44:45 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:44:45 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d, 0x8000, 0x7, 0x2, 0x9, 0x7]}) 15:44:45 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:44:45 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:45 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:45 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, 0x0) 15:44:46 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:44:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:46 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) 15:44:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d, 0x8000, 0x7, 0x2, 0x9, 0x7]}) 15:44:46 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d, 0x8000, 0x7, 0x2, 0x9]}) 15:44:46 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040080) 15:44:46 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, 0x0) 15:44:46 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) 15:44:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:44:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d, 0x8000, 0x7, 0x2]}) 15:44:46 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:46 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040080) 15:44:47 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:47 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040080) 15:44:47 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d, 0x8000, 0x7]}) 15:44:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d, 0x8000]}) 15:44:47 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, 0x0}) 15:44:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:47 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:47 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:47 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81, 0x0, 0x2b42940d]}) 15:44:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:47 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:48 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:48 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, 0x0}) 15:44:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81]}) 15:44:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:48 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, 0x0}) 15:44:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff]}) 15:44:48 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, 0x0}) 15:44:48 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff, 0x81]}) 15:44:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200]}) 15:44:48 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1, 0x200, 0x7fffffff]}) 15:44:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:48 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5, 0x1]}) 15:44:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x20040080) 15:44:48 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x2, &(0x7f00000000c0)) 15:44:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000, 0x5]}) 15:44:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3, 0x1000]}) 15:44:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:48 executing program 1: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:49 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd, 0x3]}) 15:44:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:49 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x2, &(0x7f00000000c0)) 15:44:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0, 0xdd]}) 15:44:49 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:49 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:49 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:49 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4, 0x1f0]}) 15:44:49 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:49 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:49 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:49 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:50 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x2, &(0x7f00000000c0)) 15:44:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000400)={0x0, 0x3, 0x1, [0x0, 0x80000000, 0x800, 0x7, 0x6], [0x2, 0x7f06, 0x0, 0x1f, 0x1, 0x8, 0x8000000000000000, 0x9, 0x3, 0x7, 0x400, 0x0, 0x7bd, 0x0, 0x1, 0x1fc0000000, 0xd2c4, 0x2, 0x8000000000000001, 0x40, 0x7, 0x4514, 0x0, 0x2, 0x7f, 0x10001, 0x100, 0x4, 0x8000000000000000, 0x9, 0x5, 0x9, 0xfffffffffffff800, 0x100, 0x5, 0x1, 0x0, 0x6, 0x8, 0x60, 0x7f, 0xd2, 0x8, 0x4, 0x0, 0x8, 0x2, 0x2, 0x8, 0x3, 0x8, 0x1, 0x7, 0x1ff, 0x7, 0x1, 0x6, 0x6, 0x100000000, 0x6, 0x7, 0x4, 0x1, 0x9, 0x6c85, 0x3, 0xffffffffffff8000, 0x100000001, 0x3, 0x5, 0x1, 0x6, 0x5, 0xfffffffffffffffc, 0x101, 0x9, 0x67b, 0x3, 0x9, 0x5, 0x0, 0x4, 0x3, 0x0, 0x8, 0x2, 0xa767, 0x1, 0x0, 0x1, 0x9, 0xe1, 0x8, 0x2, 0x2, 0x1, 0x3, 0x894, 0x5, 0xe8df, 0x1, 0xfffffffffffffffc, 0x7, 0x6, 0x9f3, 0x7fffffff, 0x3ff, 0x0, 0x4, 0x40, 0x1, 0x8000000000000001, 0x5, 0x7ff, 0x7, 0xfffffffffffffffa, 0x8, 0x2, 0xd4f, 0x80000000, 0xa47]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000, 0x4]}) 15:44:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x20040080) 15:44:50 executing program 5: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:50 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) select(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x9}, &(0x7f0000000140)={0x0, r0/1000+10000}) 15:44:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x20040080) 15:44:50 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:50 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273, 0x8000]}) 15:44:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:50 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:51 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x2, &(0x7f00000000c0)) 15:44:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x20040080) 15:44:51 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273]}) 15:44:51 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x20040080) 15:44:51 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:51 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) 15:44:51 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa}) 15:44:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000100)={"172f0e04d54a9617170511616744955366a5b5ae2f071dc4cf575ca327ec", 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa273]}) 15:44:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, 0x0, 0x20040080) 15:44:51 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000140)=0x1c) 15:44:51 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) 15:44:51 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:52 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:52 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 15:44:52 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) 15:44:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:52 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:44:52 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000140)=0x1c) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) 15:44:52 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:52 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20040080) 15:44:52 executing program 3: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:44:53 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:53 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) 15:44:53 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:53 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000140)=0x1c) 15:44:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20040080) 15:44:53 executing program 3: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:44:53 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:44:53 executing program 3: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:44:53 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 15:44:53 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:53 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) [ 479.506828] Bluetooth: hci5: command 0x0405 tx timeout 15:44:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:54 executing program 2: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 15:44:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:54 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:44:54 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:44:54 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:54 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:44:54 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:54 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:54 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100), 0x2, 0x0) 15:44:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x5e51bb02fd0c0502, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d780)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "17effe30d46464"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004e780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004e980)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "39fdcb69d2a6ce"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f980)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fb80)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "2d53be64ca6e5e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000050b80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050d80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050f80)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "0aadd27279c1e7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000051f80)={{0x0, 0x1, 0x4, 0x43, 0x0, 0x8f4e, 0x9f2, 0x8, 0x3, 0x93, 0x81, 0x2, 0x100, 0x9, 0x3}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052000)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "6c6b049a5a3c26"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000053000)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {0x0, r3}, {0x0, r4}, {}, {}, {}, {r5}, {r6, r7}, {r8}, {r9, r10}, {}, {}, {r11}, {0x0, r12}], 0x0, "17f05afa491319"}) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r13, 0xc0305602, 0x0) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r14, 0xc0305602, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r13, 0x5450, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000040)) 15:44:55 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) timerfd_create(0x5, 0x80800) 15:44:55 executing program 3: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:55 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) 15:44:55 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x5421, 0x0) 15:44:55 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) timerfd_create(0x5, 0x80800) 15:44:55 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:55 executing program 2: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:55 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) timerfd_create(0x5, 0x80800) 15:44:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) timerfd_create(0x5, 0x80800) 15:44:55 executing program 3: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:55 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) 15:44:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) timerfd_create(0x5, 0x80800) 15:44:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:56 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:56 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 15:44:56 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) timerfd_create(0x5, 0x80800) 15:44:56 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:56 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:56 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x5450, 0x0) 15:44:56 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) 15:44:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:56 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x300083, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:57 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 15:44:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 15:44:57 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000001c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:57 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) 15:44:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:57 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:57 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 15:44:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:57 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:57 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:57 executing program 5: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 15:44:57 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (fail_nth: 1) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) 15:44:57 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:57 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:44:57 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x109241, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 15:44:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (fail_nth: 1) 15:44:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:44:58 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:58 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:58 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (fail_nth: 1) 15:44:58 executing program 2: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) [ 484.648370] FAULT_INJECTION: forcing a failure. [ 484.648370] name failslab, interval 1, probability 0, space 0, times 1 [ 484.660011] CPU: 1 PID: 26188 Comm: syz-executor.3 Not tainted 4.19.211-syzkaller #0 [ 484.667885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.677234] Call Trace: [ 484.679811] dump_stack+0x1fc/0x2ef [ 484.683424] should_fail.cold+0xa/0xf [ 484.687217] ? setup_fault_attr+0x200/0x200 [ 484.691525] ? lock_acquire+0x170/0x3c0 [ 484.695486] __should_failslab+0x115/0x180 [ 484.699706] should_failslab+0x5/0x10 [ 484.703500] kmem_cache_alloc+0x277/0x370 [ 484.707643] taskstats_exit+0x66d/0xc10 [ 484.711621] ? taskstats_user_cmd+0xfc0/0xfc0 [ 484.716192] ? do_raw_spin_lock+0xcb/0x220 [ 484.720413] ? _raw_spin_unlock_irq+0x24/0x80 [ 484.724902] do_exit+0x677/0x2be0 [ 484.728530] ? task_work_run+0x11c/0x1c0 [ 484.732589] ? mm_update_next_owner+0x650/0x650 [ 484.737293] ? get_signal+0x388/0x1f70 [ 484.741180] ? lock_downgrade+0x720/0x720 [ 484.745349] ? lock_acquire+0x170/0x3c0 [ 484.749393] do_group_exit+0x125/0x310 [ 484.753277] get_signal+0x3f2/0x1f70 [ 484.756985] ? sco_sock_connect+0x50c/0xa20 [ 484.761312] do_signal+0x8f/0x1670 [ 484.764853] ? kick_process+0xe4/0x170 [ 484.768730] ? setup_sigcontext+0x820/0x820 [ 484.773042] ? sco_connect_cfm+0x870/0x870 [ 484.777268] ? fput+0xf2/0x190 [ 484.780446] ? __ia32_sys_accept+0xb0/0xb0 [ 484.784686] ? wait_for_completion_io+0x10/0x10 [ 484.789342] ? vfs_write+0x393/0x540 [ 484.793047] ? fput+0x2b/0x190 [ 484.796223] ? ksys_write+0x1c8/0x2a0 [ 484.800023] ? exit_to_usermode_loop+0x36/0x2a0 [ 484.804692] exit_to_usermode_loop+0x204/0x2a0 [ 484.809295] do_syscall_64+0x538/0x620 [ 484.813176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.818438] RIP: 0033:0x7f9467dba109 [ 484.822142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 484.841023] RSP: 002b:00007f946672f168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 15:44:59 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:59 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:59 executing program 2: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:44:59 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 484.848722] RAX: fffffffffffffffc RBX: 00007f9467eccf60 RCX: 00007f9467dba109 [ 484.856003] RDX: 0000000000000008 RSI: 0000000020000200 RDI: 0000000000000004 [ 484.863280] RBP: 00007f946672f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 484.870540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.877793] R13: 00007fff80fe95ef R14: 00007f946672f300 R15: 0000000000022000 15:44:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:44:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x7) 15:44:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:59 executing program 2: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:44:59 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:44:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:44:59 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:44:59 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x7) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:44:59 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x7) 15:44:59 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:44:59 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x7000000) 15:44:59 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:44:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:00 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x20000208) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x40100, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:45:00 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700000000000000) 15:45:00 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x20000208) 15:45:00 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:45:00 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:45:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x8, 0xffffffff, 0x0, 0x5, 0x15, 0x1, 0x80000000, 0x3ff, 0x4, 0x8, 0x4, 0x1, 0xfffffffffffffff9}, 0x8, [0x0]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 15:45:00 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:45:00 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:45:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:45:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x8, 0xffffffff, 0x0, 0x5, 0x15, 0x1, 0x80000000, 0x3ff, 0x4, 0x8, 0x4, 0x1, 0xfffffffffffffff9}, 0x8, [0x0]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x8, 0xffffffff, 0x0, 0x5, 0x15, 0x1, 0x80000000, 0x3ff, 0x4, 0x8, 0x4, 0x1, 0xfffffffffffffff9}, 0x8, [0x0]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r2, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) 15:45:00 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:45:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x20000208) 15:45:00 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:45:01 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x2, 0x8, 0xffffffff, 0x0, 0x5, 0x15, 0x1, 0x80000000, 0x3ff, 0x4, 0x8, 0x4, 0x1, 0xfffffffffffffff9}, 0x8, [0x0]}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 15:45:01 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) 15:45:01 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000000c0)=@echo=0x200) 15:45:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700000000000000) 15:45:01 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:45:01 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:01 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 15:45:01 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xca, 0x1b, 0xa4}) 15:45:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:01 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x2, 0xfff) connect$bt_sco(r0, 0x0, 0x0) 15:45:01 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:01 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:01 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x2, 0xfff) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket(0x10, 0x2, 0xfff) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:01 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) [ 488.145379] Bluetooth: hci5: command 0x0405 tx timeout 15:45:02 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@none, 0x8}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 15:45:02 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@echo) 15:45:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:02 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:02 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x2, 0xfff) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket(0x10, 0x2, 0xfff) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:02 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC, 0x1b, 0xa4}) 15:45:02 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:02 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@e={0xff, 0xb, 0x0, 