cd9e65bdd15ba5c260148ed419c03fe347d77a88830e9a4eb0cb332da477c80a7a12bf9c9733157064cb653d6e10ceee8a003a4c783ac542a706e5", 0x47) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000180)={0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000001c0)) 09:32:26 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="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"]}) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000500)={&(0x7f0000000340)="1cdfba2e382adb1cfd01666e12fb634f6366faf06f73ca3be08112a1b8ba30f699ebf7dea8ac7e7f9f93487684182c593283d40bc64a2c8f28d055276b2cfc0ade8ed5610d87e5888fd5b4925de55dfad49dfd37dba1b6ffbb46a68b01987282206375e8cae8ca0f95b4e6fa088c542419c2cd2648b5d02dec9efc9a6fb157bcc6aa6934457080b5303c0ff9328e429945a5b9574fd1194d168f7b0f6e028b2c3a21f629", 0xa4, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f00000005c0)={r6, 0x45, &(0x7f0000000540)=""/69}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x10, 0x7c0, 0x6, 0x400, {{0x18, 0x4, 0x2, 0x8, 0x60, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x7a1}]}, @generic={0xc3, 0x4, "c959"}, @generic={0x44, 0xf, "c473c35409a5293d8d7b464407"}, @lsrr={0x83, 0x23, 0xfa, [@broadcast, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xf98}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000180)={0x0, 0x1, [0x7f, 0x5, 0x401, 0x6, 0x7, 0x2, 0xc4cc, 0x80]}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="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"]}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000500)={&(0x7f0000000340)="1cdfba2e382adb1cfd01666e12fb634f6366faf06f73ca3be08112a1b8ba30f699ebf7dea8ac7e7f9f93487684182c593283d40bc64a2c8f28d055276b2cfc0ade8ed5610d87e5888fd5b4925de55dfad49dfd37dba1b6ffbb46a68b01987282206375e8cae8ca0f95b4e6fa088c542419c2cd2648b5d02dec9efc9a6fb157bcc6aa6934457080b5303c0ff9328e429945a5b9574fd1194d168f7b0f6e028b2c3a21f629", 0xa4}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f00000005c0)={r6, 0x45, &(0x7f0000000540)=""/69}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @loopback}}}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r8, 0x29, 0x1f, 0x40, 0x8c, 0x50, @ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x8, 0x5, 0x80000001}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x10, 0x7c0, 0x6, 0x400, {{0x18, 0x4, 0x2, 0x8, 0x60, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x7a1}]}, @generic={0xc3, 0x4, "c959"}, @generic={0x44, 0xf, "c473c35409a5293d8d7b464407"}, @lsrr={0x83, 0x23, 0xfa, [@broadcast, @private=0xa010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}}) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xf98}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000180)={0x0, 0x1, [0x7f, 0x5, 0x401, 0x6, 0x7, 0x2, 0xc4cc, 0x80]}) (async) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0xfffd, 0xb06, "69f935", 0x3, 0xff}) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x284501, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x4, 0x4}) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d11, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000001c0)="b55fbc98e4a583fd1e2b87c4de4234d9bcc9bbbd21954261f73b154d3554fdf408499c73ddcbd7494139cfc671ea6409090ad23d44163b0366e9a4bfd292efcb9517238f485edc3b") ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0x6, '\x00', &(0x7f0000000140)=0x40}) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48503) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x3e, 0x101000) keyctl$join(0x1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x235, 0x20800) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000140)=0x88) read$midi(r1, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000200)={0x0, 0x449, 0x6, 0x1, 0x6}) write$midi(r0, &(0x7f0000000080)="381a3639f41236c3352c3685cd9e65bdd15ba5c260148ed419c03fe347d77a88830e9a4eb0cb332da477c80a7a12bf9c9733157064cb653d6e10ceee8a003a4c783ac542a706e5", 0x47) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000180)={0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x8}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000001c0)) syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48503) (async) syz_open_dev$dmmidi(&(0x7f0000000000), 0x3e, 0x101000) (async) keyctl$join(0x1, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000100), 0x235, 0x20800) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000140)=0x88) (async) read$midi(r1, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000200)={0x0, 0x449, 0x6, 0x1, 0x6}) (async) write$midi(r0, &(0x7f0000000080)="381a3639f41236c3352c3685cd9e65bdd15ba5c260148ed419c03fe347d77a88830e9a4eb0cb332da477c80a7a12bf9c9733157064cb653d6e10ceee8a003a4c783ac542a706e5", 0x47) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r4, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000180)={0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x8}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000001c0)) (async) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x4e, [0x6, 0x1], 0x7fff}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:26 executing program 0: ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000080)={"cd73dcd74623a609a824cc9b8f883677f82b0c864e2169794e82c19e5898", 0x10001, 0x2, 0x401, 0x2, 0xa9cf, 0x1, 0x1ff, 0x4, [0x4, 0x800, 0xf0, 0x80000001, 0x7f, 0x303, 0x101, 0x4, 0x3, 0x0, 0x8, 0xd78, 0x1, 0x1000, 0x28, 0xff, 0xfff, 0xa4, 0x913]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f10920120000abcf69044492e1206ec45eedf57ef752f500000000000000"], 0x16) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x8}) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0xfffd, 0xb06, "69f935", 0x3, 0xff}) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x284501, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x4, 0x4}) (async, rerun: 32) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d11, &(0x7f0000000040)) (async, rerun: 32) write$bt_hci(r0, 0x0, 0x15) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000001c0)="b55fbc98e4a583fd1e2b87c4de4234d9bcc9bbbd21954261f73b154d3554fdf408499c73ddcbd7494139cfc671ea6409090ad23d44163b0366e9a4bfd292efcb9517238f485edc3b") (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0x6, '\x00', &(0x7f0000000140)=0x40}) 09:32:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x1, 0x3, 0x7, {0x101, 0x3, 0x5, 0x43}}) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x78, 0x5, 0x100e, 0x3, 0x3, 0x1, 0x1, 0x5}}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x2, 0x3f, &(0x7f0000000040)=""/63}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000100)={0x1, 0x3, 0x7, {0x101, 0x3, 0x5, 0x43}}) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000140)={0x1, 0x0, {0x78, 0x5, 0x100e, 0x3, 0x3, 0x1, 0x1, 0x5}}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x2, 0x3f, &(0x7f0000000040)=""/63}) (async) 09:32:26 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x8}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x8}) (async) 09:32:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getrusage(0x1, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x401, 0x4) 09:32:26 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48503) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x3e, 0x101000) keyctl$join(0x1, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) r3 = syz_open_dev$admmidi(&(0x7f0000000100), 0x235, 0x20800) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000140)=0x88) read$midi(r1, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000200)={0x0, 0x449, 0x6, 0x1, 0x6}) (async, rerun: 32) write$midi(r0, &(0x7f0000000080)="381a3639f41236c3352c3685cd9e65bdd15ba5c260148ed419c03fe347d77a88830e9a4eb0cb332da477c80a7a12bf9c9733157064cb653d6e10ceee8a003a4c783ac542a706e5", 0x47) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000180)={0x1, 0x4, 0xfffffffffffffffc, 0x0, 0x8}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000001c0)) 09:32:26 executing program 0: ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000080)={"cd73dcd74623a609a824cc9b8f883677f82b0c864e2169794e82c19e5898", 0x10001, 0x2, 0x401, 0x2, 0xa9cf, 0x1, 0x1ff, 0x4, [0x4, 0x800, 0xf0, 0x80000001, 0x7f, 0x303, 0x101, 0x4, 0x3, 0x0, 0x8, 0xd78, 0x1, 0x1000, 0x28, 0xff, 0xfff, 0xa4, 0x913]}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f10920120000abcf69044492e1206ec45eedf57ef752f500000000000000"], 0x16) 09:32:26 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffd, 0x4}, 0x6) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x7, {0x8, 0x6, 0x400, 0x2}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xe54fb) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000080)) 09:32:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0xfffd, 0xb06, "69f935", 0x3, 0xff}) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x284501, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x4, 0x4}) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d11, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000001c0)="b55fbc98e4a583fd1e2b87c4de4234d9bcc9bbbd21954261f73b154d3554fdf408499c73ddcbd7494139cfc671ea6409090ad23d44163b0366e9a4bfd292efcb9517238f485edc3b") ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0x6, '\x00', &(0x7f0000000140)=0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000100)={0xfffd, 0xb06, "69f935", 0x3, 0xff}) (async) write$bt_hci(r1, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x284501, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x4, 0x4}) (async) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d11, &(0x7f0000000040)) (async) write$bt_hci(r0, 0x0, 0x15) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000001c0)="b55fbc98e4a583fd1e2b87c4de4234d9bcc9bbbd21954261f73b154d3554fdf408499c73ddcbd7494139cfc671ea6409090ad23d44163b0366e9a4bfd292efcb9517238f485edc3b") (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000180)={0x0, 0x9, 0x6, '\x00', &(0x7f0000000140)=0x40}) (async) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f00000000c0)={0x0, 0x0, 0x9, '\x00', &(0x7f0000000080)=0x8}) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getrusage(0x1, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x401, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) getrusage(0x1, &(0x7f0000000080)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x401, 0x4) (async) 09:32:27 executing program 0: ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000080)={"cd73dcd74623a609a824cc9b8f883677f82b0c864e2169794e82c19e5898", 0x10001, 0x2, 0x401, 0x2, 0xa9cf, 0x1, 0x1ff, 0x4, [0x4, 0x800, 0xf0, 0x80000001, 0x7f, 0x303, 0x101, 0x4, 0x3, 0x0, 0x8, 0xd78, 0x1, 0x1000, 0x28, 0xff, 0xfff, 0xa4, 0x913]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f10920120000abcf69044492e1206ec45eedf57ef752f500000000000000"], 0x16) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000080)={"cd73dcd74623a609a824cc9b8f883677f82b0c864e2169794e82c19e5898", 0x10001, 0x2, 0x401, 0x2, 0xa9cf, 0x1, 0x1ff, 0x4, [0x4, 0x800, 0xf0, 0x80000001, 0x7f, 0x303, 0x101, 0x4, 0x3, 0x0, 0x8, 0xd78, 0x1, 0x1000, 0x28, 0xff, 0xfff, 0xa4, 0x913]}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f10920120000abcf69044492e1206ec45eedf57ef752f500000000000000"], 0x16) (async) 09:32:27 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffd, 0x4}, 0x6) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x7, {0x8, 0x6, 0x400, 0x2}}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async, rerun: 32) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xe54fb) (async, rerun: 32) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000080)) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x400000) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x3, @addr=0x5}, 0x8, 0x6, 0x7fffffffffffffff}) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getrusage(0x1, &(0x7f0000000080)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x401, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) getrusage(0x1, &(0x7f0000000080)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x401, 0x4) (async) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x400000) (async) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x3, @addr=0x5}, 0x8, 0x6, 0x7fffffffffffffff}) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:27 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xfffd, 0x4}, 0x6) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x101, 0x7, {0x8, 0x6, 0x400, 0x2}}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xe54fb) (async) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000080)) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x3, @addr=0x5}, 0x8, 0x6, 0x7fffffffffffffff}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) (async) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x3, @addr=0x5}, 0x8, 0x6, 0x7fffffffffffffff}) (async) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) syz_open_dev$admmidi(&(0x7f0000000000), 0x1, 0x400000) (async) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000040)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)="dbd61568dbf636ea82d497") 09:32:27 executing program 2: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000000)) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xb, @sliced={0x400, [0x9, 0xffdb, 0x1d, 0x7bf, 0x7, 0x402, 0x400, 0x81, 0x3, 0x8, 0x3, 0x6f, 0x20, 0x7, 0x5, 0x8, 0x2, 0x1a5, 0xfffb, 0x5, 0x0, 0x0, 0x5, 0x9be9, 0x800, 0x2000, 0x7, 0x3f, 0x0, 0x20, 0x8, 0x1, 0x3ff, 0x213, 0x7fff, 0x8000, 0xff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x2, 0x7, 0x4], 0x6}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mr_dereg\x00', r1}, 0x10) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0xc8, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)="dbd61568dbf636ea82d497") 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000040)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x48503) read$midi(r0, &(0x7f0000000040)=""/236, 0xec) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 2: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000000)) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xb, @sliced={0x400, [0x9, 0xffdb, 0x1d, 0x7bf, 0x7, 0x402, 0x400, 0x81, 0x3, 0x8, 0x3, 0x6f, 0x20, 0x7, 0x5, 0x8, 0x2, 0x1a5, 0xfffb, 0x5, 0x0, 0x0, 0x5, 0x9be9, 0x800, 0x2000, 0x7, 0x3f, 0x0, 0x20, 0x8, 0x1, 0x3ff, 0x213, 0x7fff, 0x8000, 0xff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x2, 0x7, 0x4], 0x6}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mr_dereg\x00', r1}, 0x10) 09:32:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x3ad) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000080)={"d39ec93a870aeaad33b1770b7b710911cd194743c26d53ead00fd6a7d10c", 0x1, 0x2, 0x0, 0x0, 0x800, 0x7e94, 0x100, 0x5, [0x24e, 0x8, 0x400, 0x3, 0x80, 0x20, 0x3, 0x20, 0x3f, 0xfffffa6a, 0x10000, 0xf095, 0x88, 0x5, 0x0, 0xff, 0x7ff, 0xfff, 0x100]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) write$bt_hci(r1, 0x0, 0x15) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffc, 0x2}, 0x6) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 32) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000040)="dbd61568dbf636ea82d497") (rerun: 32) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xff, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) [ 3500.452570] Bluetooth: hci1 command 0x0401 tx timeout 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x48503) read$midi(r0, &(0x7f0000000040)=""/236, 0xec) (async, rerun: 64) read$midi(r0, 0x0, 0x0) (rerun: 64) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xff, 0x4) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x48503) read$midi(r0, &(0x7f0000000040)=""/236, 0xec) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x5, 0x48503) (async) read$midi(r0, &(0x7f0000000040)=""/236, 0xec) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0xff, 0x4) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:27 executing program 2: ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000000)) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0xb, @sliced={0x400, [0x9, 0xffdb, 0x1d, 0x7bf, 0x7, 0x402, 0x400, 0x81, 0x3, 0x8, 0x3, 0x6f, 0x20, 0x7, 0x5, 0x8, 0x2, 0x1a5, 0xfffb, 0x5, 0x0, 0x0, 0x5, 0x9be9, 0x800, 0x2000, 0x7, 0x3f, 0x0, 0x20, 0x8, 0x1, 0x3ff, 0x213, 0x7fff, 0x8000, 0xff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x3, 0x4, 0x7, 0x2, 0x7, 0x4], 0x6}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='mr_dereg\x00', r1}, 0x10) 09:32:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x3ad) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000080)={"d39ec93a870aeaad33b1770b7b710911cd194743c26d53ead00fd6a7d10c", 0x1, 0x2, 0x0, 0x0, 0x800, 0x7e94, 0x100, 0x5, [0x24e, 0x8, 0x400, 0x3, 0x80, 0x20, 0x3, 0x20, 0x3f, 0xfffffa6a, 0x10000, 0xf095, 0x88, 0x5, 0x0, 0xff, 0x7ff, 0xfff, 0x100]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) write$bt_hci(r1, 0x0, 0x15) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x3ad) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000080)={"d39ec93a870aeaad33b1770b7b710911cd194743c26d53ead00fd6a7d10c", 0x1, 0x2, 0x0, 0x0, 0x800, 0x7e94, 0x100, 0x5, [0x24e, 0x8, 0x400, 0x3, 0x80, 0x20, 0x3, 0x20, 0x3f, 0xfffffa6a, 0x10000, 0xf095, 0x88, 0x5, 0x0, 0xff, 0x7ff, 0xfff, 0x100]}) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) (async) write$bt_hci(r1, 0x0, 0x15) (async) 09:32:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x430800, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xf02, 0x4) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(0xffffffffffffffff, &(0x7f0000000000)=""/36, 0x24) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a1ba026df5967557da20494ad749247b68008497ac16df1a83a0ea5fc9f0a3f87e23f5e048d4774bba4a1f3e9697cf7c12f71495bbfad0136cab1c76a9befe0faaec75b58cd5c09fbfdb6758bbcf700648666d14e2b33fcb1b0ea309390323152b3a0c52b951d903d092289c916f037cc113afce57c22bbd31f49f23739a1b53ee8081c1feba6d4d4c0d88309a512a00000000000000"], 0x16) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)="d24d146f7e1d57b08f61390d535032c6ff614bd63dad59cc39093f6a5ee44e50ff8cec3748eb4a90ab48d0227ace683df21a223d63cd2d9f29aae455659e88f8bb3f510343f8dc0adbaf3cd211784f6139b79e96d4d46e67c8a1785e9c6f5f8d14d4a420ae") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xec, 0x1, 0x6, 0x80, 0x8000, 0x1}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(0xffffffffffffffff, &(0x7f0000000000)=""/36, 0x24) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x430800, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xf02, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x430800, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xf02, 0x4) (async) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)="d24d146f7e1d57b08f61390d535032c6ff614bd63dad59cc39093f6a5ee44e50ff8cec3748eb4a90ab48d0227ace683df21a223d63cd2d9f29aae455659e88f8bb3f510343f8dc0adbaf3cd211784f6139b79e96d4d46e67c8a1785e9c6f5f8d14d4a420ae") (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:27 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x3ad) socket$isdn_base(0x22, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000080)={"d39ec93a870aeaad33b1770b7b710911cd194743c26d53ead00fd6a7d10c", 0x1, 0x2, 0x0, 0x0, 0x800, 0x7e94, 0x100, 0x5, [0x24e, 0x8, 0x400, 0x3, 0x80, 0x20, 0x3, 0x20, 0x3f, 0xfffffa6a, 0x10000, 0xf095, 0x88, 0x5, 0x0, 0xff, 0x7ff, 0xfff, 0x100]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) write$bt_hci(r1, 0x0, 0x15) 09:32:27 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x430800, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0xf02, 0x4) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000040)="d24d146f7e1d57b08f61390d535032c6ff614bd63dad59cc39093f6a5ee44e50ff8cec3748eb4a90ab48d0227ace683df21a223d63cd2d9f29aae455659e88f8bb3f510343f8dc0adbaf3cd211784f6139b79e96d4d46e67c8a1785e9c6f5f8d14d4a420ae") (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xec, 0x1, 0x6, 0x80, 0x8000, 0x1}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a1ba026df5967557da20494ad749247b68008497ac16df1a83a0ea5fc9f0a3f87e23f5e048d4774bba4a1f3e9697cf7c12f71495bbfad0136cab1c76a9befe0faaec75b58cd5c09fbfdb6758bbcf700648666d14e2b33fcb1b0ea309390323152b3a0c52b951d903d092289c916f037cc113afce57c22bbd31f49f23739a1b53ee8081c1feba6d4d4c0d88309a512a00000000000000"], 0x16) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)="3727aaed4c3ed46403092db94edc7fdeae7a8ac99323d316067809e99e9faf558623af993b23a7648493b54626ba2176f788b88ecf8fe91e82350190f8b8a089bbcc4f7977b20f38b9185ae9f390d9ee3031737dbd620f709d7e69717a56025209cac55771eec56479078b7d95cf0955cf8ea20901d1003655aac37c7c0d531577d798c138f94f66a77ef727bd5c83ced223865217665317ce3e37f51b67a087fb701174d2151af719f225fa7b7a9613530e60981cafcffcfe29afeffcb6caf1486a63a31d689e94b2cb979d1e70b829bf9ce635da9797ece2a5f35b101b87574af2d78365f4316053640927cfe1205ce79e") 09:32:27 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xec, 0x1, 0x6, 0x80, 0x8000, 0x1}) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xec, 0x1, 0x6, 0x80, 0x8000, 0x1}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a1ba026df5967557da20494ad749247b68008497ac16df1a83a0ea5fc9f0a3f87e23f5e048d4774bba4a1f3e9697cf7c12f71495bbfad0136cab1c76a9befe0faaec75b58cd5c09fbfdb6758bbcf700648666d14e2b33fcb1b0ea309390323152b3a0c52b951d903d092289c916f037cc113afce57c22bbd31f49f23739a1b53ee8081c1feba6d4d4c0d88309a512a00000000000000"], 0x16) (rerun: 64) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2e8bfd98d0a0681b, 0x1, 0x4, {0x7, 0x8, 0x4, 