0x9, @SEQ_CONTROLLER=0xfe, 0x80, 0x2, 0x5}], 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:02 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x107400, 0x0) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x4, 0x8001, 0x1, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x7800, 0xb5a2, 0x86540000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000107000000000900000007000001000000ea80e745807a55280f7be789"]}) connect$bt_sco(r4, 0x0, 0xffffffffffffff9c) 15:45:02 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC, 0x0, 0xa4}) 15:45:03 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@none, 0x8}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 15:45:03 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@e={0xff, 0xb, 0x0, 0x9, @SEQ_CONTROLLER=0xfe, 0x80, 0x2, 0x5}], 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) write$sequencer(r0, &(0x7f0000000040)=[@e={0xff, 0xb, 0x0, 0x9, @SEQ_CONTROLLER=0xfe, 0x80, 0x2, 0x5}], 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:03 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x7) 15:45:03 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:03 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x107400, 0x0) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x4, 0x8001, 0x1, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x7800, 0xb5a2, 0x86540000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000107000000000900000007000001000000ea80e745807a55280f7be789"]}) connect$bt_sco(r4, 0x0, 0xffffffffffffff9c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) (async) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x107400, 0x0) (async) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x4, 0x8001, 0x1, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x7800, 0xb5a2, 0x86540000}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000107000000000900000007000001000000ea80e745807a55280f7be789"]}) (async) connect$bt_sco(r4, 0x0, 0xffffffffffffff9c) (async) 15:45:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x7) 15:45:03 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:03 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@none, 0x8}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@none, 0x8}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) 15:45:03 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x107400, 0x0) connect$rds(r2, &(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x4, 0x8001, 0x1, @local, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x7, 0x7800, 0xb5a2, 0x86540000}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="000107000000000900000007000001000000ea80e745807a55280f7be789"]}) (async) connect$bt_sco(r4, 0x0, 0xffffffffffffff9c) 15:45:03 executing program 2: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000000)={@none, 0x8}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 15:45:03 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x7) 15:45:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@e={0xff, 0xb, 0x0, 0x9, @SEQ_CONTROLLER=0xfe, 0x80, 0x2, 0x5}], 0x8) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:04 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000000)=0x254) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x1}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (fail_nth: 1) 15:45:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (fail_nth: 1) 15:45:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = timerfd_create(0x2, 0x100800) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000080)={{r0}, 0x0, 0x10, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0xfff, 0x8000000000000001, {0x4, 0x9, 0x80000001, 0xf324, 0x9}, [0x0, 0x10001, 0x100000001, 0x9, 0x100000000, 0x48000000]}}, @subvolid=0xfffffffffffffffb}) connect$bt_sco(r0, 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x0, "f64b618f8b36d90030fac6163ce51d71985dab7637155d107e192cd69ec9d3947303570fb8a49a746c1efdc92b66c3d907110586f98e12cb95c51d4e9a1ba89bd8bac98342317bf321b26367b26d48e4bda440d880cdfc0d2ea6d1ef16af5ec956b98663f7d411a4c88370d553e358c159197283d5abfeb2888d534c7b943dfc01839b4bac5b352fa027d3000965c88d327191bd4c9218b1e9d7255df4efe5ad01d75ee83f1c354ae955020d236181bc9c4a88"}, 0xbb, 0x81, &(0x7f0000001140)={0x22, 0x6, 0x4, 0x45, 0x8}, 0x6) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001180)) 15:45:04 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x7) 15:45:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = timerfd_create(0x2, 0x100800) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000080)={{r0}, 0x0, 0x10, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0xfff, 0x8000000000000001, {0x4, 0x9, 0x80000001, 0xf324, 0x9}, [0x0, 0x10001, 0x100000001, 0x9, 0x100000000, 0x48000000]}}, @subvolid=0xfffffffffffffffb}) (async, rerun: 32) connect$bt_sco(r0, 0x0, 0x0) (rerun: 32) sendto$isdn(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x0, "f64b618f8b36d90030fac6163ce51d71985dab7637155d107e192cd69ec9d3947303570fb8a49a746c1efdc92b66c3d907110586f98e12cb95c51d4e9a1ba89bd8bac98342317bf321b26367b26d48e4bda440d880cdfc0d2ea6d1ef16af5ec956b98663f7d411a4c88370d553e358c159197283d5abfeb2888d534c7b943dfc01839b4bac5b352fa027d3000965c88d327191bd4c9218b1e9d7255df4efe5ad01d75ee83f1c354ae955020d236181bc9c4a88"}, 0xbb, 0x81, &(0x7f0000001140)={0x22, 0x6, 0x4, 0x45, 0x8}, 0x6) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001180)) 15:45:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:04 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x774a73c8e39fb958) 15:45:04 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x7) 15:45:04 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = timerfd_create(0x2, 0x100800) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000080)={{r0}, 0x0, 0x10, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0xfff, 0x8000000000000001, {0x4, 0x9, 0x80000001, 0xf324, 0x9}, [0x0, 0x10001, 0x100000001, 0x9, 0x100000000, 0x48000000]}}, @subvolid=0xfffffffffffffffb}) connect$bt_sco(r0, 0x0, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x0, "f64b618f8b36d90030fac6163ce51d71985dab7637155d107e192cd69ec9d3947303570fb8a49a746c1efdc92b66c3d907110586f98e12cb95c51d4e9a1ba89bd8bac98342317bf321b26367b26d48e4bda440d880cdfc0d2ea6d1ef16af5ec956b98663f7d411a4c88370d553e358c159197283d5abfeb2888d534c7b943dfc01839b4bac5b352fa027d3000965c88d327191bd4c9218b1e9d7255df4efe5ad01d75ee83f1c354ae955020d236181bc9c4a88"}, 0xbb, 0x81, &(0x7f0000001140)={0x22, 0x6, 0x4, 0x45, 0x8}, 0x6) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) timerfd_create(0x2, 0x100800) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000080)={{r0}, 0x0, 0x10, @inherit={0x78, &(0x7f0000000000)={0x1, 0x6, 0xfff, 0x8000000000000001, {0x4, 0x9, 0x80000001, 0xf324, 0x9}, [0x0, 0x10001, 0x100000001, 0x9, 0x100000000, 0x48000000]}}, @subvolid=0xfffffffffffffffb}) (async) connect$bt_sco(r0, 0x0, 0x0) (async) sendto$isdn(0xffffffffffffffff, &(0x7f0000001080)={0x2, 0x0, "f64b618f8b36d90030fac6163ce51d71985dab7637155d107e192cd69ec9d3947303570fb8a49a746c1efdc92b66c3d907110586f98e12cb95c51d4e9a1ba89bd8bac98342317bf321b26367b26d48e4bda440d880cdfc0d2ea6d1ef16af5ec956b98663f7d411a4c88370d553e358c159197283d5abfeb2888d534c7b943dfc01839b4bac5b352fa027d3000965c88d327191bd4c9218b1e9d7255df4efe5ad01d75ee83f1c354ae955020d236181bc9c4a88"}, 0xbb, 0x81, &(0x7f0000001140)={0x22, 0x6, 0x4, 0x45, 0x8}, 0x6) (async) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001180)) (async) 15:45:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x2, &(0x7f0000000040)) 15:45:05 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000000)=0x254) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x1}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:05 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket(0x8, 0x80000, 0x3) connect$bt_sco(r1, 0x0, 0xfd52) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2}) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{0x0, 0x40, 0x7, 0x1, 0x800, 0x9, 0x5, 0xffffffe0, 0xfffff721, 0x0, 0xff, 0x401, 0x1, 0x2, 0xe8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:05 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x774a73c8e39fb958) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x774a73c8e39fb958) (async) 15:45:05 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x7) 15:45:05 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x80000001, 0x6}, 0x28}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0x1, {"d7b4cbe3fd4cac6f970de915aea13283"}, 0x355, 0x7, 0x5}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) 15:45:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5100, &(0x7f0000000040)) 15:45:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5101, &(0x7f0000000040)) 15:45:05 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket(0x8, 0x80000, 0x3) connect$bt_sco(r1, 0x0, 0xfd52) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2}) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{0x0, 0x40, 0x7, 0x1, 0x800, 0x9, 0x5, 0xffffffe0, 0xfffff721, 0x0, 0xff, 0x401, 0x1, 0x2, 0xe8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socket(0x8, 0x80000, 0x3) (async) connect$bt_sco(r1, 0x0, 0xfd52) (async) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2}) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{0x0, 0x40, 0x7, 0x1, 0x800, 0x9, 0x5, 0xffffffe0, 0xfffff721, 0x0, 0xff, 0x401, 0x1, 0x2, 0xe8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 15:45:05 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x80000001, 0x6}, 0x28}, 0x10) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0x1, {"d7b4cbe3fd4cac6f970de915aea13283"}, 0x355, 0x7, 0x5}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) 15:45:05 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x7) 15:45:05 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x774a73c8e39fb958) 15:45:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5111, &(0x7f0000000040)) 15:45:06 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000000)=0x254) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x1, 0x1}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:06 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x80000001, 0x6}, 0x28}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0x1, {"d7b4cbe3fd4cac6f970de915aea13283"}, 0x355, 0x7, 0x5}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000000)={{0x80000001, 0x6}, 0x28}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, @ib={0x1b, 0x20, 0x1, {"d7b4cbe3fd4cac6f970de915aea13283"}, 0x355, 0x7, 0x5}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) (async) 15:45:06 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket(0x8, 0x80000, 0x3) connect$bt_sco(r1, 0x0, 0xfd52) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2}) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{0x0, 0x40, 0x7, 0x1, 0x800, 0x9, 0x5, 0xffffffe0, 0xfffff721, 0x0, 0xff, 0x401, 0x1, 0x2, 0xe8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socket(0x8, 0x80000, 0x3) (async) connect$bt_sco(r1, 0x0, 0xfd52) (async) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2}) (async) syz_open_dev$cec(&(0x7f00000000c0), 0x1, 0x2) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000100)={{0x0, 0x40, 0x7, 0x1, 0x800, 0x9, 0x5, 0xffffffe0, 0xfffff721, 0x0, 0xff, 0x401, 0x1, 0x2, 0xe8}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 15:45:06 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x7) 15:45:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5402, &(0x7f0000000040)) 15:45:06 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0xc18a}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5404, &(0x7f0000000040)) 15:45:06 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:06 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0x106) connect$bt_sco(r0, &(0x7f0000000200), 0x8) pipe2$watch_queue(&(0x7f0000000000), 0x80) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) 15:45:06 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0xfffffffffffffc49) 15:45:06 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x7) 15:45:06 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:06 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0xfffffffffffffc49) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0xfffffffffffffc49) (async) 15:45:06 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5111, &(0x7f0000000040)) 15:45:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5450, &(0x7f0000000040)) 15:45:06 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:07 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0xc18a}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:07 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0xfffffffffffffc49) 15:45:07 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:07 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0x106) connect$bt_sco(r0, &(0x7f0000000200), 0x8) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) 15:45:07 executing program 0: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000100)={@any, 0x8, 0x3ff, 0x7}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x307) 15:45:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5451, &(0x7f0000000040)) 15:45:07 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) connect$bt_sco(r0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0x32, &(0x7f0000000080)={0x29, 0xf95d, 0x2}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) timerfd_gettime(r1, &(0x7f0000000100)) 15:45:07 executing program 0: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000100)={@any, 0x8, 0x3ff, 0x7}) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 32) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x307) 15:45:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5452, &(0x7f0000000040)) 15:45:07 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) connect$bt_sco(r0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0x32, &(0x7f0000000080)={0x29, 0xf95d, 0x2}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) (async) timerfd_gettime(r1, &(0x7f0000000100)) 15:45:08 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0xc18a}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:08 executing program 0: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000100)={@any, 0x8, 0x3ff, 0x7}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x307) 15:45:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5460, &(0x7f0000000040)) 15:45:08 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0x106) connect$bt_sco(r0, &(0x7f0000000200), 0x8) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) 15:45:08 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 15:45:08 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000040)) (async) connect$bt_sco(r0, 0x0, 0x0) (async) r2 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0x32, &(0x7f0000000080)={0x29, 0xf95d, 0x2}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) (async) timerfd_gettime(r1, &(0x7f0000000100)) 15:45:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40045108, &(0x7f0000000040)) 15:45:08 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 15:45:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40045109, &(0x7f0000000040)) 15:45:08 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = getpid() ptrace$getsig(0x4202, r2, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/cgroup\x00') 15:45:08 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 15:45:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4004510d, &(0x7f0000000040)) [ 494.464227] Bluetooth: hci5: command 0x0405 tx timeout 15:45:08 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffffa3) 15:45:08 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) (async) r2 = getpid() ptrace$getsig(0x4202, r2, 0x0, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/cgroup\x00') 15:45:08 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000900)={{r0}, 0x0, 0x8, @unused=[0x1, 0x7d, 0x100000001, 0x9], @devid}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4004510f, &(0x7f0000000040)) 15:45:09 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d540)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d940)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "90fa4d7aef7a37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e940)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "61a4f186ff9a6c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004fb40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0xd72, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "61d68ed3506a27"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050d40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050f40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x94, "11e6394ba320f2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051f40)={{0x0, 0x1ff, 0x200, 0x8000000000000000, 0xffff, 0xff, 0x5, 0x80000001, 0x5, 0x9, 0x9cb4, 0x7, 0x7, 0x5, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052000)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "35b83555221b5b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053200)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "e3a875d2b7f7fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054200)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {r3}, {}, {}, {0x0, r4}, {r5}, {0x0, r6}, {0x0, r7}, {}, {0x0, r8}, {r9}, {r10}, {0x0, r11}, {}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {0x0, r15}], 0x5, "918adea092dc99"}) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) r16 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r16, 0x0, 0x700) 15:45:09 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffffa3) 15:45:09 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:09 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) (async) r2 = getpid() ptrace$getsig(0x4202, r2, 0x0, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/cgroup\x00') 15:45:09 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, &(0x7f0000000040)) 15:45:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40045407, &(0x7f0000000040)) 15:45:09 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000900)={r5, 0x7fffffff, 0x1, [0x9fc, 0x7, 0x2, 0xdb6, 0x7], [0x1, 0x3, 0x401, 0x3ff, 0x8, 0x1, 0x4, 0x40, 0x1, 0x3, 0x3, 0x100000001, 0x7, 0x4, 0x7, 0x10000, 0x8, 0xfffffffffffeffff, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x1, 0xfffffffffffffffe, 0x10001, 0xfffffffffffffe00, 0x3ee3, 0x2, 0x8, 0x0, 0x8, 0x2, 0x8, 0xfffffffffffffffc, 0x9, 0x9, 0xffffffffffffb167, 0x1, 0x0, 0x3f, 0x3, 0x4, 0x8, 0x3f, 0x0, 0xffffffffffff0148, 0x99c, 0x6, 0x7fff, 0x8000000000000001, 0xfffffffffffffffa, 0x7f, 0x6, 0xd8c0, 0x55a, 0x4, 0x81, 0x3, 0x80000000, 0x61, 0x0, 0x7f, 0x5ca7020, 0x2, 0x329db766, 0x800, 0x7fffffffffffffff, 0x7, 0x81, 0x2, 0xff, 0x7, 0x6, 0x5f5, 0x5, 0x1, 0x9, 0x80000000, 0xc, 0x2, 0x2, 0x1, 0x6, 0x2, 0x8000, 0xb2e2, 0x10000, 0x200, 0x1, 0x1, 0xbe08, 0xfff, 0x100000001, 0x1, 0x41, 0x9, 0xd0, 0x7f, 0x3, 0x10001, 0x8, 0x3, 0x8bf, 0x6, 0x6, 0x0, 0x5, 0xfffffffffffffffc, 0x7fffffff, 0xfffffffffffffff9, 0x9, 0xd18e, 0x5d, 0x6, 0x6, 0x100, 0xfffffffffffffff9, 0x1, 0x8, 0xffff, 0x5]}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) 15:45:09 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d140)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d340)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d540)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d740)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d940)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "90fa4d7aef7a37"}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e940)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "61a4f186ff9a6c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f940)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004fb40)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0xd72, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "61d68ed3506a27"}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050d40)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050f40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x94, "11e6394ba320f2"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051f40)={{0x0, 0x1ff, 0x200, 0x8000000000000000, 0xffff, 0xff, 0x5, 0x80000001, 0x5, 0x9, 0x9cb4, 0x7, 0x7, 0x5, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052000)={0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "35b83555221b5b"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053200)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "e3a875d2b7f7fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054200)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {r3}, {}, {}, {0x0, r4}, {r5}, {0x0, r6}, {0x0, r7}, {}, {0x0, r8}, {r9}, {r10}, {0x0, r11}, {}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {0x0, r15}], 0x5, "918adea092dc99"}) (async) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) r16 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r16, 0x0, 0x700) 15:45:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40045408, &(0x7f0000000040)) 15:45:09 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 15:45:10 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000900)={{r0}, 0x0, 0x8, @unused=[0x1, 0x7d, 0x100000001, 0x9], @devid}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:10 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffffa3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffffa3) (async) 15:45:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x0) (rerun: 64) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) r3 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000900)={r5, 0x7fffffff, 0x1, [0x9fc, 0x7, 0x2, 0xdb6, 0x7], [0x1, 0x3, 0x401, 0x3ff, 0x8, 0x1, 0x4, 0x40, 0x1, 0x3, 0x3, 0x100000001, 0x7, 0x4, 0x7, 0x10000, 0x8, 0xfffffffffffeffff, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x1, 0xfffffffffffffffe, 0x10001, 0xfffffffffffffe00, 0x3ee3, 0x2, 0x8, 0x0, 0x8, 0x2, 0x8, 0xfffffffffffffffc, 0x9, 0x9, 0xffffffffffffb167, 0x1, 0x0, 0x3f, 0x3, 0x4, 0x8, 0x3f, 0x0, 0xffffffffffff0148, 0x99c, 0x6, 0x7fff, 0x8000000000000001, 0xfffffffffffffffa, 0x7f, 0x6, 0xd8c0, 0x55a, 0x4, 0x81, 0x3, 0x80000000, 0x61, 0x0, 0x7f, 0x5ca7020, 0x2, 0x329db766, 0x800, 0x7fffffffffffffff, 0x7, 0x81, 0x2, 0xff, 0x7, 0x6, 0x5f5, 0x5, 0x1, 0x9, 0x80000000, 0xc, 0x2, 0x2, 0x1, 0x6, 0x2, 0x8000, 0xb2e2, 0x10000, 0x200, 0x1, 0x1, 0xbe08, 0xfff, 0x100000001, 0x1, 0x41, 0x9, 0xd0, 0x7f, 0x3, 0x10001, 0x8, 0x3, 0x8bf, 0x6, 0x6, 0x0, 0x5, 0xfffffffffffffffc, 0x7fffffff, 0xfffffffffffffff9, 0x9, 0xd18e, 0x5d, 0x6, 0x6, 0x100, 0xfffffffffffffff9, 0x1, 0x8, 0xffff, 0x5]}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) 15:45:10 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 15:45:10 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d140)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d340)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d540)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d940)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xd, "90fa4d7aef7a37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e940)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "61a4f186ff9a6c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f940)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004fb40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0xd72, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "61d68ed3506a27"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050d40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050f40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x94, "11e6394ba320f2"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051f40)={{0x0, 0x1ff, 0x200, 0x8000000000000000, 0xffff, 0xff, 0x5, 0x80000001, 0x5, 0x9, 0x9cb4, 0x7, 0x7, 0x5, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052000)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "35b83555221b5b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053200)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x81, "e3a875d2b7f7fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054200)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {r3}, {}, {}, {0x0, r4}, {r5}, {0x0, r6}, {0x0, r7}, {}, {0x0, r8}, {r9}, {r10}, {0x0, r11}, {}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {0x0, r15}], 0x5, "918adea092dc99"}) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) r16 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r16, 0x0, 0x700) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d140)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d340)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d540)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d740)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004d940)={0x7, [], 0xd, "90fa4d7aef7a37"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e940)={0x3, [], 0x1f, "61a4f186ff9a6c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f940)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004fb40)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fd40)={0xd72, [], 0x81, "61d68ed3506a27"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050d40)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050f40)={0x4, [], 0x94, "11e6394ba320f2"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051f40)={{0x0, 0x1ff, 0x200, 0x8000000000000000, 0xffff, 0xff, 0x5, 0x80000001, 0x5, 0x9, 0x9cb4, 0x7, 0x7, 0x5, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000052000)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000052200)={0x0, [], 0x6, "35b83555221b5b"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053200)={0x5, [], 0x81, "e3a875d2b7f7fe"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054200)={0x80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r2}, {r3}, {}, {}, {0x0, r4}, {r5}, {0x0, r6}, {0x0, r7}, {}, {0x0, r8}, {r9}, {r10}, {0x0, r11}, {}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {0x0, r15}], 0x5, "918adea092dc99"}) (async) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r16, 0x0, 0x700) (async) 15:45:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40049409, &(0x7f0000000040)) 15:45:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r0, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = socket$rds(0x15, 0x5, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000900)={r5, 0x7fffffff, 0x1, [0x9fc, 0x7, 0x2, 0xdb6, 0x7], [0x1, 0x3, 0x401, 0x3ff, 0x8, 0x1, 0x4, 0x40, 0x1, 0x3, 0x3, 0x100000001, 0x7, 0x4, 0x7, 0x10000, 0x8, 0xfffffffffffeffff, 0x0, 0xffffffffffffffff, 0x5, 0x3ff, 0x1, 0xfffffffffffffffe, 0x10001, 0xfffffffffffffe00, 0x3ee3, 0x2, 0x8, 0x0, 0x8, 0x2, 0x8, 0xfffffffffffffffc, 0x9, 0x9, 0xffffffffffffb167, 0x1, 0x0, 0x3f, 0x3, 0x4, 0x8, 0x3f, 0x0, 0xffffffffffff0148, 0x99c, 0x6, 0x7fff, 0x8000000000000001, 0xfffffffffffffffa, 0x7f, 0x6, 0xd8c0, 0x55a, 0x4, 0x81, 0x3, 0x80000000, 0x61, 0x0, 0x7f, 0x5ca7020, 0x2, 0x329db766, 0x800, 0x7fffffffffffffff, 0x7, 0x81, 0x2, 0xff, 0x7, 0x6, 0x5f5, 0x5, 0x1, 0x9, 0x80000000, 0xc, 0x2, 0x2, 0x1, 0x6, 0x2, 0x8000, 0xb2e2, 0x10000, 0x200, 0x1, 0x1, 0xbe08, 0xfff, 0x100000001, 0x1, 0x41, 0x9, 0xd0, 0x7f, 0x3, 0x10001, 0x8, 0x3, 0x8bf, 0x6, 0x6, 0x0, 0x5, 0xfffffffffffffffc, 0x7fffffff, 0xfffffffffffffff9, 0x9, 0xd18e, 0x5d, 0x6, 0x6, 0x100, 0xfffffffffffffff9, 0x1, 0x8, 0xffff, 0x5]}) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) 15:45:10 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x5421, &(0x7f0000000040)) 15:45:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0xf, 0x1, 0x80, &(0x7f0000000040)}, 0x20) bind$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 15:45:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:10 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:10 executing program 5: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:11 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000900)={{r0}, 0x0, 0x8, @unused=[0x1, 0x7d, 0x100000001, 0x9], @devid}) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:11 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, 0x0) 15:45:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0xf, 0x1, 0x80, &(0x7f0000000040)}, 0x20) bind$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0xf, 0x1, 0x80, &(0x7f0000000040)}, 0x20) (async) bind$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) (async) 15:45:11 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x80045104, &(0x7f0000000040)) 15:45:11 executing program 5: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) 15:45:11 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:11 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x80045105, &(0x7f0000000040)) 15:45:11 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, 0x0) 15:45:11 executing program 5: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0xf, 0x1, 0x80, &(0x7f0000000040)}, 0x20) bind$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) 15:45:11 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x5421, 0x0) 15:45:11 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x8004510a, &(0x7f0000000040)) 15:45:12 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9200b017020704009300a015ff08d30c"], 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x404203, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x40) 15:45:12 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) 15:45:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@any, 0x1, 0x81, 0x1000}) socket$pppoe(0x18, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_timeval(r1, 0x1, 0x84, 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x700) 15:45:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x8004510b, &(0x7f0000000040)) 15:45:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x80045113, &(0x7f0000000040)) 15:45:12 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9200b017020704009300a015ff08d30c"], 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x404203, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x40) 15:45:12 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, 0x0, 0x0) (async) 15:45:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@any, 0x1, 0x81, 0x1000}) (async) socket$pppoe(0x18, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_timeval(r1, 0x1, 0x84, 0x0, 0x0) (async) connect$bt_sco(r0, 0x0, 0x700) 15:45:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000040)={{0x0, 0xff, 0x4, 0x6, 0x5db, 0x1100, 0xffffffff, 0x5, 0x1, 0x2453, 0x9, 0x5, 0x9424, 0xffff7fffffffff7f, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:12 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async, rerun: 32) write$sequencer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="9200b017020704009300a015ff08d30c"], 0x10) (rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x404203, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f0000000080)=0x40) 15:45:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045103, &(0x7f0000000040)) 15:45:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000040)={{0x0, 0xff, 0x4, 0x6, 0x5db, 0x1100, 0xffffffff, 0x5, 0x1, 0x2453, 0x9, 0x5, 0x9424, 0xffff7fffffffff7f, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000040)={{0x0, 0xff, 0x4, 0x6, 0x5db, 0x1100, 0xffffffff, 0x5, 0x1, 0x2453, 0x9, 0x5, 0x9424, 0xffff7fffffffff7f, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@any, 0x1, 0x81, 0x1000}) (async) socket$pppoe(0x18, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$sock_timeval(r1, 0x1, 0x84, 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x700) 15:45:12 executing program 1: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:12 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000000)={0xa, 0x4}, 0xc) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) 15:45:12 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x40, 0x9e, 0x1, 0x2}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:12 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000040)={{0x0, 0xff, 0x4, 0x6, 0x5db, 0x1100, 0xffffffff, 0x5, 0x1, 0x2453, 0x9, 0x5, 0x9424, 0xffff7fffffffff7f, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 64) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc004510e, &(0x7f0000000040)) 15:45:12 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "afe94fdb80eafd"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045380)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "d7897435e6eb6b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046380)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "8f622d17efc576"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000047380)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xcd, "2376b6092eeea7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000048380)={{0x0, 0xd5e00000000000, 0xfffffffffffeffff, 0x3f, 0x7f, 0x1, 0x1, 0x2, 0x80000001, 0xffff9476, 0x8, 0x8, 0x7, 0x1, 0x40}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000048440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048640)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "59eefe8cfb67fc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000049640)={{0x0, 0x3ff, 0x0, 0x9ea9, 0x8, 0x1, 0xfffffffffffff396, 0x10001, 0x6, 0x400, 0xf5, 0x80, 0x8d11, 0x7, 0x1c4d}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000496c0)={{0x0, 0x7fff, 0xfffffffffffffff8, 0x800, 0x40000000000000, 0x100000001, 0x5, 0x7, 0x74, 0x6aee26e, 0x7ff, 0x1d, 0x9000000, 0x3, 0x100000000}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049780)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049980)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9bebe9e8da2e91"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004a980)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004ab80)={{0x0, 0x1, 0x4, 0xe3, 0xc2d7, 0xffffffffffffff6a, 0x5, 0x251, 0x9, 0x92, 0x3, 0x9b, 0x7, 0x9, 0x1}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ac00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ae00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b000)={0xeaa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8200419dfc9b2c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c200)={0x362, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {r1}, {r2}, {}, {r3}, {r4, r5}, {}, {}, {}, {}, {0x0, r6}, {r7}, {}, {r8}, {}, {}, {}, {r9, r10}, {}, {}, {r11}, {r12}, {}, {}, {r13}, {r14}, {0x0, r15}, {0x0, r16}], 0x6, "a1e6f5efedeae7"}) r17 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r17, 0x0, 0x700) 15:45:12 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x40, 0x9e, 0x1, 0x2}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045401, &(0x7f0000000040)) 15:45:12 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "afe94fdb80eafd"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045380)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "d7897435e6eb6b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046380)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "8f622d17efc576"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000047380)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xcd, "2376b6092eeea7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000048380)={{0x0, 0xd5e00000000000, 0xfffffffffffeffff, 0x3f, 0x7f, 0x1, 0x1, 0x2, 0x80000001, 0xffff9476, 0x8, 0x8, 0x7, 0x1, 0x40}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000048440)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048640)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "59eefe8cfb67fc"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000049640)={{0x0, 0x3ff, 0x0, 0x9ea9, 0x8, 0x1, 0xfffffffffffff396, 0x10001, 0x6, 0x400, 0xf5, 0x80, 0x8d11, 0x7, 0x1c4d}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000496c0)={{0x0, 0x7fff, 0xfffffffffffffff8, 0x800, 0x40000000000000, 0x100000001, 0x5, 0x7, 0x74, 0x6aee26e, 0x7ff, 0x1d, 0x9000000, 0x3, 0x100000000}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049780)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049980)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9bebe9e8da2e91"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004a980)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004ab80)={{0x0, 0x1, 0x4, 0xe3, 0xc2d7, 0xffffffffffffff6a, 0x5, 0x251, 0x9, 0x92, 0x3, 0x9b, 0x7, 0x9, 0x1}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ac00)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ae00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b000)={0xeaa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8200419dfc9b2c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c200)={0x362, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {r1}, {r2}, {}, {r3}, {r4, r5}, {}, {}, {}, {}, {0x0, r6}, {r7}, {}, {r8}, {}, {}, {}, {r9, r10}, {}, {}, {r11}, {r12}, {}, {}, {r13}, {r14}, {0x0, r15}, {0x0, r16}], 0x6, "a1e6f5efedeae7"}) r17 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r17, 0x0, 0x700) 15:45:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x20480, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="950000000000000018220000", @ANYRES32=0x1, @ANYBLOB="40000000ff03000018140000", @ANYRES32, @ANYBLOB="0000000000000000185900000a000000000000000000000018460000faffffff000000000000000018400000f9ffffff000000000000000018690000040000000000000004000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000100)=""/193, 0x40f00, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x76d7}, 0x10, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:45:13 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc004510e, &(0x7f0000000040)) 15:45:13 executing program 4: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x8004510a, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3cc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x6, 0x2, 0x101, 0x10001}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0xd6e344b1c64c2f6f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x80000001}, 0x10}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x10, 0x20, 0x1, 0x8}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x4, &(0x7f0000001240)=@raw=[@generic={0x1, 0x0, 0x6, 0x9, 0x40000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @generic={0xa2, 0x9, 0x7, 0x9, 0xffffffff}], &(0x7f0000001280)='syzkaller\x00', 0x7, 0xcf, &(0x7f00000012c0)=""/207, 0x40f00, 0x18, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x7, 0x81, 0x1f}, 0x10, 0x4b18, r6, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, r7, r2]}, 0x80) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:13 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x40, 0x9e, 0x1, 0x2}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x40, 0x9e, 0x1, 0x2}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045405, &(0x7f0000000040)) 15:45:13 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x20480, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="950000000000000018220000", @ANYRES32=0x1, @ANYBLOB="40000000ff03000018140000", @ANYRES32, @ANYBLOB="0000000000000000185900000a000000000000000000000018460000faffffff000000000000000018400000f9ffffff000000000000000018690000040000000000000004000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000100)=""/193, 0x40f00, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x76d7}, 0x10, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:45:13 executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "afe94fdb80eafd"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045380)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "d7897435e6eb6b"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046380)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "8f622d17efc576"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000047380)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xcd, "2376b6092eeea7"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000048380)={{0x0, 0xd5e00000000000, 0xfffffffffffeffff, 0x3f, 0x7f, 0x1, 0x1, 0x2, 0x80000001, 0xffff9476, 0x8, 0x8, 0x7, 0x1, 0x40}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000048440)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048640)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "59eefe8cfb67fc"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000049640)={{0x0, 0x3ff, 0x0, 0x9ea9, 0x8, 0x1, 0xfffffffffffff396, 0x10001, 0x6, 0x400, 0xf5, 0x80, 0x8d11, 0x7, 0x1c4d}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000496c0)={{0x0, 0x7fff, 0xfffffffffffffff8, 0x800, 0x40000000000000, 0x100000001, 0x5, 0x7, 0x74, 0x6aee26e, 0x7ff, 0x1d, 0x9000000, 0x3, 