0x23a31e51}}) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(0xffffffffffffffff, &(0x7f0000000000)=""/36, 0x24) (async) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x2}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)="3727aaed4c3ed46403092db94edc7fdeae7a8ac99323d316067809e99e9faf558623af993b23a7648493b54626ba2176f788b88ecf8fe91e82350190f8b8a089bbcc4f7977b20f38b9185ae9f390d9ee3031737dbd620f709d7e69717a56025209cac55771eec56479078b7d95cf0955cf8ea20901d1003655aac37c7c0d531577d798c138f94f66a77ef727bd5c83ced223865217665317ce3e37f51b67a087fb701174d2151af719f225fa7b7a9613530e60981cafcffcfe29afeffcb6caf1486a63a31d689e94b2cb979d1e70b829bf9ce635da9797ece2a5f35b101b87574af2d78365f4316053640927cfe1205ce79e") 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) 09:32:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xc8, 0x0, 0x2020, 0x4, 0x4, 0x7, 0x2, 0x2}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="80ce00080000005600000020431b00cc0064000007049078ac1414bbe000000107175c0a010100ac1414aae0000002e00000010a01010188129531af5e313dc801fcef0fd490e0ae57443c4821e0000001000003bd0a010100000000497f0000010000014cac1414bb00000006ac1414bb0000001eacbc2c14143a000001cdac1414bb00000063442cce41ac1414bb000001d1ac1414bb00010000ac1414aa000000037f000001000000016401010100000002071379000000000a0101020a010101e000000144141c14bb00000001"]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xc0, 0x6, 0x7f, 0xa}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000200)) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) read$midi(r0, &(0x7f0000000000)=""/39, 0x27) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2e8bfd98d0a0681b, 0x1, 0x4, {0x7, 0x8, 0x4, 0x23a31e51}}) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfffd, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000040)="3727aaed4c3ed46403092db94edc7fdeae7a8ac99323d316067809e99e9faf558623af993b23a7648493b54626ba2176f788b88ecf8fe91e82350190f8b8a089bbcc4f7977b20f38b9185ae9f390d9ee3031737dbd620f709d7e69717a56025209cac55771eec56479078b7d95cf0955cf8ea20901d1003655aac37c7c0d531577d798c138f94f66a77ef727bd5c83ced223865217665317ce3e37f51b67a087fb701174d2151af719f225fa7b7a9613530e60981cafcffcfe29afeffcb6caf1486a63a31d689e94b2cb979d1e70b829bf9ce635da9797ece2a5f35b101b87574af2d78365f4316053640927cfe1205ce79e") 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) read$midi(r0, &(0x7f0000000000)=""/39, 0x27) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) read$midi(r0, &(0x7f0000000000)=""/39, 0x27) (async) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xc8, 0x0, 0x2020, 0x4, 0x4, 0x7, 0x2, 0x2}}) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="80ce00080000005600000020431b00cc0064000007049078ac1414bbe000000107175c0a010100ac1414aae0000002e00000010a01010188129531af5e313dc801fcef0fd490e0ae57443c4821e0000001000003bd0a010100000000497f0000010000014cac1414bb00000006ac1414bb0000001eacbc2c14143a000001cdac1414bb00000063442cce41ac1414bb000001d1ac1414bb00010000ac1414aa000000037f000001000000016401010100000002071379000000000a0101020a010101e000000144141c14bb00000001"]}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xc0, 0x6, 0x7f, 0xa}) (async) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) (async) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000200)) (async) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2e8bfd98d0a0681b, 0x1, 0x4, {0x7, 0x8, 0x4, 0x23a31e51}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x2e8bfd98d0a0681b, 0x1, 0x4, {0x7, 0x8, 0x4, 0x23a31e51}}) (async) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x2}, 0x6) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000011c0)=0x10000, 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r3, 0x20, &(0x7f0000001140)={&(0x7f0000000080)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/182, 0xb6}}, 0x10) bind$bt_hci(r2, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xc8, 0x0, 0x2020, 0x4, 0x4, 0x7, 0x2, 0x2}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="80ce00080000005600000020431b00cc0064000007049078ac1414bbe000000107175c0a010100ac1414aae0000002e00000010a01010188129531af5e313dc801fcef0fd490e0ae57443c4821e0000001000003bd0a010100000000497f0000010000014cac1414bb00000006ac1414bb0000001eacbc2c14143a000001cdac1414bb00000063442cce41ac1414bb000001d1ac1414bb00010000ac1414aa000000037f000001000000016401010100000002071379000000000a0101020a010101e000000144141c14bb00000001"]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xc0, 0x6, 0x7f, 0xa}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000200)) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xc8, 0x0, 0x2020, 0x4, 0x4, 0x7, 0x2, 0x2}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) syz_open_dev$vivid(&(0x7f0000000240), 0x0, 0x2) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r4, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="80ce00080000005600000020431b00cc0064000007049078ac1414bbe000000107175c0a010100ac1414aae0000002e00000010a01010188129531af5e313dc801fcef0fd490e0ae57443c4821e0000001000003bd0a010100000000497f0000010000014cac1414bb00000006ac1414bb0000001eacbc2c14143a000001cdac1414bb00000063442cce41ac1414bb000001d1ac1414bb00010000ac1414aa000000037f000001000000016401010100000002071379000000000a0101020a010101e000000144141c14bb00000001"]}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xc0, 0x6, 0x7f, 0xa}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) (async) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000200)) (async) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) (async) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040)=0x172) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async, rerun: 32) read$midi(r0, &(0x7f0000000000)=""/39, 0x27) (rerun: 32) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x4a1b, [0x6, 0x8], 0x6bc}, 0x10) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000140)=0x6ad) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000080)) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040)=0x172) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040)=0x172) (async) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @win={{0x10000, 0x100, 0x8, 0x3}, 0x8, 0xfffffffb, &(0x7f00000000c0)={{0x1, 0xfff, 0x3, 0x2}, &(0x7f0000000080)={{0x6, 0x5, 0xfffffffd, 0xfff}}}, 0xf3b, &(0x7f0000000100)="5ab3a7df9213e4c9b8ed6434c368c4e28b49a1a395397303e9c24b8c70dccb5e19163a0c88e9dc04671072151cd6d3b98f0ae51f4a5b50a24298ba6750b27fae3f5b544f8db5aa645468d13ec1d92d7b858563a47bc1d33bf7236c02779f98c71c8d4a58b412e9913d5107ebdee8061d06afe9d7f92bec"}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x5, 0xb, 0x0, 0x80000000}) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x4, 0x40000000], 0x5}, 0x10) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000011c0)=0x10000, 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r3, 0x20, &(0x7f0000001140)={&(0x7f0000000080)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/182, 0xb6}}, 0x10) (async, rerun: 32) bind$bt_hci(r2, &(0x7f0000000000), 0x6) (rerun: 32) write$bt_hci(r0, 0x0, 0x15) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x4a1b, [0x6, 0x8], 0x6bc}, 0x10) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000100)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000140)=0x6ad) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x4a1b, [0x6, 0x8], 0x6bc}, 0x10) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000100)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000140)=0x6ad) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000080)) (async) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040)=0x172) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000040)=0x172) (async) 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x4, 0x40000000], 0x5}, 0x10) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @win={{0x10000, 0x100, 0x8, 0x3}, 0x8, 0xfffffffb, &(0x7f00000000c0)={{0x1, 0xfff, 0x3, 0x2}, &(0x7f0000000080)={{0x6, 0x5, 0xfffffffd, 0xfff}}}, 0xf3b, &(0x7f0000000100)="5ab3a7df9213e4c9b8ed6434c368c4e28b49a1a395397303e9c24b8c70dccb5e19163a0c88e9dc04671072151cd6d3b98f0ae51f4a5b50a24298ba6750b27fae3f5b544f8db5aa645468d13ec1d92d7b858563a47bc1d33bf7236c02779f98c71c8d4a58b412e9913d5107ebdee8061d06afe9d7f92bec"}}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x5, 0xb, 0x0, 0x80000000}) 09:32:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000011c0)=0x10000, 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={r3, 0x20, &(0x7f0000001140)={&(0x7f0000000080)=""/4096, 0x1000, 0x0, &(0x7f0000001080)=""/182, 0xb6}}, 0x10) bind$bt_hci(r2, &(0x7f0000000000), 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000040)="df14681b5352adb2e5") 09:32:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000000c0)={0x4a1b, [0x6, 0x8], 0x6bc}, 0x10) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000100)) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000140)=0x6ad) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, &(0x7f0000000080)) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x5, @win={{0x10000, 0x100, 0x8, 0x3}, 0x8, 0xfffffffb, &(0x7f00000000c0)={{0x1, 0xfff, 0x3, 0x2}, &(0x7f0000000080)={{0x6, 0x5, 0xfffffffd, 0xfff}}}, 0xf3b, &(0x7f0000000100)="5ab3a7df9213e4c9b8ed6434c368c4e28b49a1a395397303e9c24b8c70dccb5e19163a0c88e9dc04671072151cd6d3b98f0ae51f4a5b50a24298ba6750b27fae3f5b544f8db5aa645468d13ec1d92d7b858563a47bc1d33bf7236c02779f98c71c8d4a58b412e9913d5107ebdee8061d06afe9d7f92bec"}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x5, 0xb, 0x0, 0x80000000}) 09:32:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000040)="df14681b5352adb2e5") 09:32:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x4, 0x40000000], 0x5}, 0x10) 09:32:27 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x100001, 0x3, 0x80000}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x9, {0x3ff, 0x8001, 0x2, 0x5}}) 09:32:27 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1}, 0x6) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000000)=0xac) read$midi(r0, 0x0, 0x0) 09:32:27 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x7, {0xffff, 0x0, 0x52, 0x7fffffff}}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x400, 0x1, 0x1, 0xffc8, 0x9, 0x4, 0x6}, &(0x7f0000000140)={0x80, 0x8c91, 0x100000001, 0x6e56, 0x20, 0x7, 0x5, 0x40}, &(0x7f0000000180)={0x5, 0x7c7a, 0x6, 0xfff, 0x9, 0x20b, 0x16, 0xfffffffffffffffa}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none, 0xee3027fb}}}, 0xe) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x9, 0xb, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1}, 0x6) (async) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000000)=0xac) read$midi(r0, 0x0, 0x0) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$sock_bt_hci(r0, 0x800448d7, &(0x7f0000000040)="df14681b5352adb2e5") 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x100001, 0x3, 0x80000}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x9, {0x3ff, 0x8001, 0x2, 0x5}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x100001, 0x3, 0x80000}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x9, {0x3ff, 0x8001, 0x2, 0x5}}) (async) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none, 0xee3027fb}}}, 0xe) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket(0x9, 0xb, 0x10001) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1}, 0x6) (async) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000000)=0xac) read$midi(r0, 0x0, 0x0) 09:32:28 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x7, {0xffff, 0x0, 0x52, 0x7fffffff}}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x400, 0x1, 0x1, 0xffc8, 0x9, 0x4, 0x6}, &(0x7f0000000140)={0x80, 0x8c91, 0x100000001, 0x6e56, 0x20, 0x7, 0x5, 0x40}, &(0x7f0000000180)={0x5, 0x7c7a, 0x6, 0xfff, 0x9, 0x20b, 0x16, 0xfffffffffffffffa}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x7, {0xffff, 0x0, 0x52, 0x7fffffff}}) (async) pselect6(0x40, &(0x7f0000000100)={0x9, 0x400, 0x1, 0x1, 0xffc8, 0x9, 0x4, 0x6}, &(0x7f0000000140)={0x80, 0x8c91, 0x100000001, 0x6e56, 0x20, 0x7, 0x5, 0x40}, &(0x7f0000000180)={0x5, 0x7c7a, 0x6, 0xfff, 0x9, 0x20b, 0x16, 0xfffffffffffffffa}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x76, 0xfffffffc], 0x1000}, 0x10) 09:32:28 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x5, {0x7, 0xfffffffc, 0x40, 0x40}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x2}) read$midi(r1, 0x0, 0x0) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2, 0x100001, 0x3, 0x80000}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x9, {0x3ff, 0x8001, 0x2, 0x5}}) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none, 0xee3027fb}}}, 0xe) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x9, 0xb, 0x10001) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @user_passkey_reply={{0x42e, 0xa}, {@none, 0xee3027fb}}}, 0xe) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket(0x9, 0xb, 0x10001) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) 09:32:28 executing program 0: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x7, {0xffff, 0x0, 0x52, 0x7fffffff}}) pselect6(0x40, &(0x7f0000000100)={0x9, 0x400, 0x1, 0x1, 0xffc8, 0x9, 0x4, 0x6}, &(0x7f0000000140)={0x80, 0x8c91, 0x100000001, 0x6e56, 0x20, 0x7, 0x5, 0x40}, &(0x7f0000000180)={0x5, 0x7c7a, 0x6, 0xfff, 0x9, 0x20b, 0x16, 0xfffffffffffffffa}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x3]}, 0x8}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x76, 0xfffffffc], 0x1000}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x76, 0xfffffffc], 0x1000}, 0x10) (async) 09:32:28 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x5, {0x7, 0xfffffffc, 0x40, 0x40}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x2}) read$midi(r1, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x5, {0x7, 0xfffffffc, 0x40, 0x40}}) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x2}) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/252, 0xfc, 0x0, &(0x7f0000000180)=""/137, 0x89}}, 0x10) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000080)={"9d665fa6a5156a7678f5ecf5977ca114d143c3f69ab9ed240294b2d415e7", 0x5, 0x1, 0x401, 0x7fffffff, 0x2, 0x4, 0x0, 0x2, [0x2, 0x2, 0x6, 0x3, 0x8, 0x1, 0x1, 0x101, 0x0, 0x200, 0x1f, 0x92e, 0x5af, 0xfffffffb, 0x47496084, 0xfffffffc, 0x7, 0xffff, 0x7]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x1}, 0x7, 0x1, 0x0, 0x0, 0x0}}) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x76, 0xfffffffc], 0x1000}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x76, 0xfffffffc], 0x1000}, 0x10) (async) 09:32:28 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x5, {0x7, 0xfffffffc, 0x40, 0x40}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x2}) read$midi(r1, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x5, {0x7, 0xfffffffc, 0x40, 0x40}}) (async) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000100)={0x2}) (async) read$midi(r1, 0x0, 0x0) (async) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000080)={"9d665fa6a5156a7678f5ecf5977ca114d143c3f69ab9ed240294b2d415e7", 0x5, 0x1, 0x401, 0x7fffffff, 0x2, 0x4, 0x0, 0x2, [0x2, 0x2, 0x6, 0x3, 0x8, 0x1, 0x1, 0x101, 0x0, 0x200, 0x1f, 0x92e, 0x5af, 0xfffffffb, 0x47496084, 0xfffffffc, 0x7, 0xffff, 0x7]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x1}, 0x7, 0x1, 0x0, 0x0, 0x0}}) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/252, 0xfc, 0x0, &(0x7f0000000180)=""/137, 0x89}}, 0x10) (rerun: 32) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x800, [0x2, 0x5], 0x100}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/252, 0xfc, 0x0, &(0x7f0000000180)=""/137, 0x89}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/252, 0xfc, 0x0, &(0x7f0000000180)=""/137, 0x89}}, 0x10) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000080)={"9d665fa6a5156a7678f5ecf5977ca114d143c3f69ab9ed240294b2d415e7", 0x5, 0x1, 0x401, 0x7fffffff, 0x2, 0x4, 0x0, 0x2, [0x2, 0x2, 0x6, 0x3, 0x8, 0x1, 0x1, 0x101, 0x0, 0x200, 0x1f, 0x92e, 0x5af, 0xfffffffb, 0x47496084, 0xfffffffc, 0x7, 0xffff, 0x7]}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x1}, 0x7, 0x1, 0x0, 0x0, 0x0}}) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x9, 0x800) read$midi(r0, 0x0, 0x0) 09:32:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x0, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfdcf) socket(0x59f5a27f2c3b8ffd, 0x800, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1801c0, 0x0) write$bt_hci(r1, 0x0, 0x15) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @sdr={0x41414270, 0xfffffffc}}) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x9, 0x800) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x9, 0x800) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000040)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x800, [0x2, 0x5], 0x100}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r0 = socket(0x0, 0x5, 0x0) (rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfdcf) (async) socket(0x59f5a27f2c3b8ffd, 0x800, 0x8) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1801c0, 0x0) (rerun: 32) write$bt_hci(r1, 0x0, 0x15) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @sdr={0x41414270, 0xfffffffc}}) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @sdr={0x41414270, 0xfffffffc}}) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0xffffffff, "fbd571a45fcfb4e2cb58ec2148782f4e252e00979535e30e49c9c78ba9c35964", 0x0, 0x4f, 0x7ff, 0xff0000, 0x2}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f000, 0x0) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRES8=r3], 0x15) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x9, 0x800) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x9, 0x800) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @create_conn_cancel={{0x408, 0x6}, {@none}}}, 0xa) (async) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x800, [0x2, 0x5], 0x100}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @sdr={0x41414270, 0xfffffffc}}) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x2, @sdr={0x41414270, 0xfffffffc}}) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0xffffffff, "fbd571a45fcfb4e2cb58ec2148782f4e252e00979535e30e49c9c78ba9c35964", 0x0, 0x4f, 0x7ff, 0xff0000, 0x2}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f000, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRES8=r3], 0x15) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xf27d, 0x20) read$midi(r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x7, 0x100) read$midi(r1, &(0x7f0000000080)=""/202, 0xca) 09:32:28 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x3, 0x0, 0x102, 0x1, {0x1, 0xb2, 0xffff7fff, 0x4}}) syz_open_dev$usbmon(&(0x7f0000000140), 0x7fffffffffffffff, 0xc0080) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000001c0)={0x1, 0x1, @start={0x4}}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0xc448caae8775d11, @sdr={0x31303453, 0xafd}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x7, 0x7fc, 0x2022, 0x5, 0xe, 0x4, 0x2, 0x5}}) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) 09:32:28 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000001340), 0xcc11, 0x442580) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000001400)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$usbmon(&(0x7f0000001380), 0xfffffffeffffffff, 0x30482) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x4, 0xd, 0xafdf, 0xfff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001280)={0x3, 0x7, "546b94", 0xd5, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001240)={0x0, r2}, 0x10) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000013c0)={0x59c6, [0x200, 0x5], 0xcf}, 0x10) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001300)={&(0x7f00000012c0)="3266d03b0183689eb91f3b28c77bb9358524c1787e41e58f400373105793", 0x1e}) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000001540)="9752f50ef7add6519f001825df1a5537184454d2e4b30179ce1f4cba4d9e7b657a5108590062e605a157c44fea10fd9b38c0f8484b68ed7fc3734e113af0206a0c770eeb92b3938e1dedff0cecbe8069cece38ae1b8cc7ad3c0f8bbedfb3bf332af0f9c0de1675db95a0b7d53d3444ce5940cd234159c3a413904db1265e62bb83d2e6411aaf000c108320a9e4028dbd84784f75be667e2a8b314aa6ffd98f361e4420037c79") 09:32:28 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = socket(0x0, 0x5, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfdcf) (async) socket(0x59f5a27f2c3b8ffd, 0x800, 0x8) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x1801c0, 0x0) write$bt_hci(r1, 0x0, 0x15) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xdc2, @loopback, 0x9}, {0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, 0xffffffffffffffff, {[0x1, 0x8, 0xfffffffa, 0x4, 0x25, 0x0, 0x1]}}, 0x5c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xf27d, 0x20) read$midi(r0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x7, 0x100) read$midi(r1, &(0x7f0000000080)=""/202, 0xca) 09:32:28 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000001340), 0xcc11, 0x442580) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000001400)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$usbmon(&(0x7f0000001380), 0xfffffffeffffffff, 0x30482) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x4, 0xd, 0xafdf, 0xfff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001280)={0x3, 0x7, "546b94", 0xd5, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001240)={0x0, r2}, 0x10) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000013c0)={0x59c6, [0x200, 0x5], 0xcf}, 