0x100000000}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049780)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049980)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9bebe9e8da2e91"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004a980)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000004ab80)={{0x0, 0x1, 0x4, 0xe3, 0xc2d7, 0xffffffffffffff6a, 0x5, 0x251, 0x9, 0x92, 0x3, 0x9b, 0x7, 0x9, 0x1}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ac00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ae00)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b000)={0xeaa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8200419dfc9b2c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c200)={0x362, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {r1}, {r2}, {}, {r3}, {r4, r5}, {}, {}, {}, {}, {0x0, r6}, {r7}, {}, {r8}, {}, {}, {}, {r9, r10}, {}, {}, {r11}, {r12}, {}, {}, {r13}, {r14}, {0x0, r15}, {0x0, r16}], 0x6, "a1e6f5efedeae7"}) (async, rerun: 32) r17 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r17, 0x0, 0x700) 15:45:13 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x16, 0x6}, 0x14) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000240)={"c70d674ffe954a25591efa80bc640dde9bc0f9467234e2a84f5b65b1fea4", 0xc00, 0x2, 0x1, 0x9, 0x407, 0x7, 0x4, 0x7, [0x8000, 0x6b, 0x0, 0xd4f, 0x7d1800, 0x7fffffff, 0x3, 0x7, 0xc6a6, 0xffff, 0x238, 0x7, 0x7, 0x10001, 0x7, 0x43, 0x7, 0x10000, 0x80000001]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000340)=0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000040)={"540ca474851f8b07ae11a5258391f7d58cfd5a41ad3c2caa2641aceab145", 0x200, 0x2, 0x0, 0x1f, 0x80000001, 0x910f, 0x40, 0x5, [0x9, 0x0, 0x9, 0x3, 0x6, 0x20, 0x3, 0x72c21085, 0xfff, 0x3ff, 0x32, 0x8, 0x7, 0x6fc, 0x5, 0x8, 0x439f, 0x7, 0x1f]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000180)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:13 executing program 4: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x8004510a, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3cc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x6, 0x2, 0x101, 0x10001}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0xd6e344b1c64c2f6f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x80000001}, 0x10}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x10, 0x20, 0x1, 0x8}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x4, &(0x7f0000001240)=@raw=[@generic={0x1, 0x0, 0x6, 0x9, 0x40000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @generic={0xa2, 0x9, 0x7, 0x9, 0xffffffff}], &(0x7f0000001280)='syzkaller\x00', 0x7, 0xcf, &(0x7f00000012c0)=""/207, 0x40f00, 0x18, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x7, 0x81, 0x1f}, 0x10, 0x4b18, r6, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, r7, r2]}, 0x80) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x8004510a, &(0x7f00000000c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) (async) syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3cc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x6, 0x2, 0x101, 0x10001}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0xd6e344b1c64c2f6f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x80000001}, 0x10}, 0x80) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x10, 0x20, 0x1, 0x8}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x4, &(0x7f0000001240)=@raw=[@generic={0x1, 0x0, 0x6, 0x9, 0x40000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @generic={0xa2, 0x9, 0x7, 0x9, 0xffffffff}], &(0x7f0000001280)='syzkaller\x00', 0x7, 0xcf, &(0x7f00000012c0)=""/207, 0x40f00, 0x18, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x7, 0x81, 0x1f}, 0x10, 0x4b18, r6, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, r7, r2]}, 0x80) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045406, &(0x7f0000000040)) 15:45:13 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x20480, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="950000000000000018220000", @ANYRES32=0x1, @ANYBLOB="40000000ff03000018140000", @ANYRES32, @ANYBLOB="0000000000000000185900000a000000000000000000000018460000faffffff000000000000000018400000f9ffffff000000000000000018690000040000000000000004000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000100)=""/193, 0x40f00, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x76d7}, 0x10, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0]}, 0x80) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 15:45:13 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:13 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x16, 0x6}, 0x14) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000240)={"c70d674ffe954a25591efa80bc640dde9bc0f9467234e2a84f5b65b1fea4", 0xc00, 0x2, 0x1, 0x9, 0x407, 0x7, 0x4, 0x7, [0x8000, 0x6b, 0x0, 0xd4f, 0x7d1800, 0x7fffffff, 0x3, 0x7, 0xc6a6, 0xffff, 0x238, 0x7, 0x7, 0x10001, 0x7, 0x43, 0x7, 0x10000, 0x80000001]}) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000340)=0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000040)={"540ca474851f8b07ae11a5258391f7d58cfd5a41ad3c2caa2641aceab145", 0x200, 0x2, 0x0, 0x1f, 0x80000001, 0x910f, 0x40, 0x5, [0x9, 0x0, 0x9, 0x3, 0x6, 0x20, 0x3, 0x72c21085, 0xfff, 0x3ff, 0x32, 0x8, 0x7, 0x6fc, 0x5, 0x8, 0x439f, 0x7, 0x1f]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000180)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045878, &(0x7f0000000040)) 15:45:13 executing program 4: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x8004510a, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3cc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x6, 0x2, 0x101, 0x10001}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0xd6e344b1c64c2f6f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x80000001}, 0x10}, 0x80) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x10, 0x20, 0x1, 0x8}}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x4, &(0x7f0000001240)=@raw=[@generic={0x1, 0x0, 0x6, 0x9, 0x40000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @generic={0xa2, 0x9, 0x7, 0x9, 0xffffffff}], &(0x7f0000001280)='syzkaller\x00', 0x7, 0xcf, &(0x7f00000012c0)=""/207, 0x40f00, 0x18, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x7, 0x81, 0x1f}, 0x10, 0x4b18, r6, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, r7, r2]}, 0x80) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000001c0)=0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x8004510a, &(0x7f00000000c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4) (async) syz_open_dev$sg(&(0x7f0000000100), 0x7, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3cc}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x6, 0x2, 0x101, 0x10001}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000240)=""/4096, 0x41000, 0xd6e344b1c64c2f6f, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x2, 0x2, 0x3, 0x80000001}, 0x10}, 0x80) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f00000013c0)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x2, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x10, 0x20, 0x1, 0x8}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x4, &(0x7f0000001240)=@raw=[@generic={0x1, 0x0, 0x6, 0x9, 0x40000}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @generic={0xa2, 0x9, 0x7, 0x9, 0xffffffff}], &(0x7f0000001280)='syzkaller\x00', 0x7, 0xcf, &(0x7f00000012c0)=""/207, 0x40f00, 0x18, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x7, 0x81, 0x1f}, 0x10, 0x4b18, r6, 0x0, &(0x7f0000001540)=[0xffffffffffffffff, r2, r7, r2]}, 0x80) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:13 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:13 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)) connect$bt_sco(r0, 0x0, 0x0) 15:45:13 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x16, 0x6}, 0x14) (async) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0000, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000240)={"c70d674ffe954a25591efa80bc640dde9bc0f9467234e2a84f5b65b1fea4", 0xc00, 0x2, 0x1, 0x9, 0x407, 0x7, 0x4, 0x7, [0x8000, 0x6b, 0x0, 0xd4f, 0x7d1800, 0x7fffffff, 0x3, 0x7, 0xc6a6, 0xffff, 0x238, 0x7, 0x7, 0x10001, 0x7, 0x43, 0x7, 0x10000, 0x80000001]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000340)=0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async, rerun: 32) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) (async, rerun: 32) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000040)={"540ca474851f8b07ae11a5258391f7d58cfd5a41ad3c2caa2641aceab145", 0x200, 0x2, 0x0, 0x1f, 0x80000001, 0x910f, 0x40, 0x5, [0x9, 0x0, 0x9, 0x3, 0x6, 0x20, 0x3, 0x72c21085, 0xfff, 0x3ff, 0x32, 0x8, 0x7, 0x6fc, 0x5, 0x8, 0x439f, 0x7, 0x1f]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000180)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045878, &(0x7f0000000040)) 15:45:13 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)) 15:45:13 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) 15:45:13 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 15:45:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0046d00, &(0x7f0000000040)) 15:45:13 executing program 0: connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) connect$bt_sco(0xffffffffffffffff, 0x0, 0x700) (async) 15:45:13 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0189436, &(0x7f0000000040)) 15:45:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7f}) 15:45:13 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)) 15:45:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc020660b, &(0x7f0000000040)) 15:45:13 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, 0x0, 0x0) 15:45:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7f}) 15:45:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc074510c, &(0x7f0000000040)) 15:45:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:14 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) 15:45:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r0, 0x1}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r0, 0x1}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7f}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7f}) (async) 15:45:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x7}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cd00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004cf00)={0x7a38, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe9, "9fbd38fa4a73f1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004df00)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb1, "f0cc15cdd156df"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004ef00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f300)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "22729644bcb10d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050500)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050b00)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "7580cdc9ccb2fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051b00)={0x3811, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r4}, {}, {}, {}, {}, {r5, r6}, {r7}, {}, {r8, r9}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}], 0xde, "52aeab5fafb728"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a40)=""/4096, &(0x7f0000000000)=0x1000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0xe, 0x5, {0x2, @struct={0x23f9}, 0x0, 0x7, 0x6, 0x80, 0x0, 0x5, 0x4, @usage=0xfffffffffffffffb, 0xf1, 0x8, [0xd13b, 0x5, 0xffffffffffffffff, 0x2, 0x2, 0x4]}, {0xf36, @usage=0x2, r1, 0x9, 0x6a, 0x4, 0x20, 0x4, 0x40, @usage=0xfffffffffffffffe, 0x80, 0x8571, [0x1ff, 0x54cc, 0x1000, 0x3, 0x801, 0x633]}, {0x8, @usage=0x32a8, 0x0, 0x0, 0x2, 0xff, 0x9, 0xc981, 0xa0, @struct={0x740, 0x40}, 0x1f, 0x2, [0x48, 0x0, 0x6, 0x100, 0x100000000, 0x8]}, {0x4, 0x2, 0x8}}) 15:45:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc08c5102, &(0x7f0000000040)) 15:45:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r2, 0x7}) 15:45:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x7}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cd00)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004cf00)={0x7a38, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe9, "9fbd38fa4a73f1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004df00)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb1, "f0cc15cdd156df"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004ef00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f100)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f300)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "22729644bcb10d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050300)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050500)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050900)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050b00)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "7580cdc9ccb2fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051b00)={0x3811, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r4}, {}, {}, {}, {}, {r5, r6}, {r7}, {}, {r8, r9}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}], 0xde, "52aeab5fafb728"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a40)=""/4096, &(0x7f0000000000)=0x1000) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0xe, 0x5, {0x2, @struct={0x23f9}, 0x0, 0x7, 0x6, 0x80, 0x0, 0x5, 0x4, @usage=0xfffffffffffffffb, 0xf1, 0x8, [0xd13b, 0x5, 0xffffffffffffffff, 0x2, 0x2, 0x4]}, {0xf36, @usage=0x2, r1, 0x9, 0x6a, 0x4, 0x20, 0x4, 0x40, @usage=0xfffffffffffffffe, 0x80, 0x8571, [0x1ff, 0x54cc, 0x1000, 0x3, 0x801, 0x633]}, {0x8, @usage=0x32a8, 0x0, 0x0, 0x2, 0xff, 0x9, 0xc981, 0xa0, @struct={0x740, 0x40}, 0x1f, 0x2, [0x48, 0x0, 0x6, 0x100, 0x100000000, 0x8]}, {0x4, 0x2, 0x8}}) 15:45:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r2, 0x7}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r2, 0x7}) (async) 15:45:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r0, 0x1}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, 0x0, 0x0) 15:45:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc08c5114, &(0x7f0000000040)) 15:45:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r2, 0x7}) 15:45:14 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x7}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cd00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004cf00)={0x7a38, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe9, "9fbd38fa4a73f1"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004df00)={0x10001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xb1, "f0cc15cdd156df"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004ef00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f300)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "22729644bcb10d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050500)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050b00)={0x3f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "7580cdc9ccb2fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051b00)={0x3811, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r4}, {}, {}, {}, {}, {r5, r6}, {r7}, {}, {r8, r9}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}], 0xde, "52aeab5fafb728"}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a40)=""/4096, &(0x7f0000000000)=0x1000) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0xe, 0x5, {0x2, @struct={0x23f9}, 0x0, 0x7, 0x6, 0x80, 0x0, 0x5, 0x4, @usage=0xfffffffffffffffb, 0xf1, 0x8, [0xd13b, 0x5, 0xffffffffffffffff, 0x2, 0x2, 0x4]}, {0xf36, @usage=0x2, r1, 0x9, 0x6a, 0x4, 0x20, 0x4, 0x40, @usage=0xfffffffffffffffe, 0x80, 0x8571, [0x1ff, 0x54cc, 0x1000, 0x3, 0x801, 0x633]}, {0x8, @usage=0x32a8, 0x0, 0x0, 0x2, 0xff, 0x9, 0xc981, 0xa0, @struct={0x740, 0x40}, 0x1f, 0x2, [0x48, 0x0, 0x6, 0x100, 0x100000000, 0x8]}, {0x4, 0x2, 0x8}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000240)={0x0, 0x1, 0x7}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cd00)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004cf00)={0x7a38, [], 0xe9, "9fbd38fa4a73f1"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004df00)={0x10001, [], 0xb1, "f0cc15cdd156df"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004ef00)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f100)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f300)={0x7, [], 0x0, "22729644bcb10d"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050300)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050500)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050700)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050900)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050b00)={0x3f, [], 0x1, "7580cdc9ccb2fe"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051b00)={0x3811, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r4}, {}, {}, {}, {}, {r5, r6}, {r7}, {}, {r8, r9}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r12}, {0x0, r13}], 0xde, "52aeab5fafb728"}) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000a40)=""/4096, &(0x7f0000000000)=0x1000) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000640)={0xe, 0x5, {0x2, @struct={0x23f9}, 0x0, 0x7, 0x6, 0x80, 0x0, 0x5, 0x4, @usage=0xfffffffffffffffb, 0xf1, 0x8, [0xd13b, 0x5, 0xffffffffffffffff, 0x2, 0x2, 0x4]}, {0xf36, @usage=0x2, r1, 0x9, 0x6a, 0x4, 0x20, 0x4, 0x40, @usage=0xfffffffffffffffe, 0x80, 0x8571, [0x1ff, 0x54cc, 0x1000, 0x3, 0x801, 0x633]}, {0x8, @usage=0x32a8, 0x0, 0x0, 0x2, 0xff, 0x9, 0xc981, 0xa0, @struct={0x740, 0x40}, 0x1f, 0x2, [0x48, 0x0, 0x6, 0x100, 0x100000000, 0x8]}, {0x4, 0x2, 0x8}}) (async) 15:45:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) 15:45:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xaf, 0x41, 0x81, 0x40, 0x0, 0x8, 0x82000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x6, 0x58}, 0x9800, 0x2115f75a, 0x344, 0x4, 0x38, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x20ee40, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000140)=0x20d) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000180)=""/68, 0x44}, &(0x7f0000000080), 0x2}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10900, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/75, &(0x7f0000000040)=0x4b) connect$bt_sco(r1, 0x0, 0x700) 15:45:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x8}) 15:45:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:15 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, &(0x7f0000000040)) 15:45:15 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) connect$bt_sco(r0, &(0x7f0000000200), 0x55) socket$inet6_udp(0xa, 0x2, 0x0) 15:45:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xaf, 0x41, 0x81, 0x40, 0x0, 0x8, 0x82000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x6, 0x58}, 0x9800, 0x2115f75a, 0x344, 0x4, 0x38, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x20ee40, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000140)=0x20d) (async) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000180)=""/68, 0x44}, &(0x7f0000000080), 0x2}, 0x20) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10900, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/75, &(0x7f0000000040)=0x4b) (async) connect$bt_sco(r1, 0x0, 0x700) 15:45:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) (async) connect$bt_sco(r0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:15 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)) 15:45:15 executing program 0: perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xaf, 0x41, 0x81, 0x40, 0x0, 0x8, 0x82000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_config_ext={0x6, 0x58}, 0x9800, 0x2115f75a, 0x344, 0x4, 0x38, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) (async) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x20ee40, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000140)=0x20d) (async) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000180)=""/68, 0x44}, &(0x7f0000000080), 0x2}, 0x20) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10900, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/75, &(0x7f0000000040)=0x4b) (async) connect$bt_sco(r1, 0x0, 0x700) 15:45:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) keyctl$join(0x1, 0x0) (async) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:16 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 15:45:16 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)) 