0x10) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001300)={&(0x7f00000012c0)="3266d03b0183689eb91f3b28c77bb9358524c1787e41e58f400373105793", 0x1e}) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000001540)="9752f50ef7add6519f001825df1a5537184454d2e4b30179ce1f4cba4d9e7b657a5108590062e605a157c44fea10fd9b38c0f8484b68ed7fc3734e113af0206a0c770eeb92b3938e1dedff0cecbe8069cece38ae1b8cc7ad3c0f8bbedfb3bf332af0f9c0de1675db95a0b7d53d3444ce5940cd234159c3a413904db1265e62bb83d2e6411aaf000c108320a9e4028dbd84784f75be667e2a8b314aa6ffd98f361e4420037c79") syz_open_dev$dmmidi(&(0x7f0000001340), 0xcc11, 0x442580) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000001400)) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_open_dev$usbmon(&(0x7f0000001380), 0xfffffffeffffffff, 0x30482) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x4, 0xd, 0xafdf, 0xfff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001280)={0x3, 0x7, "546b94", 0xd5, 0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001240)={0x0, r2}, 0x10) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000013c0)={0x59c6, [0x200, 0x5], 0xcf}, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001300)={&(0x7f00000012c0)="3266d03b0183689eb91f3b28c77bb9358524c1787e41e58f400373105793", 0x1e}) (async) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000001540)="9752f50ef7add6519f001825df1a5537184454d2e4b30179ce1f4cba4d9e7b657a5108590062e605a157c44fea10fd9b38c0f8484b68ed7fc3734e113af0206a0c770eeb92b3938e1dedff0cecbe8069cece38ae1b8cc7ad3c0f8bbedfb3bf332af0f9c0de1675db95a0b7d53d3444ce5940cd234159c3a413904db1265e62bb83d2e6411aaf000c108320a9e4028dbd84784f75be667e2a8b314aa6ffd98f361e4420037c79") (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0xffffffff, "fbd571a45fcfb4e2cb58ec2148782f4e252e00979535e30e49c9c78ba9c35964", 0x0, 0x4f, 0x7ff, 0xff0000, 0x2}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20f000, 0x0) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRES8=r3], 0x15) 09:32:28 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x3, 0x0, 0x102, 0x1, {0x1, 0xb2, 0xffff7fff, 0x4}}) syz_open_dev$usbmon(&(0x7f0000000140), 0x7fffffffffffffff, 0xc0080) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000001c0)={0x1, 0x1, @start={0x4}}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0xc448caae8775d11, @sdr={0x31303453, 0xafd}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x7, 0x7fc, 0x2022, 0x5, 0xe, 0x4, 0x2, 0x5}}) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x3, 0x0, 0x102, 0x1, {0x1, 0xb2, 0xffff7fff, 0x4}}) (async) syz_open_dev$usbmon(&(0x7f0000000140), 0x7fffffffffffffff, 0xc0080) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000001c0)={0x1, 0x1, @start={0x4}}) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0xc448caae8775d11, @sdr={0x31303453, 0xafd}}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x7, 0x7fc, 0x2022, 0x5, 0xe, 0x4, 0x2, 0x5}}) (async) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) (async) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xdc2, @loopback, 0x9}, {0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, 0xffffffffffffffff, {[0x1, 0x8, 0xfffffffa, 0x4, 0x25, 0x0, 0x1]}}, 0x5c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xdc2, @loopback, 0x9}, {0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, 0xffffffffffffffff, {[0x1, 0x8, 0xfffffffa, 0x4, 0x25, 0x0, 0x1]}}, 0x5c) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0xf27d, 0x20) read$midi(r0, 0x0, 0x0) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x7, 0x100) read$midi(r1, &(0x7f0000000080)=""/202, 0xca) 09:32:28 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x3, 0x0, 0x102, 0x1, {0x1, 0xb2, 0xffff7fff, 0x4}}) syz_open_dev$usbmon(&(0x7f0000000140), 0x7fffffffffffffff, 0xc0080) (async) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f00000001c0)={0x1, 0x1, @start={0x4}}) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000400)={0xc448caae8775d11, @sdr={0x31303453, 0xafd}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x7, 0x7fc, 0x2022, 0x5, 0xe, 0x4, 0x2, 0x5}}) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:28 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000001340), 0xcc11, 0x442580) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000001400)) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$usbmon(&(0x7f0000001380), 0xfffffffeffffffff, 0x30482) write$bt_hci(r1, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6, 0x4, 0xd, 0xafdf, 0xfff}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x1000, &(0x7f0000000100)=""/4096, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001100)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0x2, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000001280)={0x3, 0x7, "546b94", 0xd5, 0x1}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001240)={0x0, r2}, 0x10) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f00000013c0)={0x59c6, [0x200, 0x5], 0xcf}, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000001300)={&(0x7f00000012c0)="3266d03b0183689eb91f3b28c77bb9358524c1787e41e58f400373105793", 0x1e}) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000001540)="9752f50ef7add6519f001825df1a5537184454d2e4b30179ce1f4cba4d9e7b657a5108590062e605a157c44fea10fd9b38c0f8484b68ed7fc3734e113af0206a0c770eeb92b3938e1dedff0cecbe8069cece38ae1b8cc7ad3c0f8bbedfb3bf332af0f9c0de1675db95a0b7d53d3444ce5940cd234159c3a413904db1265e62bb83d2e6411aaf000c108320a9e4028dbd84784f75be667e2a8b314aa6ffd98f361e4420037c79") 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x100000000, 0x2cc703) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x80, 0x208580) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xdc2, @loopback, 0x9}, {0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, 0xffffffffffffffff, {[0x1, 0x8, 0xfffffffa, 0x4, 0x25, 0x0, 0x1]}}, 0x5c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0xdc2, @loopback, 0x9}, {0xa, 0x4e22, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}, 0xffffffffffffffff, {[0x1, 0x8, 0xfffffffa, 0x4, 0x25, 0x0, 0x1]}}, 0x5c) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (rerun: 32) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x5, {0xc68, 0x10000, 0x0, 0x7}}) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000140)={0x6, 0x5, 0x1, 0x2, 0x800000, 0x1f, 0x8}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xa01c, 0x7, 0x4, 0x2, 0x34d0, {}, {0x1, 0x0, 0x1, 0xd2, 0x95, 0x6, "97a3287f"}, 0x1, 0x4, {}, 0xdbe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df516818fa621be6f208321b0b3a56a46910210b966d4f1629022cb2eaa20f4d2f685eeaf10acffd95999d0ef9261d2cf872a5a629e9f0e354840175b8c256dd3d62e1dab8a93d40c082c95c3d011112d1625f898128b8030ac132b6c9d536cd7debb70dc2dc47ce069e707000000a0caf7b5e26735f78828d02a66fb6e9b"], 0x16) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x1, 0x2, "18ad95", 0x6e, 0x8e}) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x100000000, 0x2cc703) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000), 0x80, 0x208580) syz_open_dev$amidi(&(0x7f0000000040), 0x100000000, 0x2cc703) (async) read$midi(r0, 0x0, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x80, 0x208580) (async) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x5, {0xc68, 0x10000, 0x0, 0x7}}) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000140)={0x6, 0x5, 0x1, 0x2, 0x800000, 0x1f, 0x8}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xa01c, 0x7, 0x4, 0x2, 0x34d0, {}, {0x1, 0x0, 0x1, 0xd2, 0x95, 0x6, "97a3287f"}, 0x1, 0x4, {}, 0xdbe}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df516818fa621be6f208321b0b3a56a46910210b966d4f1629022cb2eaa20f4d2f685eeaf10acffd95999d0ef9261d2cf872a5a629e9f0e354840175b8c256dd3d62e1dab8a93d40c082c95c3d011112d1625f898128b8030ac132b6c9d536cd7debb70dc2dc47ce069e707000000a0caf7b5e26735f78828d02a66fb6e9b"], 0x16) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x1, 0x2, "18ad95", 0x6e, 0x8e}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000140)={0x6, 0x5, 0x1, 0x2, 0x800000, 0x1f, 0x8}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xa01c, 0x7, 0x4, 0x2, 0x34d0, {}, {0x1, 0x0, 0x1, 0xd2, 0x95, 0x6, "97a3287f"}, 0x1, 0x4, {}, 0xdbe}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df516818fa621be6f208321b0b3a56a46910210b966d4f1629022cb2eaa20f4d2f685eeaf10acffd95999d0ef9261d2cf872a5a629e9f0e354840175b8c256dd3d62e1dab8a93d40c082c95c3d011112d1625f898128b8030ac132b6c9d536cd7debb70dc2dc47ce069e707000000a0caf7b5e26735f78828d02a66fb6e9b"], 0x16) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x1, 0x2, "18ad95", 0x6e, 0x8e}) (async) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x9, 0x4) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000140)={0x6, 0x5, 0x1, 0x2, 0x800000, 0x1f, 0x8}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xa01c, 0x7, 0x4, 0x2, 0x34d0, {}, {0x1, 0x0, 0x1, 0xd2, 0x95, 0x6, "97a3287f"}, 0x1, 0x4, {}, 0xdbe}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a19a026df516818fa621be6f208321b0b3a56a46910210b966d4f1629022cb2eaa20f4d2f685eeaf10acffd95999d0ef9261d2cf872a5a629e9f0e354840175b8c256dd3d62e1dab8a93d40c082c95c3d011112d1625f898128b8030ac132b6c9d536cd7debb70dc2dc47ce069e707000000a0caf7b5e26735f78828d02a66fb6e9b"], 0x16) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x1, 0x2, "18ad95", 0x6e, 0x8e}) (rerun: 64) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x5, {0xc68, 0x10000, 0x0, 0x7}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x5, {0xc68, 0x10000, 0x0, 0x7}}) (async) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x100000000, 0x2cc703) read$midi(r0, 0x0, 0x0) (async) syz_open_dev$amidi(&(0x7f0000000000), 0x80, 0x208580) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080), 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x16) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = socket(0x1e, 0x80000, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xdb4, [0x9], 0x4eec}, 0x10) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 09:32:28 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x2, 0x9e, 0x0, 0x9}) 09:32:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000080), 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:28 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xae}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x16) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x16) (async) 09:32:28 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = socket(0x1e, 0x80000, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xdb4, [0x9], 0x4eec}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) socket(0x1e, 0x80000, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xdb4, [0x9], 0x4eec}, 0x10) (async) 09:32:28 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @src_change}) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x2, 0x9e, 0x0, 0x9}) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xae}, 0x0, 0x0, 0x0, 0x0, 0x0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xae}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:29 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x16) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xd4, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) (async) r1 = socket(0x1e, 0x80000, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xdb4, [0x9], 0x4eec}, 0x10) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @src_change}) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) read$midi(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x2, 0x9e, 0x0, 0x9}) syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) read$midi(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x2, 0x9e, 0x0, 0x9}) (async) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xd4, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xd4, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{0x0, 0x0, 0xae}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:29 executing program 5: syz_open_dev$admmidi(&(0x7f0000000080), 0x40000000009116, 0x14c380) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "ec685b", 0x5, 0xff}) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000040)={0x0, @src_change}) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) 09:32:29 executing program 5: syz_open_dev$admmidi(&(0x7f0000000080), 0x40000000009116, 0x14c380) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "ec685b", 0x5, 0xff}) syz_open_dev$admmidi(&(0x7f0000000080), 0x40000000009116, 0x14c380) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "ec685b", 0x5, 0xff}) (async) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xd4, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000300)={0x7, 0x101, 0x3, {0x80, 0x4, 0xce, 0x3}}) syz_open_dev$cec(&(0x7f0000000280), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @ctrl}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x3, [0x81, 0x7, 0x7d6c, 0x1, 0xe845, 0x1ff, 0x6, 0x6, 0x9, 0x5, 0x2, 0x3, 0x101, 0x2, 0x2, 0x200, 0xdb, 0x7, 0x3, 0x7f, 0x3ff, 0x40b3, 0x400, 0x7, 0x79d3, 0x7, 0x6, 0x6, 0x8001, 0x9f, 0x4, 0x0, 0x3f, 0xfff, 0x1, 0x4, 0x3, 0x9, 0x9, 0x9, 0x6, 0x822, 0x53d5, 0x9, 0x4, 0x0, 0xff, 0x5], 0x7f}}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x0, 0xffff, 0xc0}}) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) (async) read$midi(r0, 0x0, 0x0) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) (async) 09:32:29 executing program 3: ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000040)={0xd0, 0x6, 0x6, "2330f6090ed9c03edd3be2b988865c4f5cd3f0e2a3529da718eb26ece35adba20000ab5fdac05b775ca762bb91827cd0c5d2b84d8bc7175b1382c4a8", 0x16, "1b5653e3ba6067a6682a3c5915fafec2476bdf8d2ded52dfa134007ebdc7df60cf5276c3aae06ec5e51de70469821da1ee2728621121eb5d5c828254", 0x40}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000300)={0x7, 0x101, 0x3, {0x80, 0x4, 0xce, 0x3}}) syz_open_dev$cec(&(0x7f0000000280), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @ctrl}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x3, [0x81, 0x7, 0x7d6c, 0x1, 0xe845, 0x1ff, 0x6, 0x6, 0x9, 0x5, 0x2, 0x3, 0x101, 0x2, 0x2, 0x200, 0xdb, 0x7, 0x3, 0x7f, 0x3ff, 0x40b3, 0x400, 0x7, 0x79d3, 0x7, 0x6, 0x6, 0x8001, 0x9f, 0x4, 0x0, 0x3f, 0xfff, 0x1, 0x4, 0x3, 0x9, 0x9, 0x9, 0x6, 0x822, 0x53d5, 0x9, 0x4, 0x0, 0xff, 0x5], 0x7f}}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x0, 0xffff, 0xc0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000300)={0x7, 0x101, 0x3, {0x80, 0x4, 0xce, 0x3}}) (async) syz_open_dev$cec(&(0x7f0000000280), 0x2, 0x2) (async) syz_open_dev$vivid(&(0x7f00000002c0), 0x1, 0x2) (async) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @ctrl}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x3, [0x81, 0x7, 0x7d6c, 0x1, 0xe845, 0x1ff, 0x6, 0x6, 0x9, 0x5, 0x2, 0x3, 0x101, 0x2, 0x2, 0x200, 0xdb, 0x7, 0x3, 0x7f, 0x3ff, 0x40b3, 0x400, 0x7, 0x79d3, 0x7, 0x6, 0x6, 0x8001, 0x9f, 0x4, 0x0, 0x3f, 0xfff, 0x1, 0x4, 0x3, 0x9, 0x9, 0x9, 0x6, 0x822, 0x53d5, 0x9, 0x4, 0x0, 0xff, 0x5], 0x7f}}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x0, 0xffff, 0xc0}}) (async) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="2725f262a841fde6ca752d94700043cb33886ee564770c92d5f850505926489aaac9ec90240385aa1fc48e9bfda2090b1a30b0c5c985") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:29 executing program 3: ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000040)={0xd0, 0x6, 0x6, "2330f6090ed9c03edd3be2b988865c4f5cd3f0e2a3529da718eb26ece35adba20000ab5fdac05b775ca762bb91827cd0c5d2b84d8bc7175b1382c4a8", 0x16, "1b5653e3ba6067a6682a3c5915fafec2476bdf8d2ded52dfa134007ebdc7df60cf5276c3aae06ec5e51de70469821da1ee2728621121eb5d5c828254", 0x40}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000040)={0xd0, 0x6, 0x6, "2330f6090ed9c03edd3be2b988865c4f5cd3f0e2a3529da718eb26ece35adba20000ab5fdac05b775ca762bb91827cd0c5d2b84d8bc7175b1382c4a8", 0x16, "1b5653e3ba6067a6682a3c5915fafec2476bdf8d2ded52dfa134007ebdc7df60cf5276c3aae06ec5e51de70469821da1ee2728621121eb5d5c828254", 0x40}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:29 executing program 5: syz_open_dev$admmidi(&(0x7f0000000080), 0x40000000009116, 0x14c380) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "ec685b", 0x5, 0xff}) syz_open_dev$admmidi(&(0x7f0000000080), 0x40000000009116, 0x14c380) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x0, "ec685b", 0x5, 0xff}) (async) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r4, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) (async) read$midi(r0, 0x0, 0x0) (async) 09:32:29 executing program 3: ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000040)={0xd0, 0x6, 0x6, "2330f6090ed9c03edd3be2b988865c4f5cd3f0e2a3529da718eb26ece35adba20000ab5fdac05b775ca762bb91827cd0c5d2b84d8bc7175b1382c4a8", 0x16, "1b5653e3ba6067a6682a3c5915fafec2476bdf8d2ded52dfa134007ebdc7df60cf5276c3aae06ec5e51de70469821da1ee2728621121eb5d5c828254", 0x40}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000040)={0xd0, 0x6, 0x6, "2330f6090ed9c03edd3be2b988865c4f5cd3f0e2a3529da718eb26ece35adba20000ab5fdac05b775ca762bb91827cd0c5d2b84d8bc7175b1382c4a8", 0x16, "1b5653e3ba6067a6682a3c5915fafec2476bdf8d2ded52dfa134007ebdc7df60cf5276c3aae06ec5e51de70469821da1ee2728621121eb5d5c828254", 0x40}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000300)={0x7, 0x101, 0x3, {0x80, 0x4, 0xce, 0x3}}) syz_open_dev$cec(&(0x7f0000000280), 0x2, 0x2) r2 = syz_open_dev$vivid(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @ctrl}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x3, [0x81, 0x7, 0x7d6c, 0x1, 0xe845, 0x1ff, 0x6, 0x6, 0x9, 0x5, 0x2, 0x3, 0x101, 0x2, 0x2, 0x200, 0xdb, 0x7, 0x3, 0x7f, 0x3ff, 0x40b3, 0x400, 0x7, 0x79d3, 0x7, 0x6, 0x6, 0x8001, 0x9f, 0x4, 0x0, 0x3f, 0xfff, 0x1, 0x4, 0x3, 0x9, 0x9, 0x9, 0x6, 0x822, 0x53d5, 0x9, 0x4, 0x0, 0xff, 0x5], 0x7f}}) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x0, 0xffff, 0xc0}}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) (async) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000300)={0x7, 0x101, 0x3, {0x80, 0x4, 0xce, 0x3}}) (async) syz_open_dev$cec(&(0x7f0000000280), 0x2, 0x2) (async) syz_open_dev$vivid(&(0x7f00000002c0), 0x1, 0x2) (async) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000180)={0x0, @ctrl}) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000080)={0x1, @sliced={0x3, [0x81, 0x7, 0x7d6c, 0x1, 0xe845, 0x1ff, 0x6, 0x6, 0x9, 0x5, 0x2, 0x3, 0x101, 0x2, 0x2, 0x200, 0xdb, 0x7, 0x3, 0x7f, 0x3ff, 0x40b3, 0x400, 0x7, 0x79d3, 0x7, 0x6, 0x6, 0x8001, 0x9f, 0x4, 0x0, 0x3f, 0xfff, 0x1, 0x4, 0x3, 0x9, 0x9, 0x9, 0x6, 0x822, 0x53d5, 0x9, 0x4, 0x0, 0xff, 0x5], 0x7f}}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x0, 0xffff, 0xc0}}) (async) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x9, [0xe8, 0x584]}, 0x10) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x3, 0x1, @stop_pts=0xfff}) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="2725f262a841fde6ca752d94700043cb33886ee564770c92d5f850505926489aaac9ec90240385aa1fc48e9bfda2090b1a30b0c5c985") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="2725f262a841fde6ca752d94700043cb33886ee564770c92d5f850505926489aaac9ec90240385aa1fc48e9bfda2090b1a30b0c5c985") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:29 executing program 5: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x8, 0x25ee}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x4, 0x5, 0x1}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000), 0x4) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000140)={"f1f6bcb4e8019309c63273d29fa0f3089f57f9f740c2c9cd6f70d935d1a7", 0x7, 0x0, 0x1, 0x4, 0x8, 0x18c, 0x40000f4a, 0x3, [0x20, 0x6, 0x9, 0xd6a6, 0xa6, 0xe645, 0x4, 0x10001, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x101, 0x8]}) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) 09:32:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x8, "a0c199", 0x7, 0x3f}) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x400) delete_module(&(0x7f0000000080)=']+\\:*\x00', 0xa00) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x4, @name="55370eefd4f4c154631d3a862e3afba5ad73f75bb95061690c673f36e0210d4f"}, 0x8, 0xfffffffffffffffd, 0xfffffffffffffff9}) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x1000, 0xa680) read$midi(r1, 0x0, 0x0) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x9, [0xe8, 0x584]}, 0x10) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x3, 0x1, @stop_pts=0xfff}) 09:32:29 executing program 5: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x8, 0x25ee}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x4, 0x5, 0x1}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000), 0x4) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000140)={"f1f6bcb4e8019309c63273d29fa0f3089f57f9f740c2c9cd6f70d935d1a7", 0x7, 0x0, 0x1, 0x4, 0x8, 0x18c, 0x40000f4a, 0x3, [0x20, 0x6, 0x9, 0xd6a6, 0xa6, 0xe645, 0x4, 0x10001, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x101, 0x8]}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x8, 0x25ee}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x4, 0x5, 0x1}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000140)={"f1f6bcb4e8019309c63273d29fa0f3089f57f9f740c2c9cd6f70d935d1a7", 0x7, 0x0, 0x1, 0x4, 0x8, 0x18c, 0x40000f4a, 0x3, [0x20, 0x6, 0x9, 0xd6a6, 0xa6, 0xe645, 0x4, 0x10001, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x101, 0x8]}) (async) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0x3, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x8, "a0c199", 0x7, 