15:45:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400802, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x30002, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000140)) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f00000000c0)=0xffffffff) 15:45:16 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff65) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x1f}, 0x10) 15:45:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:16 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) connect$bt_sco(r0, &(0x7f0000000200), 0x55) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) (async) connect$bt_sco(r0, &(0x7f0000000200), 0x55) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 15:45:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 32) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400802, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x30002, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000140)) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f00000000c0)=0xffffffff) 15:45:16 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff65) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x1f}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0xffffffffffffff65) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x1f}, 0x10) (async) 15:45:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 15:45:16 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)) 15:45:16 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) 15:45:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f00000001c0), 0x80) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400802, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x30002, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000140)) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f00000000c0)=0xffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f00000001c0), 0x80) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)={r0}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400802, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x30002, 0x0) (async) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000140)) (async) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f00000000c0)=0xffffffff) (async) 15:45:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 15:45:16 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff65) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x1f}, 0x10) 15:45:16 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, 0x0) 15:45:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x105800, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) 15:45:16 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) [ 502.714633] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.720236] ieee802154 phy1 wpan1: encryption failed: -22 15:45:17 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) connect$bt_sco(r0, &(0x7f0000000200), 0x55) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407) (async) connect$bt_sco(r0, &(0x7f0000000200), 0x55) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 15:45:17 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, 0x0) 15:45:17 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) 15:45:17 executing program 5: ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0x118, 0x12, 0x300, 0x70bd29, 0x25dfdbfd, {{'tgr160-generic\x00'}, '\x00', '\x00', 0x0, 0x5fe00411304a3a68}, [{0x8, 0x1, 0xff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0xfffffffd}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x10001}]}, 0x118}, 0x1, 0x0, 0x0, 0x80080}, 0x810) connect$bt_sco(r0, 0x0, 0x0) 15:45:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) 15:45:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x9, 0x1001}) ioctl$SNDCTL_TMR_START(r0, 0x5402) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x80000000, '\x00', &(0x7f0000000040)=0x6}) 15:45:17 executing program 5: ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0x118, 0x12, 0x300, 0x70bd29, 0x25dfdbfd, {{'tgr160-generic\x00'}, '\x00', '\x00', 0x0, 0x5fe00411304a3a68}, [{0x8, 0x1, 0xff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0xfffffffd}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x10001}]}, 0x118}, 0x1, 0x0, 0x0, 0x80080}, 0x810) connect$bt_sco(r0, 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0x118, 0x12, 0x300, 0x70bd29, 0x25dfdbfd, {{'tgr160-generic\x00'}, '\x00', '\x00', 0x0, 0x5fe00411304a3a68}, [{0x8, 0x1, 0xff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0xfffffffd}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x10001}]}, 0x118}, 0x1, 0x0, 0x0, 0x80080}, 0x810) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:17 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) 15:45:17 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x4020940d, 0x0) 15:45:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) socket$pptp(0x18, 0x1, 0x2) 15:45:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x9, 0x1001}) ioctl$SNDCTL_TMR_START(r0, 0x5402) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x80000000, '\x00', &(0x7f0000000040)=0x6}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x9, 0x1001}) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x80000000, '\x00', &(0x7f0000000040)=0x6}) (async) 15:45:17 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) 15:45:18 executing program 4: socket(0x23, 0x80001, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:18 executing program 5: ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@upd={0x118, 0x12, 0x300, 0x70bd29, 0x25dfdbfd, {{'tgr160-generic\x00'}, '\x00', '\x00', 0x0, 0x5fe00411304a3a68}, [{0x8, 0x1, 0xff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x8000}, {0x8, 0x1, 0xfffffffd}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x10001}]}, 0x118}, 0x1, 0x0, 0x0, 0x80080}, 0x810) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) connect$bt_sco(r1, 0x0, 0x700) 15:45:18 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff65) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r2, 0x1f}, 0x10) 15:45:18 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f00000000c0)={0x0, 0x9, 0x1001}) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x5, 0x80000000, '\x00', &(0x7f0000000040)=0x6}) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) socket$pptp(0x18, 0x1, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) socket$pptp(0x18, 0x1, 0x2) (async) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x0, 0x4, 0x80, 0x0, @generic}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x10, 0x6, {0x8a, @struct={0x9}, 0x0, 0x8, 0x7fff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x8, 0x40, @struct={0x7bd, 0x7fffffff}, 0x5, 0x80000000, [0x78aa, 0xf8, 0x7fffffff, 0x7, 0x2, 0x7]}, {0x6, @struct={0x7, 0x7}, 0x0, 0x10000, 0x9, 0x7, 0x5d, 0x1ff, 0x30, @struct={0x8, 0x9}, 0x10001, 0x4417, [0x200, 0x2, 0x8000000000000000, 0x0, 0x0, 0x9]}, {0x1, @struct={0x0, 0xedb}, 0x0, 0xf4c, 0x4, 0x0, 0xffffffff, 0x4, 0x22, @usage=0xc7f, 0xffffffd6, 0x3, [0xf6a3, 0x2, 0x101, 0x2, 0x3ff8000000000, 0xfffffffffffffffc]}, {0x1f, 0x1, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={r2, 0x80000000, 0x2}) 15:45:18 executing program 4: socket(0x23, 0x80001, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:18 executing program 1: socket(0x23, 0x80001, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:18 executing program 5: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) 15:45:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x8, @struct={0xff, 0x2}, 0x0, 0x3, 0x98cc, 0x4, 0x8000000000000001, 0x6, 0x46, @usage=0x4, 0xbd0, 0xfff, [0x1d, 0x8, 0x11c0000000000, 0x7fff, 0x6, 0x1]}, {0xd1, @struct={0x4, 0xbd}, 0x0, 0x29ee06a8, 0xcfb4, 0x9, 0x0, 0x2, 0x4c8, @usage=0x7, 0xb3d7, 0x3, [0x1, 0x8c, 0x2, 0x80, 0x8, 0x4]}, {0x2, @struct={0x200, 0x5}, 0x0, 0x4456, 0x3ff, 0x1, 0x9000000000000000, 0x2, 0x2, @struct={0x3f, 0xfffffff9}, 0x9, 0x7, [0x8000000000000001, 0x6, 0x2, 0x1, 0x2, 0x5]}, {0x7f, 0x100000000, 0x7fffffffffffffff}}) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r1, 0x217b}) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:18 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0x0) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x0, 0x4, 0x80, 0x0, @generic}) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x10, 0x6, {0x8a, @struct={0x9}, 0x0, 0x8, 0x7fff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x8, 0x40, @struct={0x7bd, 0x7fffffff}, 0x5, 0x80000000, [0x78aa, 0xf8, 0x7fffffff, 0x7, 0x2, 0x7]}, {0x6, @struct={0x7, 0x7}, 0x0, 0x10000, 0x9, 0x7, 0x5d, 0x1ff, 0x30, @struct={0x8, 0x9}, 0x10001, 0x4417, [0x200, 0x2, 0x8000000000000000, 0x0, 0x0, 0x9]}, {0x1, @struct={0x0, 0xedb}, 0x0, 0xf4c, 0x4, 0x0, 0xffffffff, 0x4, 0x22, @usage=0xc7f, 0xffffffd6, 0x3, [0xf6a3, 0x2, 0x101, 0x2, 0x3ff8000000000, 0xfffffffffffffffc]}, {0x1f, 0x1, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={r2, 0x80000000, 0x2}) 15:45:18 executing program 5: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) 15:45:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x8, @struct={0xff, 0x2}, 0x0, 0x3, 0x98cc, 0x4, 0x8000000000000001, 0x6, 0x46, @usage=0x4, 0xbd0, 0xfff, [0x1d, 0x8, 0x11c0000000000, 0x7fff, 0x6, 0x1]}, {0xd1, @struct={0x4, 0xbd}, 0x0, 0x29ee06a8, 0xcfb4, 0x9, 0x0, 0x2, 0x4c8, @usage=0x7, 0xb3d7, 0x3, [0x1, 0x8c, 0x2, 0x80, 0x8, 0x4]}, {0x2, @struct={0x200, 0x5}, 0x0, 0x4456, 0x3ff, 0x1, 0x9000000000000000, 0x2, 0x2, @struct={0x3f, 0xfffffff9}, 0x9, 0x7, [0x8000000000000001, 0x6, 0x2, 0x1, 0x2, 0x5]}, {0x7f, 0x100000000, 0x7fffffffffffffff}}) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r1, 0x217b}) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:18 executing program 4: socket(0x23, 0x80001, 0x3) (async, rerun: 32) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:18 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:18 executing program 1: socket(0x23, 0x80001, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x0, 0x4, 0x80, 0x0, @generic}) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000080)={0x10, 0x6, {0x8a, @struct={0x9}, 0x0, 0x8, 0x7fff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x8, 0x40, @struct={0x7bd, 0x7fffffff}, 0x5, 0x80000000, [0x78aa, 0xf8, 0x7fffffff, 0x7, 0x2, 0x7]}, {0x6, @struct={0x7, 0x7}, 0x0, 0x10000, 0x9, 0x7, 0x5d, 0x1ff, 0x30, @struct={0x8, 0x9}, 0x10001, 0x4417, [0x200, 0x2, 0x8000000000000000, 0x0, 0x0, 0x9]}, {0x1, @struct={0x0, 0xedb}, 0x0, 0xf4c, 0x4, 0x0, 0xffffffff, 0x4, 0x22, @usage=0xc7f, 0xffffffd6, 0x3, [0xf6a3, 0x2, 0x101, 0x2, 0x3ff8000000000, 0xfffffffffffffffc]}, {0x1f, 0x1, 0xffffffffffffffff}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={r2, 0x80000000, 0x2}) 15:45:18 executing program 5: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) 15:45:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x8, @struct={0xff, 0x2}, 0x0, 0x3, 0x98cc, 0x4, 0x8000000000000001, 0x6, 0x46, @usage=0x4, 0xbd0, 0xfff, [0x1d, 0x8, 0x11c0000000000, 0x7fff, 0x6, 0x1]}, {0xd1, @struct={0x4, 0xbd}, 0x0, 0x29ee06a8, 0xcfb4, 0x9, 0x0, 0x2, 0x4c8, @usage=0x7, 0xb3d7, 0x3, [0x1, 0x8c, 0x2, 0x80, 0x8, 0x4]}, {0x2, @struct={0x200, 0x5}, 0x0, 0x4456, 0x3ff, 0x1, 0x9000000000000000, 0x2, 0x2, @struct={0x3f, 0xfffffff9}, 0x9, 0x7, [0x8000000000000001, 0x6, 0x2, 0x1, 0x2, 0x5]}, {0x7f, 0x100000000, 0x7fffffffffffffff}}) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r1, 0x217b}) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000240)={0x8, 0x1, {0x8, @struct={0xff, 0x2}, 0x0, 0x3, 0x98cc, 0x4, 0x8000000000000001, 0x6, 0x46, @usage=0x4, 0xbd0, 0xfff, [0x1d, 0x8, 0x11c0000000000, 0x7fff, 0x6, 0x1]}, {0xd1, @struct={0x4, 0xbd}, 0x0, 0x29ee06a8, 0xcfb4, 0x9, 0x0, 0x2, 0x4c8, @usage=0x7, 0xb3d7, 0x3, [0x1, 0x8c, 0x2, 0x80, 0x8, 0x4]}, {0x2, @struct={0x200, 0x5}, 0x0, 0x4456, 0x3ff, 0x1, 0x9000000000000000, 0x2, 0x2, @struct={0x3f, 0xfffffff9}, 0x9, 0x7, [0x8000000000000001, 0x6, 0x2, 0x1, 0x2, 0x5]}, {0x7f, 0x100000000, 0x7fffffffffffffff}}) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r1, 0x217b}) (async) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000000)) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:18 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:18 executing program 1: socket(0x23, 0x80001, 0x3) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x2, 0x0, [0x7, 0x6, 0x80000000, 0x5, 0x1ff], [0x0, 0x8001, 0x12, 0x3, 0x3, 0x1f, 0xba9, 0x1, 0xffffffffffffffff, 0x4, 0xffffffff, 0x7, 0x100, 0x3464, 0x9, 0x9, 0x7, 0x6, 0xffffffffc4ae45f4, 0x144, 0x695, 0xe9, 0x100, 0xdca, 0x8, 0x5, 0x7, 0x70000000, 0xc88f, 0xfffffffffffffff7, 0x4b, 0x6, 0x20000000000000, 0x64d, 0x0, 0x3, 0x7ff, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x1, 0x3, 0x83, 0x7, 0x1, 0x3, 0x4, 0xb8ce, 0x400, 0x5, 0x2, 0xffffffff, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x800, 0x3, 0x0, 0x8, 0x400, 0xff, 0xff, 0x7fffffff, 0x5a901d6c, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x0, 0x5, 0x1, 0x45bb, 0x3, 0x81, 0x3e, 0x80000001, 0x8000, 0x7, 0x9b, 0x8000000000000001, 0xfffffffffffffffa, 0x582794c9, 0x8, 0x5, 0x4, 0x10000, 0x9, 0x9, 0x7f, 0x100, 0x7, 0x0, 0x1ff, 0x3, 0x6, 0xffffffffffffff80, 0x3, 0x4, 0x7, 0x7fff, 0x87a, 0xf70, 0x1, 0x4f9, 0x1, 0xfff, 0x5, 0x400, 0xffff, 0x1]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x80}) 15:45:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x4a) 15:45:18 executing program 1: socket(0x23, 0x80001, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) 15:45:18 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x9) 15:45:18 executing program 0: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x9, 0x0, [0x5, 0x670e, 0x8000000000000000, 0x7, 0x1], [0x2, 0x17d, 0x1, 0x800, 0x8, 0x7, 0x5, 0x2, 0xfff, 0xfffffffffffffffa, 0x0, 0x40, 0x1ff, 0x3, 0x5, 0x1, 0x7f, 0x8000, 0x0, 0x7, 0xb7ba, 0x70, 0x0, 0x3ff, 0x7, 0x9, 0xffffffffffffffbd, 0x6, 0x4, 0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x7, 0x9, 0x800080000, 0x7, 0x4, 0x6, 0x4, 0x5, 0xaf71, 0x200, 0x100000001, 0xffffffffffffffb9, 0x3, 0x0, 0x4, 0xffffffff, 0x7, 0x2d, 0x44a9, 0x3, 0xa7a3, 0x7, 0x7, 0xa9f, 0xa6, 0x5, 0x3, 0x0, 0xff, 0xb95b, 0x6, 0x6, 0x8, 0x5, 0x7b4a, 0x80000000, 0x4, 0x4, 0x3, 0x20, 0x3, 0x4, 0x2, 0xc6, 0x7fffffff, 0x400, 0x5, 0x9, 0x3, 0x800, 0x5, 0x0, 0x5, 0x401, 0xfffffffffffffffc, 0x4, 0x3, 0xffffffffffffff00, 0x200, 0xee65, 0x3, 0x2, 0x5, 0x4, 0x1, 0x7, 0x0, 0xfffffffffffff801, 0x6ae, 0x2e800000000, 0x7, 0x8d, 0x5, 0x7fffffff, 0x8, 0x1000, 0x8, 0x3, 0x3f, 0x5204, 0xffffffffffff7fff, 0x5, 0x8, 0x2, 0x7, 0x100000000, 0x9, 0x7]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) getitimer(0x2, &(0x7f00000004c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) 15:45:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x2, 0x0, [0x7, 0x6, 0x80000000, 0x5, 0x1ff], [0x0, 0x8001, 0x12, 0x3, 0x3, 0x1f, 0xba9, 0x1, 0xffffffffffffffff, 0x4, 0xffffffff, 0x7, 0x100, 0x3464, 0x9, 0x9, 0x7, 0x6, 0xffffffffc4ae45f4, 0x144, 0x695, 0xe9, 0x100, 0xdca, 0x8, 0x5, 0x7, 0x70000000, 0xc88f, 0xfffffffffffffff7, 0x4b, 0x6, 0x20000000000000, 0x64d, 0x0, 0x3, 0x7ff, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x1, 0x3, 0x83, 0x7, 0x1, 0x3, 0x4, 0xb8ce, 0x400, 0x5, 0x2, 0xffffffff, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x800, 0x3, 0x0, 0x8, 0x400, 0xff, 0xff, 0x7fffffff, 0x5a901d6c, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x0, 0x5, 0x1, 0x45bb, 0x3, 0x81, 0x3e, 0x80000001, 0x8000, 0x7, 0x9b, 0x8000000000000001, 0xfffffffffffffffa, 0x582794c9, 0x8, 0x5, 0x4, 0x10000, 0x9, 0x9, 0x7f, 0x100, 0x7, 0x0, 0x1ff, 0x3, 0x6, 0xffffffffffffff80, 0x3, 0x4, 0x7, 0x7fff, 0x87a, 0xf70, 0x1, 0x4f9, 0x1, 0xfff, 0x5, 0x400, 0xffff, 0x1]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x80}) 15:45:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x4a) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x4a) (async) 15:45:18 executing program 1: socket(0x23, 0x80001, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) 15:45:18 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x9) 15:45:18 executing program 0: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x9, 0x0, [0x5, 0x670e, 0x8000000000000000, 0x7, 0x1], [0x2, 0x17d, 0x1, 0x800, 0x8, 0x7, 0x5, 0x2, 0xfff, 0xfffffffffffffffa, 0x0, 0x40, 0x1ff, 0x3, 0x5, 0x1, 0x7f, 0x8000, 0x0, 0x7, 0xb7ba, 0x70, 0x0, 0x3ff, 0x7, 0x9, 0xffffffffffffffbd, 0x6, 0x4, 0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x7, 0x9, 0x800080000, 0x7, 0x4, 0x6, 0x4, 0x5, 0xaf71, 0x200, 0x100000001, 0xffffffffffffffb9, 0x3, 0x0, 0x4, 0xffffffff, 0x7, 0x2d, 0x44a9, 0x3, 0xa7a3, 0x7, 0x7, 0xa9f, 0xa6, 0x5, 0x3, 0x0, 0xff, 0xb95b, 0x6, 0x6, 0x8, 0x5, 0x7b4a, 0x80000000, 0x4, 0x4, 0x3, 0x20, 0x3, 0x4, 0x2, 0xc6, 0x7fffffff, 0x400, 0x5, 0x9, 0x3, 0x800, 0x5, 0x0, 0x5, 0x401, 0xfffffffffffffffc, 0x4, 0x3, 0xffffffffffffff00, 0x200, 0xee65, 0x3, 0x2, 0x5, 0x4, 0x1, 0x7, 0x0, 0xfffffffffffff801, 0x6ae, 0x2e800000000, 0x7, 0x8d, 0x5, 0x7fffffff, 0x8, 0x1000, 0x8, 0x3, 0x3f, 0x5204, 0xffffffffffff7fff, 0x5, 0x8, 0x2, 0x7, 0x100000000, 0x9, 0x7]}) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async, rerun: 64) getitimer(0x2, &(0x7f00000004c0)) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) 15:45:18 executing program 1: socket(0x23, 0x80001, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:45:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@generic={0x80}) 15:45:18 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x4a) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000000)=0x4a) (async) 15:45:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={0x0, 0x2, 0x0, [0x7, 0x6, 0x80000000, 0x5, 0x1ff], [0x0, 0x8001, 0x12, 0x3, 0x3, 0x1f, 0xba9, 0x1, 0xffffffffffffffff, 0x4, 0xffffffff, 0x7, 0x100, 0x3464, 0x9, 0x9, 0x7, 0x6, 0xffffffffc4ae45f4, 0x144, 0x695, 0xe9, 0x100, 0xdca, 0x8, 0x5, 0x7, 0x70000000, 0xc88f, 0xfffffffffffffff7, 0x4b, 0x6, 0x20000000000000, 0x64d, 0x0, 0x3, 0x7ff, 0x0, 0x9, 0x5, 0x3, 0x7, 0x2, 0x1, 0x3, 0x83, 0x7, 0x1, 0x3, 0x4, 0xb8ce, 0x400, 0x5, 0x2, 0xffffffff, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x800, 0x3, 0x0, 0x8, 0x400, 0xff, 0xff, 0x7fffffff, 0x5a901d6c, 0x8001, 0x7, 0x4, 0x1, 0x9, 0x0, 0x5, 0x1, 0x45bb, 0x3, 0x81, 0x3e, 0x80000001, 0x8000, 0x7, 0x9b, 0x8000000000000001, 0xfffffffffffffffa, 0x582794c9, 0x8, 0x5, 0x4, 0x10000, 0x9, 0x9, 0x7f, 0x100, 0x7, 0x0, 0x1ff, 0x3, 0x6, 0xffffffffffffff80, 0x3, 0x4, 0x7, 0x7fff, 0x87a, 0xf70, 0x1, 0x4f9, 0x1, 0xfff, 0x5, 0x400, 0xffff, 0x1]}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) (async, rerun: 64) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, 0x0, 0x0) 15:45:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000040)=0x9) 15:45:19 executing program 1: socket(0x23, 0x80001, 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:19 executing program 0: ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x9, 0x0, [0x5, 0x670e, 0x8000000000000000, 0x7, 0x1], [0x2, 0x17d, 0x1, 0x800, 0x8, 0x7, 0x5, 0x2, 0xfff, 0xfffffffffffffffa, 0x0, 0x40, 0x1ff, 0x3, 0x5, 0x1, 0x7f, 0x8000, 0x0, 0x7, 0xb7ba, 0x70, 0x0, 0x3ff, 0x7, 0x9, 0xffffffffffffffbd, 0x6, 0x4, 0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x7, 0x9, 0x800080000, 0x7, 0x4, 0x6, 0x4, 0x5, 0xaf71, 0x200, 0x100000001, 0xffffffffffffffb9, 0x3, 0x0, 0x4, 0xffffffff, 0x7, 0x2d, 0x44a9, 0x3, 0xa7a3, 0x7, 0x7, 0xa9f, 0xa6, 0x5, 0x3, 0x0, 0xff, 0xb95b, 0x6, 0x6, 0x8, 0x5, 0x7b4a, 0x80000000, 0x4, 0x4, 0x3, 0x20, 0x3, 0x4, 0x2, 0xc6, 0x7fffffff, 0x400, 0x5, 0x9, 0x3, 0x800, 0x5, 0x0, 0x5, 0x401, 0xfffffffffffffffc, 0x4, 0x3, 0xffffffffffffff00, 0x200, 0xee65, 0x3, 0x2, 0x5, 0x4, 0x1, 0x7, 0x0, 0xfffffffffffff801, 0x6ae, 0x2e800000000, 0x7, 0x8d, 0x5, 0x7fffffff, 0x8, 0x1000, 0x8, 0x3, 0x3f, 0x5204, 0xffffffffffff7fff, 0x5, 0x8, 0x2, 0x7, 0x100000000, 0x9, 0x7]}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) getitimer(0x2, &(0x7f00000004c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x0, 0x9, 0x0, [0x5, 0x670e, 0x8000000000000000, 0x7, 0x1], [0x2, 0x17d, 0x1, 0x800, 0x8, 0x7, 0x5, 0x2, 0xfff, 0xfffffffffffffffa, 0x0, 0x40, 0x1ff, 0x3, 0x5, 0x1, 0x7f, 0x8000, 0x0, 0x7, 0xb7ba, 0x70, 0x0, 0x3ff, 0x7, 0x9, 0xffffffffffffffbd, 0x6, 0x4, 0x8, 0x9, 0xfffffffffffffff8, 0x4, 0x7, 0x9, 0x800080000, 0x7, 0x4, 0x6, 0x4, 0x5, 0xaf71, 0x200, 0x100000001, 0xffffffffffffffb9, 0x3, 0x0, 0x4, 0xffffffff, 0x7, 0x2d, 0x44a9, 0x3, 0xa7a3, 0x7, 0x7, 0xa9f, 0xa6, 0x5, 0x3, 0x0, 0xff, 