0x3f}) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x400) (async) delete_module(&(0x7f0000000080)=']+\\:*\x00', 0xa00) (async) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x4, @name="55370eefd4f4c154631d3a862e3afba5ad73f75bb95061690c673f36e0210d4f"}, 0x8, 0xfffffffffffffffd, 0xfffffffffffffff9}) (async) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x1000, 0xa680) read$midi(r1, 0x0, 0x0) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x9daf, 0xfffffff7]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x4, @mcast2, 0x2}, {0xa, 0x4e23, 0x2000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1, {[0xf44, 0x0, 0xffff5d3f, 0x8, 0xb59c, 0x0, 0x4, 0x3dd0]}}, 0x5c) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="2725f262a841fde6ca752d94700043cb33886ee564770c92d5f850505926489aaac9ec90240385aa1fc48e9bfda2090b1a30b0c5c985") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="2725f262a841fde6ca752d94700043cb33886ee564770c92d5f850505926489aaac9ec90240385aa1fc48e9bfda2090b1a30b0c5c985") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x9, [0xe8, 0x584]}, 0x10) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x3, 0x1, @stop_pts=0xfff}) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x9, [0xe8, 0x584]}, 0x10) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x3, 0x1, @stop_pts=0xfff}) (async) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0x3, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) [ 3502.532682] Bluetooth: hci1 command 0x0401 tx timeout 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x9daf, 0xfffffff7]}, 0x10) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x4, @mcast2, 0x2}, {0xa, 0x4e23, 0x2000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1, {[0xf44, 0x0, 0xffff5d3f, 0x8, 0xb59c, 0x0, 0x4, 0x3dd0]}}, 0x5c) 09:32:29 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x3, 0x8, "a0c199", 0x7, 0x3f}) (async) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000040)=0x400) delete_module(&(0x7f0000000080)=']+\\:*\x00', 0xa00) (async) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x4, @name="55370eefd4f4c154631d3a862e3afba5ad73f75bb95061690c673f36e0210d4f"}, 0x8, 0xfffffffffffffffd, 0xfffffffffffffff9}) (async) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x1000, 0xa680) read$midi(r1, 0x0, 0x0) 09:32:29 executing program 5: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x8, 0x25ee}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x4, 0x5, 0x1}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000), 0x4) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000140)={"f1f6bcb4e8019309c63273d29fa0f3089f57f9f740c2c9cd6f70d935d1a7", 0x7, 0x0, 0x1, 0x4, 0x8, 0x18c, 0x40000f4a, 0x3, [0x20, 0x6, 0x9, 0xd6a6, 0xa6, 0xe645, 0x4, 0x10001, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x101, 0x8]}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x8, 0x25ee}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x4, 0x5, 0x1}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000), 0x4) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000140)={"f1f6bcb4e8019309c63273d29fa0f3089f57f9f740c2c9cd6f70d935d1a7", 0x7, 0x0, 0x1, 0x4, 0x8, 0x18c, 0x40000f4a, 0x3, [0x20, 0x6, 0x9, 0xd6a6, 0xa6, 0xe645, 0x4, 0x10001, 0x5, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x6, 0x1, 0x101, 0x8]}) (async) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000000c0)={0x3, 0x1, [0xfffff000, 0x2, 0x95c, 0x8, 0xa8, 0xffff, 0x400000, 0x9]}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xd4, 0xfffffff7}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xb, 0x1, 0x20, 0x80}) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @start={0x32aa, 0x1}}) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 64) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:29 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x41c140, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) read$midi(r4, 0x0, 0x0) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x2, [0x9daf, 0xfffffff7]}, 0x10) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x4, @mcast2, 0x2}, {0xa, 0x4e23, 0x2000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1, {[0xf44, 0x0, 0xffff5d3f, 0x8, 0xb59c, 0x0, 0x4, 0x3dd0]}}, 0x5c) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x490400, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000000c0)={0x3, 0x1, [0xfffff000, 0x2, 0x95c, 0x8, 0xa8, 0xffff, 0x400000, 0x9]}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xd4, 0xfffffff7}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xb, 0x1, 0x20, 0x80}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000000c0)={0x3, 0x1, [0xfffff000, 0x2, 0x95c, 0x8, 0xa8, 0xffff, 0x400000, 0x9]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xd4, 0xfffffff7}) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xb, 0x1, 0x20, 0x80}) (async) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @start={0x32aa, 0x1}}) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @start={0x32aa, 0x1}}) (async) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x3, "285ed6", 0x88, 0x81}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0xffffffffffffffff, 0x3, "8e9796", 0x6, 0xb6}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000040)="b420bd6dbd7eea36ca5e4e9765ce4693f550304b86d52c8a3098a547fc713ec3bc7a5f74") 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x8, 0x40}}}, 0x8) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="519743adb247a74a003d487327fba1314e45f88748b37234d4b80bec0cb75e425a2473e68772964c37d69fddde7d4b2b86a366a0f7943e943a6c4d22c01949306d76f37bae16d018fa2c15bec8d35c5c1f755e53986338e20150df277b9ba7a3e24b8d292a5d70fab120773b508320a93aa90db432d1b9dd2ec42d87f57465e9ceeb24a90030abe7c7f2c2e108a05142c5f27352227517b283f40e0e9298af2e16e6296b0345817b6bf4e18ce92dae8e25702600ad2cd57f9ab5f217f90bc371d24983560ceeb45e") 09:32:29 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x41c140, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) read$midi(r4, 0x0, 0x0) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x490400, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, 0x0, 0x15) (rerun: 32) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x3, "285ed6", 0x88, 0x81}) (rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 64) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0xffffffffffffffff, 0x3, "8e9796", 0x6, 0xb6}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000040)="b420bd6dbd7eea36ca5e4e9765ce4693f550304b86d52c8a3098a547fc713ec3bc7a5f74") 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @start={0x32aa, 0x1}}) syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @start={0x32aa, 0x1}}) (async) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x8, 0x40}}}, 0x8) (async) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="519743adb247a74a003d487327fba1314e45f88748b37234d4b80bec0cb75e425a2473e68772964c37d69fddde7d4b2b86a366a0f7943e943a6c4d22c01949306d76f37bae16d018fa2c15bec8d35c5c1f755e53986338e20150df277b9ba7a3e24b8d292a5d70fab120773b508320a93aa90db432d1b9dd2ec42d87f57465e9ceeb24a90030abe7c7f2c2e108a05142c5f27352227517b283f40e0e9298af2e16e6296b0345817b6bf4e18ce92dae8e25702600ad2cd57f9ab5f217f90bc371d24983560ceeb45e") 09:32:29 executing program 1: syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x41c140, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) (async) read$midi(r4, 0x0, 0x0) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f00000000c0)={0x3, 0x1, [0xfffff000, 0x2, 0x95c, 0x8, 0xa8, 0xffff, 0x400000, 0x9]}) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 64) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xd4, 0xfffffff7}) (async, rerun: 64) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0xb, 0x1, 0x20, 0x80}) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @write_page_scan_activity={{0xc1c, 0x4}, {0x8, 0x40}}}, 0x8) (async) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)="519743adb247a74a003d487327fba1314e45f88748b37234d4b80bec0cb75e425a2473e68772964c37d69fddde7d4b2b86a366a0f7943e943a6c4d22c01949306d76f37bae16d018fa2c15bec8d35c5c1f755e53986338e20150df277b9ba7a3e24b8d292a5d70fab120773b508320a93aa90db432d1b9dd2ec42d87f57465e9ceeb24a90030abe7c7f2c2e108a05142c5f27352227517b283f40e0e9298af2e16e6296b0345817b6bf4e18ce92dae8e25702600ad2cd57f9ab5f217f90bc371d24983560ceeb45e") 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$audio(0xffffffffffffff9c, 0x0, 0x490400, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$audio(0xffffffffffffff9c, 0x0, 0x490400, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:29 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x3, "285ed6", 0x88, 0x81}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={0xffffffffffffffff, 0x3, "8e9796", 0x6, 0xb6}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, &(0x7f0000000040)="b420bd6dbd7eea36ca5e4e9765ce4693f550304b86d52c8a3098a547fc713ec3bc7a5f74") 09:32:29 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x40, 0xbd, 0x8000}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x7f, 0x8503) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x3f, 0xa0002) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x1, {0x80000001, 0x5, 0x3, 0x1}}) read$midi(r1, 0x0, 0x0) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x9, [0xd5c, 0xfff], 0x800}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01006a426941060200000000000000026df5"], 0x16) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"1bf2e3e9b8d804fdacce0473a0e6f6976e3b2e4dd5a3e6579701bca26317", 0x3f, 0x2, 0x0, 0x8, 0x200, 0x400, 0x401, 0x3, [0x1000, 0x8000, 0x8f, 0xe19, 0x7, 0x101, 0x0, 0x3, 0x6, 0x7, 0x7, 0xf79, 0x3b54b020, 0x9, 0x9, 0x1ff, 0x8000, 0x4]}) write$bt_hci(r0, 0x0, 0x15) 09:32:29 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:29 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x40, 0xbd, 0x8000}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x7f, 0x8503) (async) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x3f, 0xa0002) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x1, {0x80000001, 0x5, 0x3, 0x1}}) read$midi(r1, 0x0, 0x0) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xb) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x9, [0xd5c, 0xfff], 0x800}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01006a426941060200000000000000026df5"], 0x16) 09:32:29 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"1bf2e3e9b8d804fdacce0473a0e6f6976e3b2e4dd5a3e6579701bca26317", 0x3f, 0x2, 0x0, 0x8, 0x200, 0x400, 0x401, 0x3, [0x1000, 0x8000, 0x8f, 0xe19, 0x7, 0x101, 0x0, 0x3, 0x6, 0x7, 0x7, 0xf79, 0x3b54b020, 0x9, 0x9, 0x1ff, 0x8000, 0x4]}) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"1bf2e3e9b8d804fdacce0473a0e6f6976e3b2e4dd5a3e6579701bca26317", 0x3f, 0x2, 0x0, 0x8, 0x200, 0x400, 0x401, 0x3, [0x1000, 0x8000, 0x8f, 0xe19, 0x7, 0x101, 0x0, 0x3, 0x6, 0x7, 0x7, 0xf79, 0x3b54b020, 0x9, 0x9, 0x1ff, 0x8000, 0x4]}) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:29 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x40, 0xbd, 0x8000}}) (async) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x7f, 0x8503) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) (async) syz_open_dev$admmidi(&(0x7f0000000100), 0x3f, 0xa0002) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x1, {0x80000001, 0x5, 0x3, 0x1}}) (async) read$midi(r1, 0x0, 0x0) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) (async) 09:32:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xb) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x9, [0xd5c, 0xfff], 0x800}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01006a426941060200000000000000026df5"], 0x16) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 64) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000040)={"1bf2e3e9b8d804fdacce0473a0e6f6976e3b2e4dd5a3e6579701bca26317", 0x3f, 0x2, 0x0, 0x8, 0x200, 0x400, 0x401, 0x3, [0x1000, 0x8000, 0x8f, 0xe19, 0x7, 0x101, 0x0, 0x3, 0x6, 0x7, 0x7, 0xf79, 0x3b54b020, 0x9, 0x9, 0x1ff, 0x8000, 0x4]}) (rerun: 64) write$bt_hci(r0, 0x0, 0x15) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x100000003, 0x654880) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) read$midi(r0, 0x0, 0x0) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) (async) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x100000003, 0x654880) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) (async) read$midi(r0, 0x0, 0x0) 09:32:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) socket(0x18, 0x0, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1f, 0x7, '\x00', &(0x7f0000000080)=0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:29 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:29 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)={"b8e8274b396c2fa8325426c8a93f8a6ebf0c704cd5299a4f6c66657a5092", 0x86e, 0x1, 0x1, 0x6c, 0xfffffffb, 0x9, 0x0, 0x1, [0x4, 0x3, 0xfc3, 0x7fff, 0xded7, 0x8001, 0x100, 0x2, 0x100, 0x14, 0x9, 0x6, 0x5, 0xfffffff9, 0x2, 0x4, 0x1, 0x2000000, 0x10000]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x5, 0x1008, 0x5, 0x6, 0x1, 0x2, 0x2}}) syz_open_dev$cec(&(0x7f0000000140), 0x3, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xa240, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000280)=0x80000000) 09:32:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:29 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) r1 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x100000003, 0x654880) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)) (async) read$midi(r0, 0x0, 0x0) 09:32:29 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) socket(0x18, 0x0, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1f, 0x7, '\x00', &(0x7f0000000080)=0x4}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) (async) socket(0x18, 0x0, 0x0) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1f, 0x7, '\x00', &(0x7f0000000080)=0x4}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)={"b8e8274b396c2fa8325426c8a93f8a6ebf0c704cd5299a4f6c66657a5092", 0x86e, 0x1, 0x1, 0x6c, 0xfffffffb, 0x9, 0x0, 0x1, [0x4, 0x3, 0xfc3, 0x7fff, 0xded7, 0x8001, 0x100, 0x2, 0x100, 0x14, 0x9, 0x6, 0x5, 0xfffffff9, 0x2, 0x4, 0x1, 0x2000000, 0x10000]}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x5, 0x1008, 0x5, 0x6, 0x1, 0x2, 0x2}}) (async) syz_open_dev$cec(&(0x7f0000000140), 0x3, 0x2) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xa240, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000280)=0x80000000) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$mixer_OSS_GETVERSION(r1, 0x80044d76, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:30 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x8) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000040)) (async) socket(0x18, 0x0, 0x0) (async) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1f, 0x7, '\x00', &(0x7f0000000080)=0x4}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 2: ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x3, "f97a0e09e478b797e1e610d40dcb1dca943dbe52e4325bd82a22eb8badd3c414", 0x0, 0x1}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x2, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0905, 0x101, '\x00', @p_u32}}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x80000001, 0x4, 0x4, 0xb28, 0x80000000, 0x4, 0x80, 0x4]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x5, "b57f03e61d0005000003084e05000000000000101000001600", 0x1, 0x5, 0x5, 0x100, 0x2}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)={"b8e8274b396c2fa8325426c8a93f8a6ebf0c704cd5299a4f6c66657a5092", 0x86e, 0x1, 0x1, 0x6c, 0xfffffffb, 0x9, 0x0, 0x1, [0x4, 0x3, 0xfc3, 0x7fff, 0xded7, 0x8001, 0x100, 0x2, 0x100, 0x14, 0x9, 0x6, 0x5, 0xfffffff9, 0x2, 0x4, 0x1, 0x2000000, 0x10000]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x5, 0x1008, 0x5, 0x6, 0x1, 0x2, 0x2}}) syz_open_dev$cec(&(0x7f0000000140), 0x3, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xa240, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000280)=0x80000000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) (async) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f00000001c0)={"b8e8274b396c2fa8325426c8a93f8a6ebf0c704cd5299a4f6c66657a5092", 0x86e, 0x1, 0x1, 0x6c, 0xfffffffb, 0x9, 0x0, 0x1, [0x4, 0x3, 0xfc3, 0x7fff, 0xded7, 0x8001, 0x100, 0x2, 0x100, 0x14, 0x9, 0x6, 0x5, 0xfffffff9, 0x2, 0x4, 0x1, 0x2000000, 0x10000]}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x5, 0x1008, 0x5, 0x6, 0x1, 0x2, 0x2}}) (async) syz_open_dev$cec(&(0x7f0000000140), 0x3, 0x2) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0xa240, 0x0) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000280)=0x80000000) (async) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x429) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000280)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e4, &(0x7f00000000c0)="d23043708af2c3cd1040f9aed7dd57f8aa95a03226dfe6417cfd6b194fa8a752e83d1ee63a62546d56fa172ea1eb5b43dcee4ad62bd5d6b586e046e842ca661b8c3bed35ab2dfc1c5bdf52b4ce706cca968981c2da011dd5a2ab7a18795a726fd4b67b374cb60697116be20a17f5aadee51284bf984f78cd1f6cf9f30e1dab3228") r6 = socket(0x26, 0xa, 0xffffffff) write$bt_hci(r6, &(0x7f00000002c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x4}}}, 0x7) write$bt_hci(r0, 0x0, 0x15) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000001c0)={"147dbde08acf1697fe069558e1fabd244641a47804fc165d9d0c8a85ba90", 0x1f, 0x0, 0x0, 0x3ff, 0x7f, 0x7ff, 0x10000, 0x4, [0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x3, 0x3f, 0x7fffffff, 0xdf, 0x3, 0x7fff800, 0x6, 0x19d6, 0x3, 0xa1, 0x3, 0x2, 0x6]}) 09:32:30 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x8) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000006a69410612b1bb475491c6a1213df5"], 0x16) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0xffffffff, 0x0, 0x1000, 0xbf4d, 0x5, 0x1, 0x2000009, 0x401]}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0x8}}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x200024) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x1, @start={0x9}}) 09:32:30 executing program 2: ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x3, "f97a0e09e478b797e1e610d40dcb1dca943dbe52e4325bd82a22eb8badd3c414", 0x0, 0x1}) (async) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x2, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0905, 0x101, '\x00', @p_u32}}) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x80000001, 0x4, 0x4, 0xb28, 0x80000000, 0x4, 0x80, 0x4]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x5, "b57f03e61d0005000003084e05000000000000101000001600", 0x1, 0x5, 0x5, 0x100, 0x2}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 09:32:30 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x0, 0x48503) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000000)=0x8) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x429) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000280)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e4, &(0x7f00000000c0)="d23043708af2c3cd1040f9aed7dd57f8aa95a03226dfe6417cfd6b194fa8a752e83d1ee63a62546d56fa172ea1eb5b43dcee4ad62bd5d6b586e046e842ca661b8c3bed35ab2dfc1c5bdf52b4ce706cca968981c2da011dd5a2ab7a18795a726fd4b67b374cb60697116be20a17f5aadee51284bf984f78cd1f6cf9f30e1dab3228") r6 = socket(0x26, 0xa, 0xffffffff) write$bt_hci(r6, &(0x7f00000002c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x4}}}, 0x7) write$bt_hci(r0, 0x0, 0x15) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000001c0)={"147dbde08acf1697fe069558e1fabd244641a47804fc165d9d0c8a85ba90", 0x1f, 0x0, 0x0, 0x3ff, 0x7f, 0x7ff, 0x10000, 0x4, [0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x3, 0x3f, 0x7fffffff, 0xdf, 0x3, 0x7fff800, 0x6, 0x19d6, 0x3, 0xa1, 0x3, 0x2, 0x6]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x429) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000280)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r5, 0x400448e4, &(0x7f00000000c0)="d23043708af2c3cd1040f9aed7dd57f8aa95a03226dfe6417cfd6b194fa8a752e83d1ee63a62546d56fa172ea1eb5b43dcee4ad62bd5d6b586e046e842ca661b8c3bed35ab2dfc1c5bdf52b4ce706cca968981c2da011dd5a2ab7a18795a726fd4b67b374cb60697116be20a17f5aadee51284bf984f78cd1f6cf9f30e1dab3228") (async) socket(0x26, 0xa, 0xffffffff) (async) write$bt_hci(r6, &(0x7f00000002c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x4}}}, 0x7) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000001c0)={"147dbde08acf1697fe069558e1fabd244641a47804fc165d9d0c8a85ba90", 0x1f, 0x0, 0x0, 0x3ff, 0x7f, 0x7ff, 0x10000, 0x4, [0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x3, 0x3f, 0x7fffffff, 0xdf, 0x3, 0x7fff800, 0x6, 0x19d6, 0x3, 0xa1, 0x3, 0x2, 0x6]}) (async) 09:32:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}, {0xc9, 0x20, 0x81, 0x81, 0x4}}}, 0xe) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0xffffffff, 0x0, 0x1000, 0xbf4d, 0x5, 0x1, 0x2000009, 0x401]}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0x8}}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x200024) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x1, @start={0x9}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0xffffffff, 0x0, 0x1000, 0xbf4d, 0x5, 0x1, 0x2000009, 0x401]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0x8}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x200024) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_open_dev$cec(&(0x7f0000000180), 0x3, 0x2) (async) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x1, @start={0x9}}) (async) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (rerun: 32) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000006a69410612b1bb475491c6a1213df5"], 0x16) 09:32:30 executing program 2: ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x3, "f97a0e09e478b797e1e610d40dcb1dca943dbe52e4325bd82a22eb8badd3c414", 0x0, 0x1}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x2, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0905, 0x101, '\x00', @p_u32}}) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x80000001, 0x4, 0x4, 0xb28, 0x80000000, 0x4, 0x80, 0x4]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x5, "b57f03e61d0005000003084e05000000000000101000001600", 0x1, 0x5, 0x5, 0x100, 0x2}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000180)={0x3, "f97a0e09e478b797e1e610d40dcb1dca943dbe52e4325bd82a22eb8badd3c414", 0x0, 0x1}) (async) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x2, 0xffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9b0905, 0x101, '\x00', @p_u32}}) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f00000001c0)={0x3, 0x0, [0x80000001, 0x4, 0x4, 0xb28, 0x80000000, 0x4, 0x80, 0x4]}) (async) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000080)={0x5, "b57f03e61d0005000003084e05000000000000101000001600", 0x1, 0x5, 0x5, 0x100, 0x2}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @io_capability_neg_reply={{0x434, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}, {0xc9, 0x20, 0x81, 0x81, 0x4}}}, 0xe) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0xffffffff, 0x0, 0x1000, 0xbf4d, 0x5, 0x1, 0x2000009, 0x401]}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0x8}}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x200024) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x1, @start={0x9}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0xffffffff, 0x0, 0x1000, 0xbf4d, 0x5, 0x1, 0x2000009, 0x401]}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @start={0x8}}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x200024) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) syz_open_dev$cec(&(0x7f0000000180), 0x3, 0x2) (async) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000001c0)={0x2, 0x1, @start={0x9}}) (async) 09:32:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x40, 0xbd, 0x8000}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x7f, 0x8503) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x3f, 0xa0002) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x1, {0x80000001, 0x5, 0x3, 0x1}}) read$midi(r1, 0x0, 0x0) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x429) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000280)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448e4, &(0x7f00000000c0)="d23043708af2c3cd1040f9aed7dd57f8aa95a03226dfe6417cfd6b194fa8a752e83d1ee63a62546d56fa172ea1eb5b43dcee4ad62bd5d6b586e046e842ca661b8c3bed35ab2dfc1c5bdf52b4ce706cca968981c2da011dd5a2ab7a18795a726fd4b67b374cb60697116be20a17f5aadee51284bf984f78cd1f6cf9f30e1dab3228") r6 = socket(0x26, 0xa, 0xffffffff) write$bt_hci(r6, &(0x7f00000002c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x4}}}, 0x7) write$bt_hci(r0, 0x0, 0x15) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000001c0)={"147dbde08acf1697fe069558e1fabd244641a47804fc165d9d0c8a85ba90", 0x1f, 0x0, 0x0, 0x3ff, 0x7f, 0x7ff, 0x10000, 0x4, [0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x3, 0x3f, 0x7fffffff, 0xdf, 0x3, 0x7fff800, 0x6, 0x19d6, 0x3, 0xa1, 0x3, 0x2, 0x6]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000180)=0x429) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000280)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r5, 0x400448e4, &(0x7f00000000c0)="d23043708af2c3cd1040f9aed7dd57f8aa95a03226dfe6417cfd6b194fa8a752e83d1ee63a62546d56fa172ea1eb5b43dcee4ad62bd5d6b586e046e842ca661b8c3bed35ab2dfc1c5bdf52b4ce706cca968981c2da011dd5a2ab7a18795a726fd4b67b374cb60697116be20a17f5aadee51284bf984f78cd1f6cf9f30e1dab3228") (async) socket(0x26, 0xa, 0xffffffff) (async) write$bt_hci(r6, &(0x7f00000002c0)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x4}}}, 0x7) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000001c0)={"147dbde08acf1697fe069558e1fabd244641a47804fc165d9d0c8a85ba90", 0x1f, 0x0, 0x0, 0x3ff, 0x7f, 0x7ff, 0x10000, 0x4, [0x9, 0x7, 0x0, 0x8, 0x4, 0x3, 0x3, 0x3f, 0x7fffffff, 0xdf, 0x3, 0x7fff800, 0x6, 0x19d6, 0x3, 0xa1, 0x3, 0x2, 0x6]}) (async) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000006a69410612b1bb475491c6a1213df5"], 0x16) 09:32:30 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x2, 0x0, @start={0x32aa, 0x1}}) 09:32:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) write$bt_hci(r1, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}, {0xc9, 0x20, 0x81, 0x81, 0x4}}}, 0xe) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) write$bt_hci(r1, &(0x7f0000000040)={0x1, @sniff_mode={{0x803, 0xa}, {0xc9, 0x20, 0x81, 0x81, 0x4}}}, 0xe) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x40, 0xbd, 0x8000}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x7f, 0x8503) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x3f, 0xa0002) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x1, {0x80000001, 0x5, 0x3, 0x1}}) read$midi(r1, 0x0, 0x0) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000040)="2725f262a841fde6ca752d94700043cb33886ee564770c92d5f850505926489aaac9ec90240385aa1fc48e9bfda2090b1a30b0c5c985") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a2012c8f72fdfc9eb3d5b9fff032963a1da4f6df5"], 0x16) 09:32:30 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x40, 0xbd, 0x8000}}) r1 = syz_open_dev$amidi(&(0x7f0000000040), 0x7f, 0x8503) r2 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$admmidi(&(0x7f0000000100), 0x3f, 0xa0002) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x1, {0x80000001, 0x5, 0x3, 0x1}}) read$midi(r1, 0x0, 0x0) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a2012c8f72fdfc9eb3d5b9fff032963a1da4f6df5"], 0x16) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) write$bt_hci(r0, 0x0, 0x15) 09:32:30 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011e201224006a4269410612b1cf9b2963a19a026df5"], 0x16) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x10000, 0x7, {}, {0x1, 0x0, 0x8, 0xf7, 0x9, 0x6, "eec2c2f7"}, 0x9, 0x4, {}, 0x101, 0x0, r2}) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a2012c8f72fdfc9eb3d5b9fff032963a1da4f6df5"], 0x16) 09:32:30 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:30 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xbfff, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x16) 09:32:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x15) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x3, @sliced={0x6, [0x1ff, 0xc090, 0x8, 0x6, 0x100, 0x1ff, 0x3f, 0x3ff, 0xfffa, 0x0, 0xfff9, 0x1, 0x5, 0x7, 0x81, 0xffff, 0x6a6, 0x28a2, 0x4, 0x1f, 0x2, 0x4, 0xffff, 0xc4, 0x4, 0x6, 0x2, 0x1, 0x100, 0x7fff, 0x1f, 0x0, 0x100, 0x2, 0x30a, 0x8, 0x6, 0x9, 0x8be, 0x5, 0xde2, 0x5, 0x4, 0x100, 0x8000, 0x2, 0x5, 0x50], 0x8}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 09:32:30 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x16) 09:32:30 executing program 5: setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x6, @remote, 0x4}, {0xa, 0x4e20, 0xfff, @remote, 0x1}, 0x1, {[0x6, 0xcc, 0x1f, 0x0, 0x3f, 0x5, 0x40, 0x81]}}, 0x5c) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x1, @empty, 0x5}, {0xa, 0x4e23, 0x5, @private1, 0x7fff}, 0xffffffffffffffff, {[0x1f, 0x5, 0x1, 0x3, 0x7fff, 0xfff, 0x8, 0x9]}}, 0x5c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) read$sequencer(r3, &(0x7f0000000080)=""/192, 0xc0) write$bt_hci(r1, 0x0, 0x15) 09:32:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (rerun: 32) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000001c0)) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x3, @sliced={0x6, [0x1ff, 0xc090, 0x8, 0x6, 0x100, 0x1ff, 0x3f, 0x3ff, 0xfffa, 0x0, 0xfff9, 0x1, 0x5, 0x7, 0x81, 0xffff, 0x6a6, 0x28a2, 0x4, 0x1f, 0x2, 0x4, 0xffff, 0xc4, 0x4, 0x6, 0x2, 0x1, 0x100, 0x7fff, 0x1f, 0x0, 0x100, 0x2, 0x30a, 0x8, 0x6, 0x9, 0x8be, 0x5, 0xde2, 0x5, 0x4, 0x100, 0x8000, 0x2, 0x5, 0x50], 0x8}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 09:32:30 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="be93f74345a378b101ff1fdf7c1352cfe5f46abd0bcfa42963a19a026df53335b297d8590380dc32a86f42d5c54b8453df79769d7a5f86b7a6acde09f255a796516194ec02c28c6ca66684d15e85e859bfbe392a2fde1b0b2f99a9b30dd5bf4703a3078f40c15a82ef85afe59dc801db1650c66db33b5df3d666f79ab01682c453f08c975f9546eeddd2809e151f286e83897e8239ec1c0399639ee4ae180439682600c79fd6098412ce23b3dcdf01e86ae36384e61654e53efeb116323b883d50e80000000000000000000000000000e2d31b8bebcffe33d6b406c4fb56e81a5fb7fb0a824c6a50eec9d150ce795e3e63f7185fcdda35928348348369b63fc8d3c32ea22b5b3c04f2d9dc3af9d636656c2b7c8af53b98c7879507f90c3b1cc63ef3df2897ee67437f01d21cf9ad9ba176a86a12fc089ec6c8a62e51a3038417f6231d7394a626f41c2c"], 0x16) 09:32:30 executing program 5: setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x6, @remote, 0x4}, {0xa, 0x4e20, 0xfff, @remote, 0x1}, 0x1, {[0x6, 0xcc, 0x1f, 0x0, 0x3f, 0x5, 0x40, 0x81]}}, 0x5c) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x1, @empty, 0x5}, {0xa, 0x4e23, 0x5, @private1, 0x7fff}, 0xffffffffffffffff, {[0x1f, 0x5, 0x1, 0x3, 0x7fff, 0xfff, 0x8, 0x9]}}, 0x5c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) read$sequencer(r3, &(0x7f0000000080)=""/192, 0xc0) write$bt_hci(r1, 0x0, 0x15) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x6, @remote, 0x4}, {0xa, 0x4e20, 0xfff, @remote, 0x1}, 0x1, {[0x6, 0xcc, 0x1f, 0x0, 0x3f, 0x5, 0x40, 0x81]}}, 0x5c) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x1, @empty, 0x5}, {0xa, 0x4e23, 0x5, @private1, 0x7fff}, 0xffffffffffffffff, {[0x1f, 0x5, 0x1, 0x3, 0x7fff, 0xfff, 0x8, 0x9]}}, 0x5c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) read$sequencer(r3, &(0x7f0000000080)=""/192, 0xc0) (async) write$bt_hci(r1, 0x0, 0x15) (async) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x16) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x800, [0x2, 0x5], 0x100}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xbfff, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r1}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xbfff, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x5, 0x4) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000140)={0x80000001, [0x6, 0x1], 0x20}, 0x10) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000011c0)) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000240)={0x1, 0x4, 0x2}) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000002c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="011a2012d563a1bb1fd50157dfdf34d7b0a2142db8dfe914310bc887d186a511222d48f9758cfc5565ca7e7ce443737587a9a15afcaeef5b2c0eb7a2f10c941b94a771f52afb396d34752b958234754e5b6312c80a03"], 0x16) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x5a800, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="b0c0d333464b5ae602d2a7fb869bbc573b7e6e831bc3a49c2d67177761d2aa330e59741773", 0x25}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r6, 0x0, 0x0) write$sequencer(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="057f00129209c0170101fdef930b901b02380800fe0c9a59b6acbc9304c2db81"], 0x20) 09:32:30 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000001c0)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x3, @sliced={0x6, [0x1ff, 0xc090, 0x8, 0x6, 0x100, 0x1ff, 0x3f, 0x3ff, 0xfffa, 0x0, 0xfff9, 0x1, 0x5, 0x7, 0x81, 0xffff, 0x6a6, 0x28a2, 0x4, 0x1f, 0x2, 0x4, 0xffff, 0xc4, 0x4, 0x6, 0x2, 0x1, 0x100, 0x7fff, 0x1f, 0x0, 0x100, 0x2, 0x30a, 0x8, 0x6, 0x9, 0x8be, 0x5, 0xde2, 0x5, 0x4, 0x100, 0x8000, 0x2, 0x5, 0x50], 0x8}}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)=0x3) 09:32:30 executing program 5: setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e21, 0x6, @remote, 0x4}, {0xa, 0x4e20, 0xfff, @remote, 0x1}, 0x1, {[0x6, 0xcc, 0x1f, 0x0, 0x3f, 0x5, 0x40, 0x81]}}, 0x5c) (async) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e24, 0x1, @empty, 0x5}, {0xa, 0x4e23, 0x5, @private1, 0x7fff}, 0xffffffffffffffff, {[0x1f, 0x5, 0x1, 0x3, 0x7fff, 0xfff, 0x8, 0x9]}}, 0x5c) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000140)) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) read$sequencer(r3, &(0x7f0000000080)=""/192, 0xc0) (async) write$bt_hci(r1, 0x0, 0x15) 09:32:30 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000000)) read$midi(r0, 0x0, 0x0) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xbfff, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xbfff, 0x1}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='fsi_master_gpio_in\x00', r1}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xbfff, 0x1}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffe1, [0xafa6, 0x400], 0x3}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:30 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/252, 0xfc, 0x0, &(0x7f0000000180)=""/137, 0x89}}, 0x10) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x5, 0x4) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000140)={0x80000001, [0x6, 0x1], 0x20}, 0x10) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000011c0)) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000240)={0x1, 0x4, 0x2}) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000002c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="011a2012d563a1bb1fd50157dfdf34d7b0a2142db8dfe914310bc887d186a511222d48f9758cfc5565ca7e7ce443737587a9a15afcaeef5b2c0eb7a2f10c941b94a771f52afb396d34752b958234754e5b6312c80a03"], 0x16) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x5a800, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="b0c0d333464b5ae602d2a7fb869bbc573b7e6e831bc3a49c2d67177761d2aa330e59741773", 0x25}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r6, 0x0, 0x0) write$sequencer(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="057f00129209c0170101fdef930b901b02380800fe0c9a59b6acbc9304c2db81"], 0x20) 09:32:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0xff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)='j') 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d07, &(0x7f00000000c0)=0x51) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xc8, 0x0, 0x2020, 0x4, 0x4, 0x7, 0x2, 0x2}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="80ce00080000005600000020431b00cc0064000007049078ac1414bbe000000107175c0a010100ac1414aae0000002e00000010a01010188129531af5e313dc801fcef0fd490e0ae57443c4821e0000001000003bd0a010100000000497f0000010000014cac1414bb00000006ac1414bb0000001eacbc2c14143a000001cdac1414bb00000063442cce41ac1414bb000001d1ac1414bb00010000ac1414aa000000037f000001000000016401010100000002071379000000000a0101020a010101e000000144141c14bb00000001"]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xc0, 0x6, 0x7f, 0xa}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000200)) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffe1, [0xafa6, 0x400], 0x3}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffe1, [0xafa6, 0x400], 0x3}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0xff, 0x4) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)='j') 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d07, &(0x7f00000000c0)=0x51) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000100)) 09:32:30 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x5, 0x4) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000140)={0x80000001, [0x6, 0x1], 0x20}, 0x10) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000011c0)) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000240)={0x1, 0x4, 0x2}) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000002c0)) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="011a2012d563a1bb1fd50157dfdf34d7b0a2142db8dfe914310bc887d186a511222d48f9758cfc5565ca7e7ce443737587a9a15afcaeef5b2c0eb7a2f10c941b94a771f52afb396d34752b958234754e5b6312c80a03"], 0x16) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x5a800, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="b0c0d333464b5ae602d2a7fb869bbc573b7e6e831bc3a49c2d67177761d2aa330e59741773", 0x25}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r6, 0x0, 0x0) write$sequencer(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="057f00129209c0170101fdef930b901b02380800fe0c9a59b6acbc9304c2db81"], 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000280)=0x5, 0x4) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000100)='thermal_zone_trip\x00'}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000140)={0x80000001, [0x6, 0x1], 0x20}, 0x10) (async) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000011c0)) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f0000000240)={0x1, 0x4, 0x2}) (async) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000002c0)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="011a2012d563a1bb1fd50157dfdf34d7b0a2142db8dfe914310bc887d186a511222d48f9758cfc5565ca7e7ce443737587a9a15afcaeef5b2c0eb7a2f10c941b94a771f52afb396d34752b958234754e5b6312c80a03"], 0x16) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x5a800, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000180)="b0c0d333464b5ae602d2a7fb869bbc573b7e6e831bc3a49c2d67177761d2aa330e59741773", 0x25}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r6, 0x0, 0x0) (async) write$sequencer(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="057f00129209c0170101fdef930b901b02380800fe0c9a59b6acbc9304c2db81"], 0x20) (async) 09:32:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vivid(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0xc8, 0x0, 0x2020, 0x4, 0x4, 0x7, 0x2, 0x2}}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="80ce00080000005600000020431b00cc0064000007049078ac1414bbe000000107175c0a010100ac1414aae0000002e00000010a01010188129531af5e313dc801fcef0fd490e0ae57443c4821e0000001000003bd0a010100000000497f0000010000014cac1414bb00000006ac1414bb0000001eacbc2c14143a000001cdac1414bb00000063442cce41ac1414bb000001d1ac1414bb00010000ac1414aa000000037f000001000000016401010100000002071379000000000a0101020a010101e000000144141c14bb00000001"]}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000000)={0x3, 0x2, 0x1, 0xc0, 0x6, 0x7f, 0xa}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000200)) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000100)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}}) 09:32:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffe1, [0xafa6, 0x400], 0x3}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xffffffe1, [0xafa6, 0x400], 0x3}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x4, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000000c0)=0xff, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000040)='j') 09:32:30 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffd78) write$bt_hci(0xffffffffffffffff, 0x0, 0x15) 09:32:30 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a0269410612b1cf9b2963a19a02edf5"], 0x16) 09:32:30 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000080), 0x4) 09:32:30 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000080)) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d07, &(0x7f00000000c0)=0x51) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async, rerun: 32) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:30 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a0269410612b1cf9b2963a19a02edf5"], 0x16) 09:32:30 executing program 4: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x10001, 0x3, 0x4, 0x10, 0x8, 0x64b3, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x7e, 0x3, 0x8, 0x6}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:30 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffd78) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x15) 09:32:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, &(0x7f0000000040)={{0x3, @name="130fe271b580cfbc230a28f1c6fa6cac9af26bfb55b4600231a23d9f43107948"}, 0x8, 0x3, 0x4}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000080)={0x0, [0x10000, 0x2], 0x400}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) 09:32:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 09:32:31 executing program 4: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x10001, 0x3, 0x4, 0x10, 0x8, 0x64b3, 0x2}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x7e, 0x3, 0x8, 0x6}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a0269410612b1cf9b2963a19a02edf5"], 0x16) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a0269410612b1cf9b2963a19a02edf5"], 0x16) (async) 09:32:31 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffffffffffd78) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x15) 09:32:31 executing program 1: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x10001, 0x3, 0x4, 0x10, 0x8, 0x64b3, 0x2}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x7e, 0x3, 0x8, 0x6}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) 09:32:31 executing program 4: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x10001, 0x3, 0x4, 0x10, 0x8, 0x64b3, 0x2}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x7e, 0x3, 0x8, 0x6}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a2a8c82a76860cf58790108ca3f51259a8c3600fa7a9718e81956a16bfc6414a789b19643c1b1d326389af0f31f2b0393d45cc69fe8250ac5b8e37ccda13f65d3e43f40963c54d5b8b14284e3cde7b47385b5bae2625703028", 