0xb95b, 0x6, 0x6, 0x8, 0x5, 0x7b4a, 0x80000000, 0x4, 0x4, 0x3, 0x20, 0x3, 0x4, 0x2, 0xc6, 0x7fffffff, 0x400, 0x5, 0x9, 0x3, 0x800, 0x5, 0x0, 0x5, 0x401, 0xfffffffffffffffc, 0x4, 0x3, 0xffffffffffffff00, 0x200, 0xee65, 0x3, 0x2, 0x5, 0x4, 0x1, 0x7, 0x0, 0xfffffffffffff801, 0x6ae, 0x2e800000000, 0x7, 0x8d, 0x5, 0x7fffffff, 0x8, 0x1000, 0x8, 0x3, 0x3f, 0x5204, 0xffffffffffff7fff, 0x5, 0x8, 0x2, 0x7, 0x100000000, 0x9, 0x7]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) getitimer(0x2, &(0x7f00000004c0)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) (async) 15:45:19 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) 15:45:19 executing program 1: socket(0x23, 0x80001, 0x3) 15:45:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x1, 0x100, 0x22a, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) connect$bt_sco(r0, 0x0, 0x0) 15:45:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0xfc, 0x4, 0x61, 0x0, 0x5, 0x80800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x89, 0x101}, 0x1230, 0x7, 0xffff9ad8, 0x2, 0x1, 0x820, 0x3ff, 0x0, 0x4, 0x0, 0xa4}, r1, 0x4, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0x700000000000000, 0x0, [0x7, 0x41b5, 0x1, 0xfff, 0x2], [0x0, 0xfffffffffffffffe, 0x6, 0xffffffffffff8000, 0x8000, 0x2, 0x7, 0x45, 0x8, 0xd18, 0x200, 0x3, 0x0, 0x80000001, 0x2ce06f46, 0x8001, 0x80000000, 0x8000000000000001, 0x67, 0x2, 0x7, 0x101, 0x90, 0x3, 0x401, 0x3f, 0x3, 0x100, 0x8, 0x6, 0x7, 0xfffffffffffffffd, 0x8001, 0x8001, 0x7, 0xba3, 0x3, 0x9, 0x5, 0xffffffffffffffe1, 0x10f8, 0x7fff, 0x10000, 0xfffffffffffffffa, 0x100000001, 0x10001, 0x3ff, 0x1, 0xffff, 0x6, 0x1, 0x2, 0x3, 0x1, 0x40, 0x2, 0x5, 0x493b, 0x3f, 0x70000000000000, 0x5, 0x1ff, 0x4, 0x2000400000000, 0x0, 0x80000001, 0x9, 0x0, 0xff, 0xcc, 0x8, 0x101, 0x5, 0x0, 0x7fffffff, 0x0, 0x6, 0x2, 0x8, 0x7fffffff, 0x3, 0x3, 0x2e, 0x1, 0x1, 0x8000000000000001, 0x78e1, 0x7fa, 0x401, 0x7, 0x1000000000, 0x400, 0xfffffffffffffffb, 0xffffffffffff0001, 0x0, 0x2f600000, 0x7, 0x80, 0xfff, 0x400, 0x401, 0xad, 0x7fff, 0x9d79, 0x796, 0xfffffffffffffff9, 0x9, 0x5, 0x8, 0x8000, 0xfffffffffffffffe, 0x1, 0x3, 0x3f, 0xffffffff, 0x44, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff, 0x4d, 0x81]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000080)={{0x7, 0x9}, 0x34}, 0x10) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 15:45:19 executing program 0: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$pppoe(0x18, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r1, &(0x7f0000000300)) connect$bt_sco(r0, 0x0, 0x700) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000001c0)={@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @local}}, {&(0x7f0000000080)=""/254, 0xfe}, &(0x7f0000000180), 0x8}, 0xa0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 15:45:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x1, 0x100, 0x22a, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0xfc, 0x4, 0x61, 0x0, 0x5, 0x80800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x89, 0x101}, 0x1230, 0x7, 0xffff9ad8, 0x2, 0x1, 0x820, 0x3ff, 0x0, 0x4, 0x0, 0xa4}, r1, 0x4, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0x700000000000000, 0x0, [0x7, 0x41b5, 0x1, 0xfff, 0x2], [0x0, 0xfffffffffffffffe, 0x6, 0xffffffffffff8000, 0x8000, 0x2, 0x7, 0x45, 0x8, 0xd18, 0x200, 0x3, 0x0, 0x80000001, 0x2ce06f46, 0x8001, 0x80000000, 0x8000000000000001, 0x67, 0x2, 0x7, 0x101, 0x90, 0x3, 0x401, 0x3f, 0x3, 0x100, 0x8, 0x6, 0x7, 0xfffffffffffffffd, 0x8001, 0x8001, 0x7, 0xba3, 0x3, 0x9, 0x5, 0xffffffffffffffe1, 0x10f8, 0x7fff, 0x10000, 0xfffffffffffffffa, 0x100000001, 0x10001, 0x3ff, 0x1, 0xffff, 0x6, 0x1, 0x2, 0x3, 0x1, 0x40, 0x2, 0x5, 0x493b, 0x3f, 0x70000000000000, 0x5, 0x1ff, 0x4, 0x2000400000000, 0x0, 0x80000001, 0x9, 0x0, 0xff, 0xcc, 0x8, 0x101, 0x5, 0x0, 0x7fffffff, 0x0, 0x6, 0x2, 0x8, 0x7fffffff, 0x3, 0x3, 0x2e, 0x1, 0x1, 0x8000000000000001, 0x78e1, 0x7fa, 0x401, 0x7, 0x1000000000, 0x400, 0xfffffffffffffffb, 0xffffffffffff0001, 0x0, 0x2f600000, 0x7, 0x80, 0xfff, 0x400, 0x401, 0xad, 0x7fff, 0x9d79, 0x796, 0xfffffffffffffff9, 0x9, 0x5, 0x8, 0x8000, 0xfffffffffffffffe, 0x1, 0x3, 0x3f, 0xffffffff, 0x44, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff, 0x4d, 0x81]}) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000080)={{0x7, 0x9}, 0x34}, 0x10) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 15:45:19 executing program 1: socket(0x0, 0x80001, 0x3) 15:45:19 executing program 0: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$pppoe(0x18, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r1, &(0x7f0000000300)) (async) connect$bt_sco(r0, 0x0, 0x700) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000001c0)={@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @local}}, {&(0x7f0000000080)=""/254, 0xfe}, &(0x7f0000000180), 0x8}, 0xa0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) 15:45:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x1, 0x100, 0x22a, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x0) (rerun: 64) 15:45:19 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) 15:45:19 executing program 0: timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$pppoe(0x18, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r1, &(0x7f0000000300)) connect$bt_sco(r0, 0x0, 0x700) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000001c0)={@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @local}}, {&(0x7f0000000080)=""/254, 0xfe}, &(0x7f0000000180), 0x8}, 0xa0) pipe2$watch_queue(&(0x7f0000000000), 0x80) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) pipe2$watch_queue(&(0x7f0000000280), 0x80) (async) timerfd_gettime(r1, &(0x7f0000000300)) (async) connect$bt_sco(r0, 0x0, 0x700) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000001c0)={@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @local}}, {&(0x7f0000000080)=""/254, 0xfe}, &(0x7f0000000180), 0x8}, 0xa0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) 15:45:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0xfc, 0x4, 0x61, 0x0, 0x5, 0x80800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x89, 0x101}, 0x1230, 0x7, 0xffff9ad8, 0x2, 0x1, 0x820, 0x3ff, 0x0, 0x4, 0x0, 0xa4}, r1, 0x4, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0x700000000000000, 0x0, [0x7, 0x41b5, 0x1, 0xfff, 0x2], [0x0, 0xfffffffffffffffe, 0x6, 0xffffffffffff8000, 0x8000, 0x2, 0x7, 0x45, 0x8, 0xd18, 0x200, 0x3, 0x0, 0x80000001, 0x2ce06f46, 0x8001, 0x80000000, 0x8000000000000001, 0x67, 0x2, 0x7, 0x101, 0x90, 0x3, 0x401, 0x3f, 0x3, 0x100, 0x8, 0x6, 0x7, 0xfffffffffffffffd, 0x8001, 0x8001, 0x7, 0xba3, 0x3, 0x9, 0x5, 0xffffffffffffffe1, 0x10f8, 0x7fff, 0x10000, 0xfffffffffffffffa, 0x100000001, 0x10001, 0x3ff, 0x1, 0xffff, 0x6, 0x1, 0x2, 0x3, 0x1, 0x40, 0x2, 0x5, 0x493b, 0x3f, 0x70000000000000, 0x5, 0x1ff, 0x4, 0x2000400000000, 0x0, 0x80000001, 0x9, 0x0, 0xff, 0xcc, 0x8, 0x101, 0x5, 0x0, 0x7fffffff, 0x0, 0x6, 0x2, 0x8, 0x7fffffff, 0x3, 0x3, 0x2e, 0x1, 0x1, 0x8000000000000001, 0x78e1, 0x7fa, 0x401, 0x7, 0x1000000000, 0x400, 0xfffffffffffffffb, 0xffffffffffff0001, 0x0, 0x2f600000, 0x7, 0x80, 0xfff, 0x400, 0x401, 0xad, 0x7fff, 0x9d79, 0x796, 0xfffffffffffffff9, 0x9, 0x5, 0x8, 0x8000, 0xfffffffffffffffe, 0x1, 0x3, 0x3f, 0xffffffff, 0x44, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff, 0x4d, 0x81]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000080)={{0x7, 0x9}, 0x34}, 0x10) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getpgid(0x0) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x3, 0xfc, 0x4, 0x61, 0x0, 0x5, 0x80800, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x89, 0x101}, 0x1230, 0x7, 0xffff9ad8, 0x2, 0x1, 0x820, 0x3ff, 0x0, 0x4, 0x0, 0xa4}, r1, 0x4, 0xffffffffffffffff, 0x8) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={0x0, 0x700000000000000, 0x0, [0x7, 0x41b5, 0x1, 0xfff, 0x2], [0x0, 0xfffffffffffffffe, 0x6, 0xffffffffffff8000, 0x8000, 0x2, 0x7, 0x45, 0x8, 0xd18, 0x200, 0x3, 0x0, 0x80000001, 0x2ce06f46, 0x8001, 0x80000000, 0x8000000000000001, 0x67, 0x2, 0x7, 0x101, 0x90, 0x3, 0x401, 0x3f, 0x3, 0x100, 0x8, 0x6, 0x7, 0xfffffffffffffffd, 0x8001, 0x8001, 0x7, 0xba3, 0x3, 0x9, 0x5, 0xffffffffffffffe1, 0x10f8, 0x7fff, 0x10000, 0xfffffffffffffffa, 0x100000001, 0x10001, 0x3ff, 0x1, 0xffff, 0x6, 0x1, 0x2, 0x3, 0x1, 0x40, 0x2, 0x5, 0x493b, 0x3f, 0x70000000000000, 0x5, 0x1ff, 0x4, 0x2000400000000, 0x0, 0x80000001, 0x9, 0x0, 0xff, 0xcc, 0x8, 0x101, 0x5, 0x0, 0x7fffffff, 0x0, 0x6, 0x2, 0x8, 0x7fffffff, 0x3, 0x3, 0x2e, 0x1, 0x1, 0x8000000000000001, 0x78e1, 0x7fa, 0x401, 0x7, 0x1000000000, 0x400, 0xfffffffffffffffb, 0xffffffffffff0001, 0x0, 0x2f600000, 0x7, 0x80, 0xfff, 0x400, 0x401, 0xad, 0x7fff, 0x9d79, 0x796, 0xfffffffffffffff9, 0x9, 0x5, 0x8, 0x8000, 0xfffffffffffffffe, 0x1, 0x3, 0x3f, 0xffffffff, 0x44, 0xfffffffffffffffc, 0x4, 0xffffffffffffffff, 0x4d, 0x81]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000680)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000080)={{0x7, 0x9}, 0x34}, 0x10) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) 15:45:19 executing program 1: socket(0x0, 0x80001, 0x3) 15:45:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x141800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0xf800, 0x3, 0x0, {{0x1a, 0x4, 0x1, 0x2f, 0x68, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x1f, 0x1, [{0x2, 0x11, "5ead38cebc0bc8cc0f9b915f0259aa"}, {0x1, 0x6, "c883c7e2"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x1d, 0x3, 0x9, [{@multicast2, 0xff}, {@private=0xa010101, 0x7fffffff}, {@remote, 0x3}, {@multicast1, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x521, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc051}, 0x20000004) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0xf800, 0x3, 0x0, {{0x1a, 0x4, 0x1, 0x2f, 0x68, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x1f, 0x1, [{0x2, 0x11, "5ead38cebc0bc8cc0f9b915f0259aa"}, {0x1, 0x6, "c883c7e2"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x1d, 0x3, 0x9, [{@multicast2, 0xff}, {@private=0xa010101, 0x7fffffff}, {@remote, 0x3}, {@multicast1, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x521, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc051}, 0x20000004) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x141800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:20 executing program 1: socket(0x0, 0x80001, 0x3) 15:45:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f00000000c0)={0x7fffffff, "8ff74be7149e5f715e2a4fcc552e0d8a52a77b783e5346a86a27c071908ee3ab", 0x2d4148cc71fc9e53}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={@none, 0xfffff9af}) connect$bt_sco(r3, 0x0, 0xa1f) 15:45:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x56}}, 0x10) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000100)) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r6, 0x100}) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0xf800, 0x3, 0x0, {{0x1a, 0x4, 0x1, 0x2f, 0x68, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x1f, 0x1, [{0x2, 0x11, "5ead38cebc0bc8cc0f9b915f0259aa"}, {0x1, 0x6, "c883c7e2"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x1d, 0x3, 0x9, [{@multicast2, 0xff}, {@private=0xa010101, 0x7fffffff}, {@remote, 0x3}, {@multicast1, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x521, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc051}, 0x20000004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0xf800, 0x3, 0x0, {{0x1a, 0x4, 0x1, 0x2f, 0x68, 0x68, 0x0, 0xff, 0x4, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x1f, 0x1, [{0x2, 0x11, "5ead38cebc0bc8cc0f9b915f0259aa"}, {0x1, 0x6, "c883c7e2"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x1d, 0x3, 0x9, [{@multicast2, 0xff}, {@private=0xa010101, 0x7fffffff}, {@remote, 0x3}, {@multicast1, 0x3}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) (async) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x521, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc051}, 0x20000004) (async) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x26001, 0x0) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040), 0x2, 0x0) (async) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x141800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:20 executing program 1: socket(0x23, 0x0, 0x3) 15:45:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f00000000c0)={0x7fffffff, "8ff74be7149e5f715e2a4fcc552e0d8a52a77b783e5346a86a27c071908ee3ab", 0x2d4148cc71fc9e53}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async, rerun: 64) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={@none, 0xfffff9af}) (async, rerun: 64) connect$bt_sco(r3, 0x0, 0xa1f) 15:45:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x56}}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000100)) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r6, 0x100}) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000280)={{r0}, r1, 0x18, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x2, 0x800, {0x5, 0xffffffff7fffffff, 0x1, 0x0, 0x1}, [0x2]}}, @devid}) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000900)={{r3}, 0x0, 0xa, @unused=[0x9, 0x43e1, 0x0, 0x8], @devid}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xf5, 0x13}) bind$isdn(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x7f, 0x80, 0x7f, 0x9}, 0x6) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000100)) 15:45:20 executing program 1: socket(0x23, 0x0, 0x0) 15:45:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f00000000c0)={0x7fffffff, "8ff74be7149e5f715e2a4fcc552e0d8a52a77b783e5346a86a27c071908ee3ab", 0x2d4148cc71fc9e53}) (async) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={@none, 0xfffff9af}) (async) connect$bt_sco(r3, 0x0, 0xa1f) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000900)={{r3}, 0x0, 0xa, @unused=[0x9, 0x43e1, 0x0, 0x8], @devid}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xf5, 0x13}) bind$isdn(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x7f, 0x80, 0x7f, 0x9}, 0x6) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000100)) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000280)={{r0}, r1, 0x18, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x2, 0x800, {0x5, 0xffffffff7fffffff, 0x1, 0x0, 0x1}, [0x2]}}, @devid}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000280)={{r0}, r1, 0x18, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x2, 0x800, {0x5, 0xffffffff7fffffff, 0x1, 0x0, 0x1}, [0x2]}}, @devid}) (async) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x10, 0x3, 0x2, 0x3}) 15:45:20 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x56}}, 0x10) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000100)) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r6, 0x100}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) pipe2$watch_queue(&(0x7f0000000140), 0x80) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x56}}, 0x10) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000240)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000100)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000040)={r6, 0x100}) (async) 15:45:20 executing program 1: socket(0x23, 0x0, 0x0) 15:45:20 executing program 0: timer_create(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1, 0x1, {0x100000001, @struct={0xfffffffb}, 0x0, 0x2, 0x4, 0x6, 0x9, 0x7, 0x411, @struct={0x1, 0xfffffffe}, 0x0, 0xd476, [0xffffffffffffffe1, 0x80000000, 0x0, 0x9, 0x0, 0x1]}, {0x6e, @usage=0xae1d, 0x0, 0x6, 0xcb6, 0x7, 0xd4c, 0x4, 0xa9, @struct={0x5, 0x7}, 0x8, 0x1, [0x101, 0x7f, 0x5, 0x3, 0x0, 0x8]}, {0x7, @struct={0x2, 0x80000001}, 0x0, 0x0, 0x7ff, 0xb4, 0x5, 0x2, 0xa0, @struct={0x1000, 0x6}, 0x7, 0x80, [0x1, 0x4, 0x7, 0x1, 0x3]}, {0x9, 0x7f, 0xf1a}}) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$cec(&(0x7f0000000140), 0x1, 0x2) (rerun: 64) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000900)={{r3}, 0x0, 0xa, @unused=[0x9, 0x43e1, 0x0, 0x8], @devid}) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) (async, rerun: 32) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xf5, 0x13}) (async, rerun: 32) bind$isdn(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x7f, 0x80, 0x7f, 0x9}, 0x6) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000100)) 15:45:20 executing program 1: socket(0x23, 0x0, 0x0) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x10, 0x3, 0x2, 0x3}) 15:45:20 executing program 0: timer_create(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1, 0x1, {0x100000001, @struct={0xfffffffb}, 0x0, 0x2, 0x4, 0x6, 0x9, 0x7, 0x411, @struct={0x1, 0xfffffffe}, 0x0, 0xd476, [0xffffffffffffffe1, 0x80000000, 0x0, 0x9, 0x0, 0x1]}, {0x6e, @usage=0xae1d, 0x0, 0x6, 0xcb6, 0x7, 0xd4c, 0x4, 0xa9, @struct={0x5, 0x7}, 0x8, 0x1, [0x101, 0x7f, 0x5, 0x3, 0x0, 0x8]}, {0x7, @struct={0x2, 0x80000001}, 0x0, 0x0, 0x7ff, 0xb4, 0x5, 0x2, 0xa0, @struct={0x1000, 0x6}, 0x7, 0x80, [0x1, 0x4, 0x7, 0x1, 0x3]}, {0x9, 0x7f, 0xf1a}}) timer_create(0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1, 0x1, {0x100000001, @struct={0xfffffffb}, 0x0, 0x2, 0x4, 0x6, 0x9, 0x7, 0x411, @struct={0x1, 0xfffffffe}, 0x0, 0xd476, [0xffffffffffffffe1, 0x80000000, 0x0, 0x9, 0x0, 0x1]}, {0x6e, @usage=0xae1d, 0x0, 0x6, 0xcb6, 0x7, 0xd4c, 0x4, 0xa9, @struct={0x5, 0x7}, 0x8, 0x1, [0x101, 0x7f, 0x5, 0x3, 0x0, 0x8]}, {0x7, @struct={0x2, 0x80000001}, 0x0, 0x0, 0x7ff, 0xb4, 0x5, 0x2, 0xa0, @struct={0x1000, 0x6}, 0x7, 0x80, [0x1, 0x4, 0x7, 0x1, 0x3]}, {0x9, 0x7f, 0xf1a}}) (async) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000280)={{r0}, r1, 0x18, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x2, 0x800, {0x5, 0xffffffff7fffffff, 0x1, 0x0, 0x1}, [0x2]}}, @devid}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000280)={{r0}, r1, 0x18, @inherit={0x50, &(0x7f0000000200)={0x0, 0x1, 0x2, 0x800, {0x5, 0xffffffff7fffffff, 0x1, 0x0, 0x1}, [0x2]}}, @devid}) (async) 15:45:20 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = socket(0x1d, 0x6, 0x57) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:20 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x10, 0x3, 0x2, 0x3}) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x11, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:20 executing program 0: timer_create(0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x1, 0x1, {0x100000001, @struct={0xfffffffb}, 0x0, 0x2, 0x4, 0x6, 0x9, 0x7, 0x411, @struct={0x1, 0xfffffffe}, 0x0, 0xd476, [0xffffffffffffffe1, 0x80000000, 0x0, 0x9, 0x0, 0x1]}, {0x6e, @usage=0xae1d, 0x0, 0x6, 0xcb6, 0x7, 0xd4c, 0x4, 0xa9, @struct={0x5, 0x7}, 0x8, 0x1, [0x101, 0x7f, 0x5, 0x3, 0x0, 0x8]}, {0x7, @struct={0x2, 0x80000001}, 0x0, 0x0, 0x7ff, 0xb4, 0x5, 0x2, 0xa0, @struct={0x1000, 0x6}, 0x7, 0x80, [0x1, 0x4, 0x7, 0x1, 0x3]}, {0x9, 0x7f, 0xf1a}}) 15:45:20 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = socket(0x1d, 0x6, 0x57) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x10, 0x3, 0x2, 0x3}) 15:45:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = socket(0x1d, 0x6, 0x57) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x11, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x11, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:20 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = socket(0x1d, 0x6, 0x57) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) socket(0x1d, 0x6, 0x57) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) 15:45:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) write$sequencer(r1, &(0x7f0000000000)=[@n={0x0, 0x6, @SEQ_NOTEON=@note=0xa, 0xdf}, @n={0x1, 0xd8, @generic=0x2, 0x5}], 0x8) 15:45:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = socket(0x1d, 0x6, 0x57) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x29, 0x2, 0xac, 0x7fff, 0x15, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x8, 0x1, 0x1, 0x6, 0x1000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x7fffffff, 0x4, 0x6, 0x1000, r4, 0xfcc8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', &(0x7f0000000580)}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r2, r3, 0x17}, 0x14) 15:45:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = socket(0x1d, 0x6, 0x57) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:20 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r0, &(0x7f0000000040)) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x11, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r1, 0x80045105, &(0x7f0000000080)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x11, 