0x59, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r1}) 09:32:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x7}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x40, "aebefd", 0x1, 0x7}) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="011a201200006a4269410612b1cf9b2963a18d026df5b605edf4e770785c10d02dbecd9081d445258cd3383bb3b1240bcc8c277c91acdfffde4f6d03f8267fa423b3beedff3a03d009da880dd300848eb6f814b3cd96aebef1a6ef8507a150b2429c0d"], 0x16) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a2a8c82a76860cf58790108ca3f51259a8c3600fa7a9718e81956a16bfc6414a789b19643c1b1d326389af0f31f2b0393d45cc69fe8250ac5b8e37ccda13f65d3e43f40963c54d5b8b14284e3cde7b47385b5bae2625703028", 0x59, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r1}) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 09:32:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async, rerun: 64) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x7}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) 09:32:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) write$bt_hci(r0, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x7, "b00ad95ab53d08e055321199653f1e12"}}}, 0x1b) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x40, "aebefd", 0x1, 0x7}) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="a2a8c82a76860cf58790108ca3f51259a8c3600fa7a9718e81956a16bfc6414a789b19643c1b1d326389af0f31f2b0393d45cc69fe8250ac5b8e37ccda13f65d3e43f40963c54d5b8b14284e3cde7b47385b5bae2625703028", 0x59, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r1}) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x42, 0x4) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0xb4, 0x0, "48a5105d3afd876412de455f4bb81b28a23accf9dcc870c513f94a7b299a2d95", 0x5, 0x8000, 0x3, 0x81, 0x106}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x7, "b00ad95ab53d08e055321199653f1e12"}}}, 0x1b) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f00000000c0)) write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0x40, "aebefd", 0x1, 0x7}) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x1e}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x6, 0x3, 0x1}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x7, "9be7bd", 0xae, 0x1}) 09:32:31 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x2500, 0x5, '\x00', &(0x7f0000000100)=0x5}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_bt_hci(r2, 0x0, &(0x7f0000000040)="6c7dd33dc30da53e274a1720bf96483f190e9c54d75da8b4ce8f28d89c532c704e06fe2b7253f93e1c4073c2f20da94ba19ea14de22a51eb9c00823a95989ce69049d7048b20326e3a6591c6ff24f6a75ebfaf27601b849e6f87c7ba706687e13cfe538e7c18657e0ac81d95b581345305a687d58a27e5c0faa03d28a923e770877a1a4c71dc59b8fd282ad1c6f92db434b2804b14") write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000180)=0x131) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) write$bt_hci(r0, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x7, "b00ad95ab53d08e055321199653f1e12"}}}, 0x1b) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x7, "b00ad95ab53d08e055321199653f1e12"}}}, 0x1b) (async) 09:32:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x1e}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x6, 0x3, 0x1}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x7, "9be7bd", 0xae, 0x1}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x1e}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x6, 0x3, 0x1}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) (async) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x7, "9be7bd", 0xae, 0x1}) (async) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x103, 0x3}, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080042000000080000020041e4004400680000810490780a0100ac1414bbffffffff0a010100ac14140fffffffffac14140d440c7fd1e00000020000000900"/80]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x1, 0xff, 0x4, 0x1400, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x412000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x2, 0xfffffffb, 0x9, 0x1082, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x2ca002, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000005c0)={0x7, 0x3, 0x4, {0xf8000000, 0x401, 0x1ff, 0x8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x41100, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x3f, 0x1}, 0x10, 0x1beb3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7]}, 0x80) write$bt_hci(r0, 0x0, 0x15) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r8, 0x0, 0x0) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000040)) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f00000000c0)) write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x1e}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x6, 0x3, 0x1}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x7, "9be7bd", 0xae, 0x1}) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x103, 0x3}, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080042000000080000020041e4004400680000810490780a0100ac1414bbffffffff0a010100ac14140fffffffffac14140d440c7fd1e00000020000000900"/80]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x1, 0xff, 0x4, 0x1400, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x412000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x2, 0xfffffffb, 0x9, 0x1082, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x2ca002, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000005c0)={0x7, 0x3, 0x4, {0xf8000000, 0x401, 0x1ff, 0x8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x41100, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x3f, 0x1}, 0x10, 0x1beb3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7]}, 0x80) write$bt_hci(r0, 0x0, 0x15) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r8, 0x0, 0x0) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x103, 0x3}, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080042000000080000020041e4004400680000810490780a0100ac1414bbffffffff0a010100ac14140fffffffffac14140d440c7fd1e00000020000000900"/80]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x1, 0xff, 0x4, 0x1400, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x412000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x2, 0xfffffffb, 0x9, 0x1082, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x2ca002, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r7, 0x0, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000005c0)={0x7, 0x3, 0x4, {0xf8000000, 0x401, 0x1ff, 0x8}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x41100, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x3f, 0x1}, 0x10, 0x1beb3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7]}, 0x80) (async) write$bt_hci(r0, 0x0, 0x15) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r8, 0x0, 0x0) (async) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000040)) (async) 09:32:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x22, 0x9, 0x5, 0xf6}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) write$bt_hci(r0, &(0x7f0000000080)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}}, 0xb) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f00000000c0)) (async, rerun: 64) write$bt_hci(r1, &(0x7f0000000080)={0x1, @remote_oob_data_neg_reply={{0x433, 0x6}}}, 0xa) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async, rerun: 32) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0x1e}) (async, rerun: 32) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x6, 0x3, 0x1}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x7, "9be7bd", 0xae, 0x1}) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x22, 0x9, 0x5, 0xf6}, 0x6) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) write$bt_hci(r0, &(0x7f0000000080)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}}, 0xb) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x103, 0x3}, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080042000000080000020041e4004400680000810490780a0100ac1414bbffffffff0a010100ac14140fffffffffac14140d440c7fd1e00000020000000900"/80]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x1, 0xff, 0x4, 0x1400, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x412000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x2, 0xfffffffb, 0x9, 0x1082, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x2ca002, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000005c0)={0x7, 0x3, 0x4, {0xf8000000, 0x401, 0x1ff, 0x8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x41100, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x3f, 0x1}, 0x10, 0x1beb3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7]}, 0x80) write$bt_hci(r0, 0x0, 0x15) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r8, 0x0, 0x0) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x103, 0x3}, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00080042000000080000020041e4004400680000810490780a0100ac1414bbffffffff0a010100ac14140fffffffffac14140d440c7fd1e00000020000000900"/80]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x1, 0xff, 0x4, 0x1400, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x412000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x2, 0xfffffffb, 0x9, 0x1082, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x2ca002, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r7, 0x0, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000005c0)={0x7, 0x3, 0x4, {0xf8000000, 0x401, 0x1ff, 0x8}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000100)=""/170, 0x41100, 0x3, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x3f, 0x1}, 0x10, 0x1beb3, 0xffffffffffffffff, 0x0, &(0x7f00000004c0)=[r2, r3, r4, r5, r6, r7]}, 0x80) (async) write$bt_hci(r0, 0x0, 0x15) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r8, 0x0, 0x0) (async) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000040)) (async) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x680021, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x22, 0x9, 0x5, 0xf6}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) write$bt_hci(r0, &(0x7f0000000080)={0x1, @switch_role={{0x80b, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}}}, 0xb) 09:32:31 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x2, @stop_pts=0xb}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000100)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "e198cd8cf64920e89445097433ca5dea"}}}, 0x1a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x6, 0x1, 0x200d, 0x9, 0x6, 0x4, 0x0, 0x1}}) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000040)=0x80) 09:32:31 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x2, @stop_pts=0xb}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000100)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "e198cd8cf64920e89445097433ca5dea"}}}, 0x1a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x2, @stop_pts=0xb}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r1, &(0x7f0000000100)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "e198cd8cf64920e89445097433ca5dea"}}}, 0x1a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x6, 0x1, 0x200d, 0x9, 0x6, 0x4, 0x0, 0x1}}) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000040)=0x80) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000080)={0x1, 0x0, {0x6, 0x1, 0x200d, 0x9, 0x6, 0x4, 0x0, 0x1}}) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:31 executing program 2: syz_open_dev$amidi(&(0x7f0000000040), 0x4, 0x48043) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 09:32:31 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) (async) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, &(0x7f0000000040)=0x80) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:31 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x2, @stop_pts=0xb}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000100)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "e198cd8cf64920e89445097433ca5dea"}}}, 0x1a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) (async) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000040)={0x0, 0x2, @stop_pts=0xb}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r1, &(0x7f0000000100)={0x1, @link_key_reply={{0x40b, 0x16}, {@none, "e198cd8cf64920e89445097433ca5dea"}}}, 0x1a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) 09:32:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x9a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a426959e79c381dfcfb9c32c031bfa5"], 0x16) 09:32:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x9a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a426959e79c381dfcfb9c32c031bfa5"], 0x16) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x9a) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a426959e79c381dfcfb9c32c031bfa5"], 0x16) (async) 09:32:31 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 4: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x7ff, "6e7b93b1dd32a15d54618e0e625ac7ee2048f65c4cdc90c16c085b540592b8bf", 0x1, 0x71, 0x7, 0x800, 0x8}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:31 executing program 4: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x7ff, "6e7b93b1dd32a15d54618e0e625ac7ee2048f65c4cdc90c16c085b540592b8bf", 0x1, 0x71, 0x7, 0x800, 0x8}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x3) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 64) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:31 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x9a) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a426959e79c381dfcfb9c32c031bfa5"], 0x16) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x9a) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a426959e79c381dfcfb9c32c031bfa5"], 0x16) (async) 09:32:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:31 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r8 = socket(0x23, 0x3, 0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) 09:32:31 executing program 4: ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000040)={0x7ff, "6e7b93b1dd32a15d54618e0e625ac7ee2048f65c4cdc90c16c085b540592b8bf", 0x1, 0x71, 0x7, 0x800, 0x8}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:31 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b11aae14cf9b2963a19a026df5"], 0x16) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xa0202, 0x0) bind$bt_hci(r1, &(0x7f00000000c0), 0x6) 09:32:32 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 09:32:32 executing program 3: ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x3) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:32 executing program 1: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b11aae14cf9b2963a19a026df5"], 0x16) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xa0202, 0x0) bind$bt_hci(r1, &(0x7f00000000c0), 0x6) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r8 = socket(0x23, 0x3, 0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r7, 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) (async) socket(0x23, 0x3, 0xfffffff8) (async) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) (async) 09:32:32 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 1: r0 = socket(0x0, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x2, 0x1, 0x2, 0x2, 0x101, 0x2, 0x8}) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="011a201200006a4269410612b11aae14cf9b2963a19a026df5"], 0x16) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0xa0202, 0x0) bind$bt_hci(r1, &(0x7f00000000c0), 0x6) 09:32:32 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) (async) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x2, 0x1, 0x2, 0x2, 0x101, 0x2, 0x8}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) (async) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) (async) r8 = socket(0x23, 0x3, 0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x0, 0x8, 0x1}) syz_open_dev$usbmon(&(0x7f0000000280), 0xdd1, 0x8000) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000001c0)={0x5e}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80600, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000140)=0x5) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x15) 09:32:32 executing program 1: r0 = socket(0x0, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r2 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x2, 0x1, 0x2, 0x2, 0x101, 0x2, 0x8}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) (async) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000140)={0x2, 0x1, 0x2, 0x2, 0x101, 0x2, 0x8}) (async) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket(0x1f, 0x0, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_params={{0x2041, 0x1003}, {0x8, 0x1f, 0x4, "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"}}}, 0x1007) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xfffffffa, [0x81, 0x452], 0x6}, 0x10) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x0, 0x8, 0x1}) (async) syz_open_dev$usbmon(&(0x7f0000000280), 0xdd1, 0x8000) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000001c0)={0x5e}) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80600, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000140)=0x5) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x15) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xfffffffa, [0x81, 0x452], 0x6}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xfffffffa, [0x81, 0x452], 0x6}, 0x10) (async) 09:32:32 executing program 1: r0 = socket(0x0, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:32:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="550df9966d53012c779761373c918c29ed6f961fbbf3fa5b1274d555e2d8ae1b32004606681d0c33d497ac3f309b45f18ca9afdbdf39314b1fe8cf14e603b10d57dde1e5660c20b00cebd4b067763b883893ab35018b37f6f1bbce9c3f563bf566be8940d3b7fefb857ffa2bbe9b6a88b0237c83083a6e5349a663ce8c848883731664e90057b0285613829d4e61c71ac8e8b8f5b92af690af0a6c62c8346b4eaba53340dbe0b089b55a0edd618429298c5c66b31dbe459dfc3f9ce36f1d0d018bcc8bc34534effd034e92ece2a57da9d47c343f6280f6577adf12942368e00e82e5aa3e72c24a4f6330") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket(0x1f, 0x0, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_params={{0x2041, 0x1003}, {0x8, 0x1f, 0x4, "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"}}}, 0x1007) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) socket(0x1f, 0x0, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_params={{0x2041, 0x1003}, {0x8, 0x1f, 0x4, "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"}}}, 0x1007) (async) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x0, 0x8, 0x1}) syz_open_dev$usbmon(&(0x7f0000000280), 0xdd1, 0x8000) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000001c0)={0x5e}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80600, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000140)=0x5) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x6, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x0, 0x8, 0x1}) (async) syz_open_dev$usbmon(&(0x7f0000000280), 0xdd1, 0x8000) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) (async) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000001c0)={0x5e}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x80600, 0x0) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r4, 0x4004510f, &(0x7f0000000140)=0x5) (async) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRESHEX=r2], 0x15) (async) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xfffffffa, [0x81, 0x452], 0x6}, 0x10) 09:32:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="550df9966d53012c779761373c918c29ed6f961fbbf3fa5b1274d555e2d8ae1b32004606681d0c33d497ac3f309b45f18ca9afdbdf39314b1fe8cf14e603b10d57dde1e5660c20b00cebd4b067763b883893ab35018b37f6f1bbce9c3f563bf566be8940d3b7fefb857ffa2bbe9b6a88b0237c83083a6e5349a663ce8c848883731664e90057b0285613829d4e61c71ac8e8b8f5b92af690af0a6c62c8346b4eaba53340dbe0b089b55a0edd618429298c5c66b31dbe459dfc3f9ce36f1d0d018bcc8bc34534effd034e92ece2a57da9d47c343f6280f6577adf12942368e00e82e5aa3e72c24a4f6330") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="550df9966d53012c779761373c918c29ed6f961fbbf3fa5b1274d555e2d8ae1b32004606681d0c33d497ac3f309b45f18ca9afdbdf39314b1fe8cf14e603b10d57dde1e5660c20b00cebd4b067763b883893ab35018b37f6f1bbce9c3f563bf566be8940d3b7fefb857ffa2bbe9b6a88b0237c83083a6e5349a663ce8c848883731664e90057b0285613829d4e61c71ac8e8b8f5b92af690af0a6c62c8346b4eaba53340dbe0b089b55a0edd618429298c5c66b31dbe459dfc3f9ce36f1d0d018bcc8bc34534effd034e92ece2a57da9d47c343f6280f6577adf12942368e00e82e5aa3e72c24a4f6330") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) 09:32:32 executing program 1: r0 = socket(0x2, 0x0, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket(0x1f, 0x0, 0x6) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_params={{0x2041, 0x1003}, {0x8, 0x1f, 0x4, "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"}}}, 0x1007) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) socket(0x1f, 0x0, 0x6) (async) write$bt_hci(r1, &(0x7f0000000080)={0x1, @le_set_ext_scan_params={{0x2041, 0x1003}, {0x8, 0x1f, 0x4, "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"}}}, 0x1007) (async) 09:32:32 executing program 1: r0 = socket(0x2, 0x0, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0xa18, 0x0, 0x20, 0x6, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x80000001, [0x6, 0x4], 0xfffb}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 4: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x100, 0x7, 0x400, 0x1814, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x7}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x7fffffff, 0x30f, 0x810, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xe}, 0x48) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1ad, 0x101, 0x0, 0x1, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x220b80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@raw=[@generic={0x20, 0xa, 0x0, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000100)=""/184, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}, 0x80) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="550df9966d53012c779761373c918c29ed6f961fbbf3fa5b1274d555e2d8ae1b32004606681d0c33d497ac3f309b45f18ca9afdbdf39314b1fe8cf14e603b10d57dde1e5660c20b00cebd4b067763b883893ab35018b37f6f1bbce9c3f563bf566be8940d3b7fefb857ffa2bbe9b6a88b0237c83083a6e5349a663ce8c848883731664e90057b0285613829d4e61c71ac8e8b8f5b92af690af0a6c62c8346b4eaba53340dbe0b089b55a0edd618429298c5c66b31dbe459dfc3f9ce36f1d0d018bcc8bc34534effd034e92ece2a57da9d47c343f6280f6577adf12942368e00e82e5aa3e72c24a4f6330") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="550df9966d53012c779761373c918c29ed6f961fbbf3fa5b1274d555e2d8ae1b32004606681d0c33d497ac3f309b45f18ca9afdbdf39314b1fe8cf14e603b10d57dde1e5660c20b00cebd4b067763b883893ab35018b37f6f1bbce9c3f563bf566be8940d3b7fefb857ffa2bbe9b6a88b0237c83083a6e5349a663ce8c848883731664e90057b0285613829d4e61c71ac8e8b8f5b92af690af0a6c62c8346b4eaba53340dbe0b089b55a0edd618429298c5c66b31dbe459dfc3f9ce36f1d0d018bcc8bc34534effd034e92ece2a57da9d47c343f6280f6577adf12942368e00e82e5aa3e72c24a4f6330") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) (async) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0xa18, 0x0, 0x20, 0x6, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x80000001, [0x6, 0x4], 0xfffb}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0xa18, 0x0, 0x20, 0x6, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x80000001, [0x6, 0x4], 0xfffb}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x100, 0x7, 0x400, 0x1814, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x7}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x7fffffff, 0x30f, 0x810, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xe}, 0x48) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1ad, 0x101, 0x0, 0x1, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5}, 0x48) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x220b80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@raw=[@generic={0x20, 0xa, 0x0, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000100)=""/184, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}, 0x80) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:32 executing program 4: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:32 executing program 1: r0 = socket(0x2, 0x0, 0x6) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x0, @vbi={0x3, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x100, 0x7, 0x400, 0x1814, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x7}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x8, 0x7fffffff, 0x30f, 0x810, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xe}, 0x48) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r5, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1ad, 0x101, 0x0, 0x1, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x5}, 0x48) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x220b80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@raw=[@generic={0x20, 0xa, 0x0, 0x7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000100)=""/184, 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}, 0x80) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (rerun: 64) 09:32:32 executing program 4: ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:32 executing program 3: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x1ff, "810925e45eff7f00000000000000000015a91e4e080a000300", 0x1, 0xfffffffd, 0x5, 0x1204008, 0x4070834, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0xa18, 0x0, 0x20, 0x6, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0x80000001, [0x6, 0x4], 0xfffb}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 09:32:32 executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x5, 0xfffffffffffffe9a) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x7, "4007000000f46f1baf19b8b2f230142b7a162f5b51eb39a9bfbb3174aa57b7ed", 0x1, 0xcb81, 0x2, 0x40004, 0x4000000, 0x4}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (rerun: 32) 09:32:32 executing program 3: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x1ff, "810925e45eff7f00000000000000000015a91e4e080a000300", 0x1, 0xfffffffd, 0x5, 0x1204008, 0x4070834, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x1ff, "810925e45eff7f00000000000000000015a91e4e080a000300", 0x1, 0xfffffffd, 0x5, 0x1204008, 0x4070834, 0x4}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x5, 0xfffffffffffffe9a) (async) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x7, "4007000000f46f1baf19b8b2f230142b7a162f5b51eb39a9bfbb3174aa57b7ed", 0x1, 0xcb81, 0x2, 0x40004, 0x4000000, 0x4}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x5, 0xfffffffffffffe9a) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) (async) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x7, "4007000000f46f1baf19b8b2f230142b7a162f5b51eb39a9bfbb3174aa57b7ed", 0x1, 0xcb81, 0x2, 0x40004, 0x4000000, 0x4}) 09:32:32 executing program 3: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000040)={0x1ff, "810925e45eff7f00000000000000000015a91e4e080a000300", 0x1, 0xfffffffd, 0x5, 0x1204008, 0x4070834, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000100)) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (rerun: 32) 09:32:32 executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0x0, 0x0, 0x38414261, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 09:32:32 executing program 5: ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x3c, 0x4, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @remote}}}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) 09:32:32 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac, 0x0, 0x0, [0x7, 0x2], [0x401, 0x2], 0x1}}) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01fb4112fb386fa5a1ed45dfed6dfa31ce18a665006a"], 0x16) 09:32:32 executing program 5: ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x3c, 0x4, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @remote}}}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x3c, 0x4, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @remote}}}}) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) (async) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac, 0x0, 0x0, [0x7], [0x401, 0x2], 0x1}}) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01fb4112fb386fa5a1ed45dfed6dfa31ce18a665006a"], 0x16) 09:32:32 executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:32 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 09:32:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x3c, 0x4, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @remote}}}}) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) 09:32:32 executing program 5: ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f0000000040)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac, 0x0, 0x0, [], [0x401, 0x2], 0x1}}) 09:32:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="01fb4112fb386fa5a1ed45dfed6dfa31ce18a665006a"], 0x16) 09:32:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac, 0x0, 0x0, [], [0x401], 0x1}}) 09:32:33 executing program 5: openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x990000, 0x5, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a74, 0xffffff05, '\x00', @p_u16=&(0x7f0000000100)=0x3f}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="565ebefd1d748b1e3c1c06aa7d3c3c4f3f05337d91ff7214f28bd6f0dbcdb156b17210e41bf2720dec34de1f33813f83d0656555") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x1200, [0x87a, 0x2000], 0x2}, 0x10) 09:32:33 executing program 1: socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x4e23, 0x8, @empty, 0x5}, 0x1, {[0xffff, 0x0, 0x3ff, 0x8, 0x5, 0x80000000, 0x5, 0x8001]}}, 0x5c) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x583041, 0x0) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0x3, 0xa, 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1000, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac, 0x0, 0x0, [], [], 0x1}}) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x4e23, 0x8, @empty, 0x5}, 0x1, {[0xffff, 0x0, 0x3ff, 0x8, 0x5, 0x80000000, 0x5, 0x8001]}}, 0x5c) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x583041, 0x0) 09:32:33 executing program 5: openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x990000, 0x5, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a74, 0xffffff05, '\x00', @p_u16=&(0x7f0000000100)=0x3f}}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="565ebefd1d748b1e3c1c06aa7d3c3c4f3f05337d91ff7214f28bd6f0dbcdb156b17210e41bf2720dec34de1f33813f83d0656555") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x1200, [0x87a, 0x2000], 0x2}, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x990000, 0x5, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a74, 0xffffff05, '\x00', @p_u16=&(0x7f0000000100)=0x3f}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="565ebefd1d748b1e3c1c06aa7d3c3c4f3f05337d91ff7214f28bd6f0dbcdb156b17210e41bf2720dec34de1f33813f83d0656555") (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000680)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x1200, [0x87a, 0x2000], 0x2}, 0x10) (async) 09:32:33 executing program 1: socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0x3, 0xa, 0x9) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1000, 0x2}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) socket(0x3, 0xa, 0x9) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1000, 0x2}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @vbi={0x0, 0xac}}) 09:32:33 executing program 1: socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 5: openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000180)={0x990000, 0x5, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x990a74, 0xffffff05, '\x00', @p_u16=&(0x7f0000000100)=0x3f}}) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080)="565ebefd1d748b1e3c1c06aa7d3c3c4f3f05337d91ff7214f28bd6f0dbcdb156b17210e41bf2720dec34de1f33813f83d0656555") r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000000c0)={0x1200, [0x87a, 0x2000], 0x2}, 0x10) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0xa, 0x4e23, 0x8, @empty, 0x5}, 0x1, {[0xffff, 0x0, 0x3ff, 0x8, 0x5, 0x80000000, 0x5, 0x8001]}}, 0x5c) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x583041, 0x0) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket(0x3, 0xa, 0x9) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x1000, 0x2}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:33 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 09:32:33 executing program 1: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@generic={0x8}, @generic={0x80}, @raw={0xfe, 0x8, "cc22914338e3"}, @generic={0xa}], 0xb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="b4c6eb704a736347ef81662d639fe5367c6bb03f60d05cdc063ff5baa8627949cfbd2959943007670fc995aa46184820d858297e6564cada55f84bdfb952083c47f5b898fd601cdf09f18f6f520ddedd2f0502c5db455554fc7909b17e78f516b131df533c205da1fc44cfba84dd9c17add3aaaec33b6c8777a04cbefd271d2a788f2b276f835126bd091494474976f40fdf6002c887142a61afcc1b2bdc82") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000100)="a43b60b7dac8140bd0c0157ba24a4538b3da5bd3b205ae4138a7071cb8574f4e73dcaba30178fbc0b99bb5380424178f81af7c5fab03c84e54922988") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000180)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 1: r0 = socket(0x2, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x0, 0x0) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) 09:32:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@generic={0x8}, @generic={0x80}, @raw={0xfe, 0x8, "cc22914338e3"}, @generic={0xa}], 0xb) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x80, 0x80, 0x3c, 0x4, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @empty, @remote}}}}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) (async) 09:32:33 executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="b4c6eb704a736347ef81662d639fe5367c6bb03f60d05cdc063ff5baa8627949cfbd2959943007670fc995aa46184820d858297e6564cada55f84bdfb952083c47f5b898fd601cdf09f18f6f520ddedd2f0502c5db455554fc7909b17e78f516b131df533c205da1fc44cfba84dd9c17add3aaaec33b6c8777a04cbefd271d2a788f2b276f835126bd091494474976f40fdf6002c887142a61afcc1b2bdc82") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000100)="a43b60b7dac8140bd0c0157ba24a4538b3da5bd3b205ae4138a7071cb8574f4e73dcaba30178fbc0b99bb5380424178f81af7c5fab03c84e54922988") (async, rerun: 32) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000180)) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (rerun: 32) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000040)={0xfffffffa, [0x81, 0x452], 0x6}, 0x10) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=[@generic={0x8}, @generic={0x80}, @raw={0xfe, 0x8, "cc22914338e3"}, @generic={0xa}], 0xb) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x6ffb}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x0, 0x5, 0x81) r1 = socket(0x1f, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000040)="b4c6eb704a736347ef81662d639fe5367c6bb03f60d05cdc063ff5baa8627949cfbd2959943007670fc995aa46184820d858297e6564cada55f84bdfb952083c47f5b898fd601cdf09f18f6f520ddedd2f0502c5db455554fc7909b17e78f516b131df533c205da1fc44cfba84dd9c17add3aaaec33b6c8777a04cbefd271d2a788f2b276f835126bd091494474976f40fdf6002c887142a61afcc1b2bdc82") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000100)="a43b60b7dac8140bd0c0157ba24a4538b3da5bd3b205ae4138a7071cb8574f4e73dcaba30178fbc0b99bb5380424178f81af7c5fab03c84e54922988") (async) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000180)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x303) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @link_key_reply={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "aa2e1e8e2064c8af3f59a72a5a261aea"}}}, 0x3) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x2, 0x2) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x8, 0x40, r4, 0x0, &(0x7f0000000100)={0xa10908, 0xfffff801, '\x00', @ptr=0x7}}) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r8 = socket(0x23, 0x3, 0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) write$bt_hci(r1, 0x0, 0x15) 09:32:33 executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x6ffb}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x0, 0x5, 0x81) r1 = socket(0x1f, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x6ffb}, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x0, 0x5, 0x81) (async) socket(0x1f, 0x80000, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000240)="9e056cefb2fb3297b27be27cfb45853f1ef544fa9d15d743a3ff82c7db239ab833922b2b9633ef52deb196ac524f31398c59dbceac53f7de1d7538dad1bbc68f777e005961aef5674c78aa2977d15710ffc72018a6b707469b9698162dc53041d232d24a31cb06a94371fc031854a679857d059bd17aab2d2314e8f7040e0d25a3303735055158eb0a434ab699a3ce45abc9c5795f1e34303b2a942ccdff36f9f870b63f7a766a9078ef6ff87a7bb8a601a118c4d770ec08e78c4cf8af197b245a471cab1cb6d5f3636bad92746a084ec83632f9") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000140)={0x7f, [0x0, 0x6]}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x244000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000200)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x303) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) write$bt_hci(r2, &(0x7f0000000040)={0x1, @link_key_reply={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "aa2e1e8e2064c8af3f59a72a5a261aea"}}}, 0x3) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x2, 0x2) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x8, 0x40, r4, 0x0, &(0x7f0000000100)={0xa10908, 0xfffff801, '\x00', @ptr=0x7}}) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) write$bt_hci(r1, 0x0, 0x15) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r8 = socket(0x23, 0x3, 0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000240)="9e056cefb2fb3297b27be27cfb45853f1ef544fa9d15d743a3ff82c7db239ab833922b2b9633ef52deb196ac524f31398c59dbceac53f7de1d7538dad1bbc68f777e005961aef5674c78aa2977d15710ffc72018a6b707469b9698162dc53041d232d24a31cb06a94371fc031854a679857d059bd17aab2d2314e8f7040e0d25a3303735055158eb0a434ab699a3ce45abc9c5795f1e34303b2a942ccdff36f9f870b63f7a766a9078ef6ff87a7bb8a601a118c4d770ec08e78c4cf8af197b245a471cab1cb6d5f3636bad92746a084ec83632f9") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) write$bt_hci(r2, 0x0, 0x0) (async, rerun: 32) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0)) (rerun: 32) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000140)={0x7f, [0x0, 0x6]}, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x244000, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000200)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) write$bt_hci(r1, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) (async) write$bt_hci(r1, 0x0, 0x15) (async) 09:32:33 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x6ffb}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x0, 0x5, 0x81) r1 = socket(0x1f, 0x80000, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:33 executing program 1: r0 = socket(0x2, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000080)="cda630eebd8bb04e80cfe85f5129013dbc2594ec09fb654058bc44d65ad4227053c4420358bba53d45cdb14941db4545729f69870a95ce3db8536e98811dcd44641ffee1813731613373485bd0190ffe9c3685eba4e91f4de70731b4ecdd6b37d1d22839156cc49cd0") 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x303) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_START(r1, 0x5402) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) write$bt_hci(r2, &(0x7f0000000040)={0x1, @link_key_reply={{}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "aa2e1e8e2064c8af3f59a72a5a261aea"}}}, 0x3) (async) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x2, 0x2) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r4, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x8, 0x40, r4, 0x0, &(0x7f0000000100)={0xa10908, 0xfffff801, '\x00', @ptr=0x7}}) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000240)="9e056cefb2fb3297b27be27cfb45853f1ef544fa9d15d743a3ff82c7db239ab833922b2b9633ef52deb196ac524f31398c59dbceac53f7de1d7538dad1bbc68f777e005961aef5674c78aa2977d15710ffc72018a6b707469b9698162dc53041d232d24a31cb06a94371fc031854a679857d059bd17aab2d2314e8f7040e0d25a3303735055158eb0a434ab699a3ce45abc9c5795f1e34303b2a942ccdff36f9f870b63f7a766a9078ef6ff87a7bb8a601a118c4d770ec08e78c4cf8af197b245a471cab1cb6d5f3636bad92746a084ec83632f9") bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) write$bt_hci(r2, 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0)) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000140)={0x7f, [0x0, 0x6]}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x244000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000200)) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_bt_hci(r1, 0x400448c9, &(0x7f0000000240)="9e056cefb2fb3297b27be27cfb45853f1ef544fa9d15d743a3ff82c7db239ab833922b2b9633ef52deb196ac524f31398c59dbceac53f7de1d7538dad1bbc68f777e005961aef5674c78aa2977d15710ffc72018a6b707469b9698162dc53041d232d24a31cb06a94371fc031854a679857d059bd17aab2d2314e8f7040e0d25a3303735055158eb0a434ab699a3ce45abc9c5795f1e34303b2a942ccdff36f9f870b63f7a766a9078ef6ff87a7bb8a601a118c4d770ec08e78c4cf8af197b245a471cab1cb6d5f3636bad92746a084ec83632f9") (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x48000, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f00000000c0)) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000140)={0x7f, [0x0, 0x6]}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x244000, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4) (async) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000200)) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r8 = socket(0x23, 0x3, 0xfffffff8) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000040)={0x8001, [0x80, 0x6], 0xfff7}, 0x10) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x588184fec31da9ed, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x44400, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x800, 0x8, r1, 0x0, &(0x7f00000000c0)={0x990a76, 0x80000001, '\x00', @ptr=0x4}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0x9, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1ff, 0x0}, 0x8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x200640, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x105480, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x7, 0x5, 0x9ed3, 0x1208, 0x1, 0x4, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a330800041c012d4c925a82df000000aed2fa3c245e9353de03ae25b60c403ca58e34deab529eeda6c2102902e40bc062c789cbab4328dab7c6a926ded701fff8bc8bf21f6a3a"], &(0x7f0000000200)='syzkaller\x00', 0x2c1, 0x45, &(0x7f0000000540)=""/69, 0x41100, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x72b6b2fe, 0x1000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000480)=[r5, 0xffffffffffffffff, r6, r2, r2, r7]}, 