0x0, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_START(r2, 0x5402) (async) write$sequencer(r1, &(0x7f0000000000)=[@n={0x0, 0x6, @SEQ_NOTEON=@note=0xa, 0xdf}, @n={0x1, 0xd8, @generic=0x2, 0x5}], 0x8) 15:45:20 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:20 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r0, &(0x7f0000000040)) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x29, 0x2, 0xac, 0x7fff, 0x15, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x1}}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x8, 0x1, 0x1, 0x6, 0x1000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x7fffffff, 0x4, 0x6, 0x1000, r4, 0xfcc8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', &(0x7f0000000580)}) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r2, r3, 0x17}, 0x14) (rerun: 64) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x24) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:20 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:20 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) timerfd_gettime(r0, &(0x7f0000000040)) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) timerfd_gettime(r0, &(0x7f0000000040)) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) socket(0x1d, 0x6, 0x57) 15:45:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) write$sequencer(r1, &(0x7f0000000000)=[@n={0x0, 0x6, @SEQ_NOTEON=@note=0xa, 0xdf}, @n={0x1, 0xd8, @generic=0x2, 0x5}], 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_START(r2, 0x5402) (async) write$sequencer(r1, &(0x7f0000000000)=[@n={0x0, 0x6, @SEQ_NOTEON=@note=0xa, 0xdf}, @n={0x1, 0xd8, @generic=0x2, 0x5}], 0x8) (async) 15:45:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_START(r2, 0x5402) (async, rerun: 32) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x24) (async, rerun: 32) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:20 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, 0x0, 0x0) 15:45:20 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x29, 0x2, 0xac, 0x7fff, 0x15, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x8000, 0x0, 0x1}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x8, 0x1, 0x1, 0x6, 0x1000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x7fffffff, 0x4, 0x6, 0x1000, r4, 0xfcc8, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r5, 0xc0285629, &(0x7f00000005c0)={0x0, 0x0, 0x0, '\x00', &(0x7f0000000580)}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r2, r3, 0x17}, 0x14) 15:45:20 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket(0x1d, 0x6, 0x57) 15:45:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0x14) 15:45:21 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, 0x0, 0x0) 15:45:21 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1}) 15:45:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_START(r2, 0x5402) (async) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x24) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:21 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x1d, 0x6, 0x57) 15:45:21 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0x14) 15:45:21 executing program 1: socket(0x1d, 0x6, 0x57) 15:45:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)=0xffffff39) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x10, @inherit={0x90, &(0x7f00000000c0)={0x1, 0x9, 0x7902, 0x6, {0x2, 0xfffffffffffff714, 0x4eb, 0xb29, 0x4bc}, [0x4, 0xfffffffffffffff8, 0x40, 0x8, 0x7, 0x800, 0x1c, 0x0, 0x0]}}, @name="159efdd6f1401474de6a753ce18c2e5e770dc418739b8fa9e69107055eecd746c45f17923df140c81f2c2badf70fba9a1720b1ecd7176ba0bc4ef904baa8296bbef65efbcc8ed82b71c95542e3f704a97b73f5f116abbe214d4917d76cb088e7b4591c056adfe61bbce5822bd5ade9afb4fd184e43d2249b58def6b62ea0b791db909665f1282e7d16a98247b86fbfd521e027172f86cbbb191fad8ed6fd0726496ff17407f27109e8fb6314df0d8168b5ae79f57d34a2e63d285f0da6342476a495b90f9eb6a9066799cede9ee47ad3d451705b44f23a747aa0711b1f1e9b070f9f47fa445ac023a8af4267c9b84bdc36684582f2a92367d1a2d09ed3347bfcda121d4ff5ca9d05f3d3423417405d37cffe924422ff8555172366e79a633741584cec494d6bfd5ea46f63328a106649d3d8f3ef23086aff806ef0e617f0f4c96245ee8d294cf1de1ed815c2dbe1189cca66ed461b50001cd82e703f7fd1e44c1a80d95176ff8e9b309600251122f8b0c52595fb1becfbdeacf92f7052c1bb8ace6ffee37345fb3c2a15973bc05877dedff54cd650e736ae732dc2c1f5d602f0a6f0c4e693ad2d50cbfdf7f212baa74142b6aed80ff646a64bdde47b192cbf802d60981b8fc2779b28a21e0dd5c20df8bf5832c831840b0df20132fb84c509379de6b83d107a2ae06286a2a09d4379b472ec2fa00768f3b4a574373e72db64ba9e9bf0a23e192d740c405ac730ae2f217b1a9510b462113b7eb69a161ca570a282fc16c5b2f961470532dea5e7c7255c8507e849c22fa1af8295bb74909fdbf1cb5d84fb912b5370e0c68332af142a28f4657321a3428cd38e15b901de46e22d3bc83cdf862fc4de864e6b51cbad2f5c59de994ded06a9742d379c5f12e869bc10dcb8d3ec5bb51a0ad8a6267f0d5cd3ab805cd6fbdee6b88b241951e4e9c335d43df118652913a778c970a5b8f97f7d639be1da9251cf7a99e2d564a29aa15b9a5ebc18b8f611038bce09b92802dc747e45afdbeeb45dd0791e584dad8d53e98855be23f1600122b67549ea6a449b2a18c4fee8c3db3543000f15789da569c324636036937972dcb00889174cf443196818916ed7e1ff6a9d6c4d01fb5525d3b6342934c65e6879d44c9539fa967944f4f2585ab8ed6edbe7764efdc382cf34fbcc012da38352495ec5fd842ddc7c125911e076a4b5922413b16557672b10043a11b469eb41487fa6d049d1423b7eb22ccd0c5fde0c85db01ed3605b503ef88a84628e7b8eb654de4906a267079313d9403ccdbdb565b3589fbbebe1674d7be19990e8522ecbc0491a0e7f432fc858d9bc2830c686545ebd6e808ef769d4599fe3ded58da20edff119a08e7869b4b66812f59d704b3d4befcba3e5b7be48daae37c292320e9f188e5105a19a5256b33ded42c0f0a270f745078363ec06d34421adcab9295f12b0141f802273244e6ab7ad23c702dd920beb99484a3430b74717a003421314f7c280cbc7923c4094de42ce9fd5ab8d26b5b7a074819fe03ce162bad2f69d4e2ced1628a17eb413d3642202a6d09959738f7be96046f6091961bad4ab41f90d1299e646d789506964c8b1ecf2268ccfd7dc63641e66676b2de00af4293bf593f538a0ee0921dcdda5f748f9190eb16599ae7e3a005fac54b6afd9a19fe5d062ec63bfc0c2d6dd3419ccb238cbab2c7aec04b194aa2c53b1529c055d8a1093c2c44cc3a413ad49da6f99f78978ada5e83951b37adf91bcff0575b4339034533bacedf96a3e1be69d7b7382b4052240207a27cacff623e02685a4071d0ec91381ecf873ec01def3840eb98ddfbb73de3656bc5e4175ca5c2d3a0800936eaf5663fdcac8cc24eada6207ff2b729dc22d58f20f647650927b018f3d63aeb0ceebbb9f422d0c3f1b35e9a2de7db2995f3450a26cee17702b491aa005aa6816100830774e80048ad5063a4aaff333fb98c01903cc70ab26f74ea2b6a03c04804e9c634765213cb7ae0fdeff7d3f3079c4bacc71b3b015cdd56a09d0f5a4190be346e68a3f8ace02532d7425dc40f7a90a3129852d9ec61649599e446d6ddd8f6a6f30f2e671b631be401b9c8568e62378016c10846b97047efd88d2ea2e5a17f42c5c3d17aaba1d36a94012deb5f0f15de9c8eef57da5462f8334196d0d139c57511bf0b331d94f3953a88f6f603f4dc55f77e0aa57047b0948c7dd9ead6ca53915ed1657d5fecfee3400d3a22b0630defa83afdd966cb1ec99133cb636fe04cfd0cc6170607a17eae4c1c4bd2aa66fa1716ca2e449a0702b22093dc47c386bc2be4710b68c6e39f35f977567a2de2f18ed9a3c52e7d85ecf05bd71525006860eadc7eb8498384d6337e380f97ecbea3bdbb3290f1595be479e3cb0622802370712e7a987dc518481f93d7df3085ae9a53cca660628eb04f85c36d5d0b0ec49a20743c37b74765f76a2be56f65a6ff40c2a370d664a801c99297dfba7798222291bf694b17264c8e14ca3701be33758c959c5fabb41ab09c99b5ffffc8045d6c1b0c63c9ec6408c2353acf0cb95d8ceb8d23d20a247ebf592fab64494bcea5fe19813b4b44e7ab1c4d3a861c528160a5b215f3ec9c2b5908ced397697d5cb3a940a97619947d488a88a1496bf6a3c2054e04ae43c4056adf8116a75dbca297f83335e5526d05b8f63af30c2bba437ac4a0905036ef7f238861089af85fb017d757ceb64f52f0cb329211dbcacd4edc8a3579fc74ffaf8dab864b710e4982f9ac5e77b05460b44b0e431411b2e14c1516b67b544979f5c7cddac9943185b1e7ae1d5b408f61ab3b00b32a6e6d914ac8509bb0b1044269b7dae29596e830adabe807f719c2e92f22e1c6828fb3ad7f356ece58dba44d7404a22eb2d992424ff1aafbfd405858953fe373dc13c30f4394007fb45f3db64dc89d5b1980a6ea925432df9c513925889aa45ae973bad8ae062514da8a8104b42f9af4da692802f300a36b76e76d983efec39dd00183c98c719145ce99cef3e9df41bdc9371a3d306937170e0fe26058f9ff190a0d9d60b17fecf0b1408bc3b5b54d83b7cdf60284970c2271f6ce96db7e06c96f42bda8c3be078092cb90b61d0f95c3c5dc3f39ad9bd997fc91037ca02e3bf8a39743b9b07c10c229a5f4ef68b6fd2ed6f15976680840fb2786bc105d94fdc7511f0e5f68a37688c1206e0ce6972c5c8a3f936df9aab22d1968fb88c63fea581aa52dd5ee5068a43a870a1b44149cc59289b133d0f0a69c49f1586a65bc233605910918f1e94576a25ea2e708e5c4a6e1391ed2d3ddb575bceb16851c4532c84189e54dead217d54f72b6e226522c3c3aa3eb52fad098e47e26a2a8514244642cdc275c787f9640cb219b8749da98799ccfc98827f98c9ea9988532fcab147b8dd6f177c91bf65be918346120b228aa7e53596c05b0986e2bfc84736ed103870ad41f78622a4921165e93f9f0e44cda60d9c0195c6cffb0f7ac600dffa897370d31d3e2fbb3eade453f5509e67fb052a00053e551a8af46a87b13f9a75ef1f13b01ab9cf02ca8d14c5d763c33e6f505614a7fbf763ffb443f10735fd818293d38550de24a84e02c2a8e68aa1572c636ca28eeafce9bafdf548ee8bf665257b0d6456afd48e7a622f1936a4d323397ecca3717bbff9f07a0b631bf4d230998ee144ecb689a24786527c12d803cf627c85e2ab992f8d2da0eef125ce5050819afcbed516a87689ff0c0227316acf471f63ebf1f774d227a9380237a31c72c4e748c60de0c1c277940fde74fd3fa99072dfb33c083cbfbfb92ad233dbcfbc50d111e382b07732ac572f9ad0139a208c6ddf133d712780695c00884f6d1f8b3811cdbe3a24c8aeeb2ce4ac5a049ed4065616e276e034c32caf8ed289fae02e599ba5f3d6005643e986186333fc8aef5e2a9be31033033fc4f19c71bf452ba3aaf65481ff2427d7ec08d10d0c7916e6ddcef1a778eba7d231bdcbd2d0a08d9516b6acd0de19f2cdf5ed885487d507664812da12fbbd30689e3cda9aea3c7e22ffae80cd9967f5e7528c8c1243ea5e54f66232ea7bcc4134d5192ce2249f4c0274f416d8cffa8e360771496fa2da0f9a1cdab387d21225b2e04e9e1188dd9d3cf2a768747d7106193981cf2220b83168bd22faeaa33b2e9d29d352c146c6b182c6148b7e181aa56e2d14a056305630f280247b5098b26d80b0f43999b55527ce66df2ba198f4f920f4760e2a40c3fac902c1deca46bc945178c5c66cff79cf502bbf237609e371f428eb4102289c0602b90180db8aa66b5fdacc45e0ba6ad9ab17cec7edda9665a7d1e65785a14e43607150f3e08384faf7d2eb73970dec63906a4e920ed5a8a6d6802611b1336f08889a30b6a21f33247dc260654984225af6755bc2f4dccac00ae5b302b1fead6aed7345c328b980dbf59b967d9348316bd0e8d9e783b8a0649f37a7b2036cd5e66875d196a5c3bcd439240cba37fb994f35052a4f0a37b690a0151f57c4c66bf0d6abbf5ae9e02d6b068344f4eb1702e8cae7ae77e7913ced66237c5f65a95a9623ff4c0727073797d31f1c15c62480a6c28d7ce350774138e77fccf660db10146eddcabb2d990dd720ca2c7845cd5d36cfa05b87ecbb188f1bf588a43b6a2f135fc30b726f8e46a331ad53bd74edf84856d3dae5039c01e917a6fa6725f4449b6608f6e1f55f0226df03d26ea6e2c0c97b724f0f3e155c33d624b797cd9b9cb079e6713108ef0a6bd3861f08abac239d622430349cb265870e03dad3a9361f11a921013ed337dffa94fc8234b1f71a5115d3d7d7b25ce168b7fe7c938a1c5f28399fea81607f6072a64d037a92a3fa6afd1f12b274bfb68ada16bc51421d030f9747df3d4ac7681f3edcffaa4201448ee0752c7ce441e604cd831f6738c56557ef3d1a98f3a3e261c28f405e7404e55d0b181624c721857daf54688bb8a0241ac3ad4104c5629cf419361dde8f3e784d0716464f389eaf1700b2995ea8fdfec5e3f2ab363b17d9b5a8ff4849faf21ba1e9745e798a7a33a4d0464db9eddb2eeac88b5f2b8dc5f9829a0be0942c8b2c02f24534987afa58231b4501fcbf6aed89dc4d410955faa9bdac9beb2487475afcdc3919f73afc60fe94bec7212137b2264663a50bcf332dc551da59bb8e041fba3977f8ff1979ad87dc7b5407d6003a7ac266c7c85b4757e93ba36213a1667fff928831e95719164702cc6eb4be01bc72f53dd5b4c1a7e4344d3a8bf5e56467f984f31ad41a05877304e1efa198ef6c220236485536652ddba05400b2af7a214640b924ae41940871a96a4143cb59fb5dd2ecbebbe883f5cea1ac0e907751ff692fedec5b3c7c033d19289de2a4eb2f4ee8c661203f5609a5aa45a78465abd6c9ad926a82d768054fd9254ebdf345883fa1358b7570c21216c3fc5c13de6e81e178456ebf92defed1025702416f3caf8ae0ccf0523188c178ed47cd57ca1c91ad3a37d53db46e89c5a33540168eb65abacfd7ab7975819f929be86c4c0f1980090a1158b8a7c11c356c5c417fbfc29f75b32069ee4e1b907c8baee9fafa96c9b5ed117605ddb77b2e0de33b3fbf4e16e9d613b93ad85184f9cd21c50a60d19f1ea735726277373ef238180e253bf476112a9631fe0bfa001c6f97169198b33081f5da0e0ab227cdd5ca2cf79acf0ea26ae63b4a951db216aeceacd4e3f7b5b4e"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:21 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0x14) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0x14) (async) 15:45:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x2}}, 0x20) connect$bt_sco(r0, 0x0, 0x0) 15:45:21 executing program 1: socket(0x0, 0x6, 0x57) 15:45:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)=0xffffff39) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x10, @inherit={0x90, &(0x7f00000000c0)={0x1, 0x9, 0x7902, 0x6, {0x2, 0xfffffffffffff714, 0x4eb, 0xb29, 0x4bc}, [0x4, 0xfffffffffffffff8, 0x40, 0x8, 0x7, 0x800, 0x1c, 0x0, 0x0]}}, @name="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"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)=0xffffff39) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x10, @inherit={0x90, &(0x7f00000000c0)={0x1, 0x9, 0x7902, 0x6, {0x2, 0xfffffffffffff714, 0x4eb, 0xb29, 0x4bc}, [0x4, 0xfffffffffffffff8, 0x40, 0x8, 0x7, 0x800, 0x1c, 0x0, 0x0]}}, @name="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"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x2}}, 0x20) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x0) (rerun: 64) 15:45:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/148, &(0x7f00000000c0)=0x94) connect$bt_sco(r0, 0x0, 0x700) 15:45:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x2}}, 0x20) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:21 executing program 1: socket(0x0, 0x6, 0x57) 15:45:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/148, &(0x7f00000000c0)=0x94) (async) connect$bt_sco(r0, 0x0, 0x700) 15:45:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000080)=0xffffff39) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x10, @inherit={0x90, &(0x7f00000000c0)={0x1, 0x9, 0x7902, 0x6, {0x2, 0xfffffffffffff714, 0x4eb, 0xb29, 0x4bc}, [0x4, 0xfffffffffffffff8, 0x40, 0x8, 0x7, 0x800, 0x1c, 0x0, 0x0]}}, @name="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"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:21 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1}) 15:45:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "a00383fccb9aa8"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ee80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004f080)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xe6, "89d260c94f9c03"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000050080)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "9c69d85e452d86"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051080)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "1aaca2bcac9b3c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000052080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000052280)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000fd787f245fa4c165df13ffffffffffffff0010000000000000008000000000000007000000000000000600000000000000feffffff070000000000480077f1ffff010001000000000001000000000000003f00000000000000040000000000000008000000000000"]) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000052300)={{0x0, 0x1, 0x1000, 0x86, 0xb9, 0x6, 0x8, 0x5, 0xfc9, 0x8, 0x2, 0x6, 0x8, 0x7, 0x7fffffff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000523c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000525c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "f7b61d8b6cdb9c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000535c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000537c0)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "5a35fd16a43814"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000547c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000549c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "c3c8b6d63124a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000559c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r8, r9}, {}, {}, {0x0, r10}, {r12, r13}, {}, {}, {r14}, {r15, r16}, {}, {0x0, r18}, {}, {}, {}, {}, {0x0, r19}, {0x0, r20}, {0x0, r21}, {}, {}, {0x0, r22}], 0x5, "de0129ee91800f"}) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000040)) 15:45:21 executing program 1: socket(0x0, 0x6, 0x57) 15:45:21 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "a00383fccb9aa8"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ee80)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004f080)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xe6, "89d260c94f9c03"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000050080)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "9c69d85e452d86"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051080)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "1aaca2bcac9b3c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000052080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000052280)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000fd787f245fa4c165df13ffffffffffffff0010000000000000008000000000000007000000000000000600000000000000feffffff070000000000480077f1ffff010001000000000001000000000000003f00000000000000040000000000000008000000000000"]) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000052300)={{0x0, 0x1, 0x1000, 0x86, 0xb9, 0x6, 0x8, 0x5, 0xfc9, 0x8, 0x2, 0x6, 0x8, 0x7, 0x7fffffff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000523c0)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000525c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "f7b61d8b6cdb9c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000535c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000537c0)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "5a35fd16a43814"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000547c0)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000549c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "c3c8b6d63124a3"}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000559c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r8, r9}, {}, {}, {0x0, r10}, {r12, r13}, {}, {}, {r14}, {r15, r16}, {}, {0x0, r18}, {}, {}, {}, {}, {0x0, r19}, {0x0, r20}, {0x0, r21}, {}, {}, {0x0, r22}], 0x5, "de0129ee91800f"}) (async) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000040)) 15:45:22 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC, 0xd}) socket$vsock_dgram(0x28, 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) 15:45:22 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/148, &(0x7f00000000c0)=0x94) (async) connect$bt_sco(r0, 0x0, 0x700) 15:45:22 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6d, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "a00383fccb9aa8"}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004ee80)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000004f080)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0xe6, "89d260c94f9c03"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000050080)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x20, "9c69d85e452d86"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000051080)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "1aaca2bcac9b3c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000052080)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000052280)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000fd787f245fa4c165df13ffffffffffffff0010000000000000008000000000000007000000000000000600000000000000feffffff070000000000480077f1ffff010001000000000001000000000000003f00000000000000040000000000000008000000000000"]) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000052300)={{0x0, 0x1, 0x1000, 0x86, 0xb9, 0x6, 0x8, 0x5, 0xfc9, 0x8, 0x2, 0x6, 0x8, 0x7, 0x7fffffff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000523c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000525c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "f7b61d8b6cdb9c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000535c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000537c0)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "5a35fd16a43814"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000547c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000549c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "c3c8b6d63124a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000559c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r8, r9}, {}, {}, {0x0, r10}, {r12, r13}, {}, {}, {r14}, {r15, r16}, {}, {0x0, r18}, {}, {}, {}, {}, {0x0, r19}, {0x0, r20}, {0x0, r21}, {}, {}, {0x0, r22}], 0x5, "de0129ee91800f"}) (async, rerun: 32) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000040)) (rerun: 32) 15:45:22 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC, 0xd}) (async) socket$vsock_dgram(0x28, 0x2, 0x0) (async) socket$vsock_dgram(0x28, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) 15:45:22 executing program 1: socket(0x1d, 0x0, 0x57) 15:45:22 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:22 executing program 4: ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x42, 0x7, '\x00', &(0x7f0000000040)=0x9}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x56) 15:45:22 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1}) 15:45:22 executing program 1: socket(0x1d, 0x0, 0x0) 15:45:22 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:22 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:22 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC, 0xd}) socket$vsock_dgram(0x28, 0x2, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/21, &(0x7f00000000c0)=0x15) 15:45:22 executing program 4: ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x42, 0x7, '\x00', &(0x7f0000000040)=0x9}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x56) 15:45:22 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:22 executing program 4: ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, 0x42, 0x7, '\x00', &(0x7f0000000040)=0x9}) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x56) 15:45:22 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x280400, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x40) 15:45:22 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$bt_sco(r1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) connect$bt_sco(r1, 0x0, 0x0) (async) 15:45:22 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:22 executing program 1: socket(0x1d, 0x0, 0x0) [ 508.836083] can: request_module (can-proto-0) failed. [ 508.916126] can: request_module (can-proto-0) failed. 