0x80) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f00000004c0)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a6069410612b1cf9b0963a19a026df5"], 0x16) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x588184fec31da9ed, 0x0) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, 0x0, 0x15) 09:32:33 executing program 1: socket(0x2, 0x3, 0x0) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) socket(0x23, 0x3, 0xfffffff8) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x1, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) write$bt_hci(r3, &(0x7f0000000180)={0x1, @le_create_cis={{0x2064, 0x15}, {0x5, [{0x5, 0xffff}, {0x8000, 0x1}, {0x6c6}, {0x7, 0x1000}, {0x100, 0x9}]}}}, 0x19) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x1f, 0xc0, 0x9, 0xfc}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x484000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000140)=0x80, 0x4) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x44400, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x800, 0x8, r1, 0x0, &(0x7f00000000c0)={0x990a76, 0x80000001, '\x00', @ptr=0x4}}) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0x9, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1ff, 0x0}, 0x8) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x200640, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x105480, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x7, 0x5, 0x9ed3, 0x1208, 0x1, 0x4, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) (async) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a330800041c012d4c925a82df000000aed2fa3c245e9353de03ae25b60c403ca58e34deab529eeda6c2102902e40bc062c789cbab4328dab7c6a926ded701fff8bc8bf21f6a3a"], &(0x7f0000000200)='syzkaller\x00', 0x2c1, 0x45, &(0x7f0000000540)=""/69, 0x41100, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x72b6b2fe, 0x1000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000480)=[r5, 0xffffffffffffffff, r6, r2, r2, r7]}, 0x80) (async) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f00000004c0)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a6069410612b1cf9b0963a19a026df5"], 0x16) (async) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1}, 0x6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x588184fec31da9ed, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xdfff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) 09:32:33 executing program 1: socket(0x0, 0x3, 0x0) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x1) (async, rerun: 64) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x1, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) write$bt_hci(r3, &(0x7f0000000180)={0x1, @le_create_cis={{0x2064, 0x15}, {0x5, [{0x5, 0xffff}, {0x8000, 0x1}, {0x6c6}, {0x7, 0x1000}, {0x100, 0x9}]}}}, 0x19) (async) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x1f, 0xc0, 0x9, 0xfc}, 0x6) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x484000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000140)=0x80, 0x4) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0044d09, &(0x7f00000005c0)=0x19) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfe, &(0x7f0000000140)=""/254, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[r4, r5, r6, 0x1]}, 0x80) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x1}, 0x6) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d09, &(0x7f00000005c0)=0x19) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x44400, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x800, 0x8, r1, 0x0, &(0x7f00000000c0)={0x990a76, 0x80000001, '\x00', @ptr=0x4}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0x9, 0x4) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1ff, 0x0}, 0x8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x200640, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x105480, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x7, 0x5, 0x9ed3, 0x1208, 0x1, 0x4, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a330800041c012d4c925a82df000000aed2fa3c245e9353de03ae25b60c403ca58e34deab529eeda6c2102902e40bc062c789cbab4328dab7c6a926ded701fff8bc8bf21f6a3a"], &(0x7f0000000200)='syzkaller\x00', 0x2c1, 0x45, &(0x7f0000000540)=""/69, 0x41100, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x72b6b2fe, 0x1000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000480)=[r5, 0xffffffffffffffff, r6, r2, r2, r7]}, 0x80) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f00000004c0)) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a6069410612b1cf9b0963a19a026df5"], 0x16) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x44400, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x800, 0x8, r1, 0x0, &(0x7f00000000c0)={0x990a76, 0x80000001, '\x00', @ptr=0x4}}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r2, 0x0, 0x0) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000140)=0x9, 0x4) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r3, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1ff}, 0x8) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x200640, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x105480, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x13, 0x7, 0x5, 0x9ed3, 0x1208, 0x1, 0x4, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r7, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a330800041c012d4c925a82df000000aed2fa3c245e9353de03ae25b60c403ca58e34deab529eeda6c2102902e40bc062c789cbab4328dab7c6a926ded701fff8bc8bf21f6a3a"], &(0x7f0000000200)='syzkaller\x00', 0x2c1, 0x45, &(0x7f0000000540)=""/69, 0x41100, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xd, 0x72b6b2fe, 0x1000}, 0x10, r4, 0x0, 0x0, &(0x7f0000000480)=[r5, 0xffffffffffffffff, r6, r2, r2, r7]}, 0x80) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETVERSION(r8, 0x80044942, &(0x7f00000004c0)) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="011a201200006a6069410612b1cf9b0963a19a026df5"], 0x16) (async) ioctl$SOUND_MIXER_READ_RECMASK(r2, 0x80044dfd, &(0x7f0000000180)) (async) 09:32:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @read_link_policy={{0x80c, 0x2}, {0xc9}}}, 0x1) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) (async, rerun: 64) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (rerun: 64) write$bt_hci(r0, 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x1, 0x2) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) write$bt_hci(r3, &(0x7f0000000180)={0x1, @le_create_cis={{0x2064, 0x15}, {0x5, [{0x5, 0xffff}, {0x8000, 0x1}, {0x6c6}, {0x7, 0x1000}, {0x100, 0x9}]}}}, 0x19) (async, rerun: 64) bind$isdn_base(r2, &(0x7f00000000c0)={0x22, 0x1f, 0xc0, 0x9, 0xfc}, 0x6) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) (async) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) (async) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x484000, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000140)=0x80, 0x4) 09:32:33 executing program 1: socket(0x0, 0x3, 0x0) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d09, &(0x7f00000005c0)=0x19) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:33 executing program 1: socket(0x0, 0x3, 0x0) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r2 = socket(0x2b, 0x2, 0xffffffff) write$bt_hci(r2, &(0x7f0000000080)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x8000}}}, 0x8) 09:32:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x3, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:33 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)=@overlay={0x6, 0x5, 0x4, 0x70000, 0x1, {}, {0x1, 0x8, 0x1, 0x20, 0x1, 0x0, "363ef51a"}, 0x734, 0x3, {}, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x3f277db1, 0x10009b], 0xa}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0xfffffeff, [0x3, 0x80000], 0x200}, 0x10) 09:32:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) r2 = socket(0x2b, 0x2, 0xffffffff) write$bt_hci(r2, &(0x7f0000000080)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x8000}}}, 0x8) 09:32:33 executing program 1: socket(0x2, 0x0, 0x0) 09:32:33 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)=@overlay={0x6, 0x5, 0x4, 0x70000, 0x1, {}, {0x1, 0x8, 0x1, 0x20, 0x1, 0x0, "363ef51a"}, 0x734, 0x3, {}, 0x4}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x3f277db1, 0x10009b], 0xa}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0xfffffeff, [0x3, 0x80000], 0x200}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)=@overlay={0x6, 0x5, 0x4, 0x70000, 0x1, {}, {0x1, 0x8, 0x1, 0x20, 0x1, 0x0, "363ef51a"}, 0x734, 0x3, {}, 0x4}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x3f277db1, 0x10009b], 0xa}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0xfffffeff, [0x3, 0x80000], 0x200}, 0x10) (async) 09:32:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) r2 = socket(0x2b, 0x2, 0xffffffff) write$bt_hci(r2, &(0x7f0000000080)={0x1, @add_sco={{0x407, 0x4}, {0xc8, 0x8000}}}, 0x8) 09:32:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, 0x0, 0x15) (async) 09:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x3, 'syz0\x00'}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x3, 'syz0\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) 09:32:34 executing program 1: socket(0x2, 0x0, 0x0) 09:32:34 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)=@overlay={0x6, 0x5, 0x4, 0x70000, 0x1, {}, {0x1, 0x8, 0x1, 0x20, 0x1, 0x0, "363ef51a"}, 0x734, 0x3, {}, 0x4}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x6, [0x3f277db1, 0x10009b], 0xa}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000100)={0xfffffeff, [0x3, 0x80000], 0x200}, 0x10) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400}, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1, {[0x8, 0x5, 0x8, 0xaab, 0x8, 0xffffff8f, 0x1000, 0xffff8000]}}, 0x5c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x80000) 09:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000080)={0x3, 'syz0\x00'}) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) 09:32:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x6, 0x0, '\x00', &(0x7f00000000c0)=0x1}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10000, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @raw_data=[0x5, 0x26, 0x7f, 0xbf2e, 0xfffff800, 0xdc05, 0x6, 0x2, 0x8, 0x7, 0x3f24, 0x5, 0x8, 0x3f, 0x7, 0x1]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:34 executing program 1: socket(0x2, 0x0, 0x0) 09:32:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 64) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) (rerun: 64) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x6, 0x0, '\x00', &(0x7f00000000c0)=0x1}) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10000, 0x4) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="ae70661715d1df6e2960d7358dbb896c62cbd6aaf7a3d1251759a9cca42e19dafc4082a319", 0x25, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x3, 0x4}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={r2}) 09:32:34 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400}, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1, {[0x8, 0x5, 0x8, 0xaab, 0x8, 0xffffff8f, 0x1000, 0xffff8000]}}, 0x5c) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) (async, rerun: 64) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (rerun: 64) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x80000) 09:32:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @raw_data=[0x5, 0x26, 0x7f, 0xbf2e, 0xfffff800, 0xdc05, 0x6, 0x2, 0x8, 0x7, 0x3f24, 0x5, 0x8, 0x3f, 0x7, 0x1]}) (async, rerun: 32) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async, rerun: 32) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @raw_data=[0x5, 0x26, 0x7f, 0xbf2e, 0xfffff800, 0xdc05, 0x6, 0x2, 0x8, 0x7, 0x3f24, 0x5, 0x8, 0x3f, 0x7, 0x1]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:34 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x6, 0x0, '\x00', &(0x7f00000000c0)=0x1}) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000080)=0x10000, 0x4) (rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="ae70661715d1df6e2960d7358dbb896c62cbd6aaf7a3d1251759a9cca42e19dafc4082a319", 0x25, 0x0}) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x3, 0x4}, 0x6) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={r2}) (rerun: 32) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000040)={0x1, 0x2, @raw_data=[0x5, 0x26, 0x7f, 0xbf2e, 0xfffff800, 0xdc05, 0x6, 0x2, 0x8, 0x7, 0x3f24, 0x5, 0x8, 0x3f, 0x7, 0x1]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d09, &(0x7f00000005c0)=0x19) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x46f0, [0xa838, 0xfffffffe], 0x6}, 0x10) socket(0x8, 0x80000, 0x69) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) 09:32:34 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400}, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1, {[0x8, 0x5, 0x8, 0xaab, 0x8, 0xffffff8f, 0x1000, 0xffff8000]}}, 0x5c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, 0x0, 0x15) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x80000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r0, 0x0, 0x0) (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000200)={0x9}, 0x0, 0x0, 0x0) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x400}, {0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1, {[0x8, 0x5, 0x8, 0xaab, 0x8, 0xffffff8f, 0x1000, 0xffff8000]}}, 0x5c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, 0x0, 0x15) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400400, 0x0) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x80000) (async) 09:32:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d09, &(0x7f00000005c0)=0x19) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x46f0, [0xa838, 0xfffffffe], 0x6}, 0x10) socket(0x8, 0x80000, 0x69) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x46f0, [0xa838, 0xfffffffe], 0x6}, 0x10) (async) socket(0x8, 0x80000, 0x69) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="ae70661715d1df6e2960d7358dbb896c62cbd6aaf7a3d1251759a9cca42e19dafc4082a319", 0x25, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x3, 0x4}, 0x6) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={r2}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)={0x1, @le_ltk_reply={{0x201a, 0x12}, {0x0, "6a4269410612b1cf9b2963a19a026df5"}}}, 0x16) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) write$bt_hci(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000080)="ae70661715d1df6e2960d7358dbb896c62cbd6aaf7a3d1251759a9cca42e19dafc4082a319", 0x25}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0x3, 0x4}, 0x6) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000100)={r2}) (async) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) 09:32:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0700780000000000000000660000fc299078e0000001ffffffff8909cdff0000000000000024cb01ac1414aa00000000ac1414aa000000d97f000001ffff9020e0000001000000030000"]}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x49, 0x20, 0x402, 0x1, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0xd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x8001, 0x0, 0x6, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x7fffffff, 0x2, 0xfff, 0x880, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x48) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) write$bt_hci(r3, 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d09, &(0x7f00000005c0)=0x19) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) 09:32:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x5) write$bt_hci(r0, 0x0, 0x15) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000080)={0x0, 0x1, @start={0x2, 0x1}}) 09:32:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x46f0, [0xa838, 0xfffffffe], 0x6}, 0x10) socket(0x8, 0x80000, 0x69) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x46f0, [0xa838, 0xfffffffe], 0x6}, 0x10) (async) socket(0x8, 0x80000, 0x69) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x15) (async) 09:32:34 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) [ 3528.060706] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [syz-executor.0:1478] [ 3528.068521] Modules linked in: [ 3528.071705] irq event stamp: 9078 [ 3528.075138] hardirqs last enabled at (9077): [] restore_regs_and_return_to_kernel+0x0/0x2a [ 3528.085163] hardirqs last disabled at (9078): [] apic_timer_interrupt+0x8e/0xa0 [ 3528.094147] softirqs last enabled at (4982): [] __do_softirq+0x68b/0x9ff [ 3528.102609] softirqs last disabled at (4881): [] irq_exit+0x193/0x240 [ 3528.110726] CPU: 0 PID: 1478 Comm: syz-executor.0 Not tainted 4.14.290-syzkaller #0 [ 3528.119186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3528.128516] task: ffff8880958b46c0 task.stack: ffff88809ace0000 [ 3528.134585] RIP: 0010:queued_write_lock_slowpath+0xcb/0x1d0 [ 3528.140281] RSP: 0018:ffff88809ace7d10 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 3528.147975] RAX: 0000000000000101 RBX: ffffffff89dd8468 RCX: 0000000000002d52 [ 3528.155227] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd8468 [ 3528.162493] RBP: ffffffff89dd846c R08: ffffffff8b9b7590 R09: 0000000000040588 [ 3528.169754] R10: ffff8880958b4f98 R11: ffff8880958b46c0 R12: 0000000000000003 [ 3528.177008] R13: fffffbfff13bb08d R14: 00000000000000ff R15: ffff8880ac3e5d10 [ 3528.184258] FS: 00005555555a5400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 3528.192466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3528.198329] CR2: 0000555555882708 CR3: 00000000a0b5a000 CR4: 00000000003406f0 [ 3528.205587] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3528.212846] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3528.220127] Call Trace: [ 3528.222709] do_raw_write_lock+0xc2/0x1d0 [ 3528.226840] bt_sock_unlink+0x1d/0x170 [ 3528.230741] hci_sock_release+0xc1/0x4c0 [ 3528.234809] __sock_release+0xcd/0x2b0 [ 3528.238688] ? __sock_release+0x2b0/0x2b0 [ 3528.242834] sock_close+0x15/0x20 [ 3528.246276] __fput+0x25f/0x7a0 [ 3528.249540] task_work_run+0x11f/0x190 [ 3528.253424] exit_to_usermode_loop+0x1ad/0x200 [ 3528.257989] do_syscall_64+0x4a3/0x640 [ 3528.261859] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3528.267029] RIP: 0033:0x7f701b77ce4b [ 3528.270718] RSP: 002b:00007ffcbd682a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3528.278407] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f701b77ce4b [ 3528.285654] RDX: ffffffffffffffb8 RSI: 0000000000000001 RDI: 000000000000000a [ 3528.292904] RBP: 00007f701b8de960 R08: 0000000000000000 R09: 00000383cadc9720 [ 3528.300172] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000003589b5 [ 3528.307433] R13: 00007f701b8e2070 R14: 00007f701b8dcf60 R15: 0000000000000000 [ 3528.314705] Code: 75 dc 49 89 dd 49 89 dc 41 be ff 00 00 00 49 c1 ed 03 41 83 e4 07 48 b8 00 00 00 00 00 fc ff df 49 01 c5 41 83 c4 03 eb 02 f3 90 <41> 0f b6 45 00 41 38 c4 7c 08 84 c0 0f 85 9e 00 00 00 8b 03 83 [ 3528.333880] Sending NMI from CPU 0 to CPUs 1: [ 3528.338414] NMI backtrace for cpu 1 skipped: idling at pc 0xffffffff8723f20e [ 3528.339363] Kernel panic - not syncing: softlockup: hung tasks [ 3528.351547] CPU: 0 PID: 1478 Comm: syz-executor.0 Tainted: G L 4.14.290-syzkaller #0 [ 3528.360534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 3528.369864] Call Trace: [ 3528.372422] [ 3528.374555] dump_stack+0x1b2/0x281 [ 3528.378164] panic+0x1f9/0x42d [ 3528.381353] ? add_taint.cold+0x16/0x16 [ 3528.385310] ? printk_safe_flush+0xa9/0x110 [ 3528.389612] watchdog_timer_fn.cold+0x16/0x25 [ 3528.394089] __hrtimer_run_queues+0x30b/0xc80 [ 3528.398566] ? watchdog+0x50/0x50 [ 3528.402001] ? retrigger_next_event+0x310/0x310 [ 3528.406662] ? ktime_get_update_offsets_now+0x272/0x3f0 [ 3528.412086] hrtimer_interrupt+0x1e6/0x5e0 [ 3528.416317] smp_apic_timer_interrupt+0x117/0x5e0 [ 3528.421166] apic_timer_interrupt+0x93/0xa0 [ 3528.425476] [ 3528.427723] RIP: 0010:queued_write_lock_slowpath+0xcb/0x1d0 [ 3528.433504] RSP: 0018:ffff88809ace7d10 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff10 [ 3528.441222] RAX: 0000000000000101 RBX: ffffffff89dd8468 RCX: 0000000000002d52 [ 3528.448484] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff89dd8468 [ 3528.455745] RBP: ffffffff89dd846c R08: ffffffff8b9b7590 R09: 0000000000040588 [ 3528.462998] R10: ffff8880958b4f98 R11: ffff8880958b46c0 R12: 0000000000000003 [ 3528.470252] R13: fffffbfff13bb08d R14: 00000000000000ff R15: ffff8880ac3e5d10 [ 3528.477518] do_raw_write_lock+0xc2/0x1d0 [ 3528.481739] bt_sock_unlink+0x1d/0x170 [ 3528.485726] hci_sock_release+0xc1/0x4c0 [ 3528.489785] __sock_release+0xcd/0x2b0 [ 3528.493698] ? __sock_release+0x2b0/0x2b0 [ 3528.497834] sock_close+0x15/0x20 [ 3528.501272] __fput+0x25f/0x7a0 [ 3528.504539] task_work_run+0x11f/0x190 [ 3528.508408] exit_to_usermode_loop+0x1ad/0x200 [ 3528.512970] do_syscall_64+0x4a3/0x640 [ 3528.516839] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3528.522025] RIP: 0033:0x7f701b77ce4b [ 3528.525711] RSP: 002b:00007ffcbd682a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 3528.533413] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f701b77ce4b [ 3528.540668] RDX: ffffffffffffffb8 RSI: 0000000000000001 RDI: 000000000000000a [ 3528.547935] RBP: 00007f701b8de960 R08: 0000000000000000 R09: 00000383cadc9720 [ 3528.555182] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000003589b5 [ 3528.562431] R13: 00007f701b8e2070 R14: 00007f701b8dcf60 R15: 0000000000000000 [ 3528.570049] Kernel Offset: disabled [ 3528.573670] Rebooting in 86400 seconds..