15:45:23 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:23 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x280400, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x40) 15:45:23 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 15:45:23 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:23 executing program 1: socket(0x1d, 0x0, 0x0) 15:45:23 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080)) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/14, &(0x7f00000000c0)=0xe) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)) connect$bt_sco(r0, 0x0, 0x700) 15:45:23 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:23 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x280400, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x40) 15:45:23 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x111045, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000100)=0x5) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x9) 15:45:23 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) [ 509.717795] can: request_module (can-proto-0) failed. 15:45:23 executing program 1: socket(0x1d, 0x0, 0x0) 15:45:23 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, 0x0, 0xfffffe31) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000040)={0xc, 0x21, &(0x7f0000000000)="e686bdf7d23e447f9de4641af92bb74d3f06078767f66f05125fbf51dfb974e2cb29ac9351", {0xfffffff8, 0xffff238c, 0x38415262, 0x0, 0x9, 0xe}}) 15:45:23 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 64) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:23 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x111045, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000100)=0x5) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x9) 15:45:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/14, &(0x7f00000000c0)=0xe) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)) (async) connect$bt_sco(r0, 0x0, 0x700) 15:45:24 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 15:45:24 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, 0x0, 0xfffffe31) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000040)={0xc, 0x21, &(0x7f0000000000)="e686bdf7d23e447f9de4641af92bb74d3f06078767f66f05125fbf51dfb974e2cb29ac9351", {0xfffffff8, 0xffff238c, 0x38415262, 0x0, 0x9, 0xe}}) 15:45:24 executing program 1: socket(0x1d, 0x0, 0x0) [ 509.909129] can: request_module (can-proto-0) failed. 15:45:24 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x4000000, 0x7, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x2}, @ssrr={0x89, 0x1f, 0x57, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @local]}, @end]}}}}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/14, &(0x7f00000000c0)=0xe) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)) (async) connect$bt_sco(r0, 0x0, 0x700) 15:45:24 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x3b) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x56d09c9, 0x50100) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x6) 15:45:24 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x111045, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000100)=0x5) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x111045, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000100)=0x5) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x408400, 0x0) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)=0x9) (async) 15:45:24 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r1, 0x0, 0xfffffe31) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000040)={0xc, 0x21, &(0x7f0000000000)="e686bdf7d23e447f9de4641af92bb74d3f06078767f66f05125fbf51dfb974e2cb29ac9351", {0xfffffff8, 0xffff238c, 0x38415262, 0x0, 0x9, 0xe}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r1, 0x0, 0xfffffe31) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000040)={0xc, 0x21, &(0x7f0000000000)="e686bdf7d23e447f9de4641af92bb74d3f06078767f66f05125fbf51dfb974e2cb29ac9351", {0xfffffff8, 0xffff238c, 0x38415262, 0x0, 0x9, 0xe}}) (async) 15:45:24 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) 15:45:24 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x3b) (async) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x56d09c9, 0x50100) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x6) 15:45:24 executing program 1: socket(0x1d, 0x0, 0x0) 15:45:24 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x4000000, 0x7, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x2}, @ssrr={0x89, 0x1f, 0x57, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @local]}, @end]}}}}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x4000000, 0x7, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x2}, @ssrr={0x89, 0x1f, 0x57, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @local]}, @end]}}}}}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) [ 510.055997] can: request_module (can-proto-0) failed. 15:45:24 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x40) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000000c0)={0x6, "974d743624689c785baa6e189602c175b9fe144da4dafe3df06969f03f597362", 0x0, 0x1}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x1, '\n'}, 0x2) 15:45:24 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) 15:45:24 executing program 1: socket(0x0, 0x0, 0x0) [ 510.161129] can: request_module (can-proto-0) failed. 15:45:24 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffa) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x3b) (async) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x56d09c9, 0x50100) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000080)=0x6) 15:45:24 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x40) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000000c0)={0x6, "974d743624689c785baa6e189602c175b9fe144da4dafe3df06969f03f597362", 0x0, 0x1}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:24 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x4000000, 0x7, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x2}, @ssrr={0x89, 0x1f, 0x57, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @local]}, @end]}}}}}) (rerun: 64) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x1, '\n'}, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x1, '\n'}, 0x2) (async) 15:45:24 executing program 1: socket(0x0, 0x0, 0x0) 15:45:24 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) 15:45:24 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 15:45:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)={0x1, '\n'}, 0x2) 15:45:24 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x40) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000000c0)={0x6, "974d743624689c785baa6e189602c175b9fe144da4dafe3df06969f03f597362", 0x0, 0x1}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000080)=0x40) (async) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000000c0)={0x6, "974d743624689c785baa6e189602c175b9fe144da4dafe3df06969f03f597362", 0x0, 0x1}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x442480, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cachefiles_prep_read\x00', r1}, 0x10) timerfd_create(0x4, 0x80000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x80, 0x4, 0xae, 0x0, 0x3, 0x3800a, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x1}, 0x36c5d6d5c08dc8f7, 0x3, 0xe4b, 0x6, 0x101, 0xf7a0, 0xff92, 0x0, 0xa0ef, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socket$inet6_udp(0xa, 0x2, 0x0) 15:45:24 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7, {0x1275, 0x3eb1, 0x0, 0x400}}) 15:45:24 executing program 1: socket(0x0, 0x0, 0x0) 15:45:24 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 15:45:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0xfffffffffffffec3) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) connect$bt_sco(r3, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 15:45:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x442480, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cachefiles_prep_read\x00', r1}, 0x10) (async) timerfd_create(0x4, 0x80000) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x80, 0x4, 0xae, 0x0, 0x3, 0x3800a, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x1}, 0x36c5d6d5c08dc8f7, 0x3, 0xe4b, 0x6, 0x101, 0xf7a0, 0xff92, 0x0, 0xa0ef, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) socket$inet6_udp(0xa, 0x2, 0x0) 15:45:24 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0x60) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)) 15:45:24 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) 15:45:24 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x4000000, 0x7, {{0xf, 0x4, 0x2, 0x1, 0x3c, 0x65, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x2}, @ssrr={0x89, 0x1f, 0x57, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @remote, @local]}, @end]}}}}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:24 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0xfffffffffffffec3) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) connect$bt_sco(r3, &(0x7f0000000000), 0x8) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 15:45:24 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0x60) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000000)) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)) 15:45:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x280400, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040044}, 0x40) 15:45:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x442480, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='cachefiles_prep_read\x00', r1}, 0x10) (async) timerfd_create(0x4, 0x80000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x80, 0x4, 0xae, 0x0, 0x3, 0x3800a, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x1}, 0x36c5d6d5c08dc8f7, 0x3, 0xe4b, 0x6, 0x101, 0xf7a0, 0xff92, 0x0, 0xa0ef, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) socket$inet6_udp(0xa, 0x2, 0x0) 15:45:25 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7, {0x1275, 0x3eb1, 0x0, 0x400}}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7, {0x1275, 0x3eb1, 0x0, 0x400}}) (async) 15:45:25 executing program 4: getuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:25 executing program 1: socket(0x1d, 0x0, 0x0) 15:45:25 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0x60) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)) 15:45:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0xfffffffffffffec3) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) connect$bt_sco(r3, &(0x7f0000000000), 0x8) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 15:45:25 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "e0d9f9ab4dc8fec38c12937d968d93085158f06ba7d3efad17b52990e4bc9d924dc89fa73ea625c8196cd9fb738fa246ea49c8d71c9dde8dea1016da6769a151", 0x39}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x75) socket$vsock_dgram(0x28, 0x2, 0x0) connect$bt_sco(r1, 0x0, 0xffffffffffffff03) 15:45:25 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a101, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0xd) 15:45:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:25 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "e0d9f9ab4dc8fec38c12937d968d93085158f06ba7d3efad17b52990e4bc9d924dc89fa73ea625c8196cd9fb738fa246ea49c8d71c9dde8dea1016da6769a151", 0x39}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x75) socket$vsock_dgram(0x28, 0x2, 0x0) connect$bt_sco(r1, 0x0, 0xffffffffffffff03) 15:45:25 executing program 4: getuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) getuid() (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:25 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7, {0x1275, 0x3eb1, 0x0, 0x400}}) [ 511.389092] can: request_module (can-proto-0) failed. 15:45:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:25 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x7, {0x1275, 0x3eb1, 0x0, 0x400}}) 15:45:25 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a101, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0xd) 15:45:25 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "e0d9f9ab4dc8fec38c12937d968d93085158f06ba7d3efad17b52990e4bc9d924dc89fa73ea625c8196cd9fb738fa246ea49c8d71c9dde8dea1016da6769a151", 0x39}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x75) socket$vsock_dgram(0x28, 0x2, 0x0) (async) connect$bt_sco(r1, 0x0, 0xffffffffffffff03) 15:45:25 executing program 4: getuid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) getuid() (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, {&(0x7f0000000040)=""/254, 0xfe}, &(0x7f0000000140), 0x11}, 0xa0) 15:45:25 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x6}}, 0x20) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:25 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a101, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0xd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x60a101, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f00000000c0)=0xd) (async) 15:45:25 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c24401d885953c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, {&(0x7f0000000040)=""/254, 0xfe}, &(0x7f0000000140), 0x11}, 0xa0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, {&(0x7f0000000040)=""/254, 0xfe}, &(0x7f0000000140), 0x11}, 0xa0) (async) 15:45:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c24401d885953c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000000c0)={"1a75a2faad59ff8f77ba610e773da89be8c9e2fa1fddc27cf4542b082c1e", 0x5, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x4, [0x80000001, 0x2, 0x20, 0x8020000, 0x2, 0x2, 0x5, 0xef7bdcb0, 0xfffff001, 0x4, 0x5, 0x80000000, 0x9, 0xffffff65, 0xfffffffa, 0x10000, 0x1ff, 0x7fff, 0x9]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) 15:45:26 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x6}}, 0x20) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x6}}, 0x20) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c24401d885953c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) (async) setgid(0xee00) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) (async) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) (async) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [], 0x7, "c24401d885953c"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 15:45:26 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xa, 0xf}) 15:45:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, {&(0x7f0000000040)=""/254, 0xfe}, &(0x7f0000000140), 0x11}, 0xa0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, {&(0x7f0000000040)=""/254, 0xfe}, &(0x7f0000000140), 0x11}, 0xa0) (async) 15:45:26 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000000c0)={"1a75a2faad59ff8f77ba610e773da89be8c9e2fa1fddc27cf4542b082c1e", 0x5, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x4, [0x80000001, 0x2, 0x20, 0x8020000, 0x2, 0x2, 0x5, 0xef7bdcb0, 0xfffff001, 0x4, 0x5, 0x80000000, 0x9, 0xffffff65, 0xfffffffa, 0x10000, 0x1ff, 0x7fff, 0x9]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000000c0)={"1a75a2faad59ff8f77ba610e773da89be8c9e2fa1fddc27cf4542b082c1e", 0x5, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x4, [0x80000001, 0x2, 0x20, 0x8020000, 0x2, 0x2, 0x5, 0xef7bdcb0, 0xfffff001, 0x4, 0x5, 0x80000000, 0x9, 0xffffff65, 0xfffffffa, 0x10000, 0x1ff, 0x7fff, 0x9]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) (async) 15:45:26 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xa, 0xf}) 15:45:26 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x6}}, 0x20) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x6}}, 0x20) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) (async) setgid(0xee00) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) (async, rerun: 64) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) (async, rerun: 64) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c24401d885953c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 15:45:26 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xa, 0xf}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xa, 0xf}) (async) 15:45:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c24401d885953c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:27 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async, rerun: 32) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f00000000c0)={"1a75a2faad59ff8f77ba610e773da89be8c9e2fa1fddc27cf4542b082c1e", 0x5, 0x0, 0x0, 0x1, 0x0, 0x4, 0x8, 0x4, [0x80000001, 0x2, 0x20, 0x8020000, 0x2, 0x2, 0x5, 0xef7bdcb0, 0xfffff001, 0x4, 0x5, 0x80000000, 0x9, 0xffffff65, 0xfffffffa, 0x10000, 0x1ff, 0x7fff, 0x9]}) (async, rerun: 32) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000080)) 15:45:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) 15:45:27 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000340)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0xffffffffffffffff, 0x8000, {0x23, 0x5fc, 0x4, 0x4, 0x81}, [0x21a5, 0x1]}}, @devid}) 15:45:27 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x5, 0x8, {{0x29, 0x4, 0x0, 0x2a, 0xa4, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x4b, 0x1, 0x3, [{@empty, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x2}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c59}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x7, [{@loopback, 0x10001}, {@local, 0x9}, {@private=0xa010100, 0x8}, {@private=0xa010100, 0x40}, {@multicast1, 0x6}, {@broadcast, 0x8d}, {@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0xa15}]}, @end, @generic={0x94, 0x3, '8'}]}}}}}) 15:45:27 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x2, 0x30, 0x18, @MIDI_NOTEON=@special, 0x5, 0x6}) 15:45:27 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x2, 0x30, 0x18, @MIDI_NOTEON=@special, 0x5, 0x6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x2, 0x30, 0x18, @MIDI_NOTEON=@special, 0x5, 0x6}) (async) 15:45:27 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x5, 0x8, {{0x29, 0x4, 0x0, 0x2a, 0xa4, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x4b, 0x1, 0x3, [{@empty, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x2}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c59}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x7, [{@loopback, 0x10001}, {@local, 0x9}, {@private=0xa010100, 0x8}, {@private=0xa010100, 0x40}, {@multicast1, 0x6}, {@broadcast, 0x8d}, {@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0xa15}]}, @end, @generic={0x94, 0x3, '8'}]}}}}}) 15:45:27 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20a540, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000000c0)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x4, {0x2, 0x1, 0xbec0, 0x4, 0xfffffffffffffffe}, [0x81]}}, @subvolid=0x1000}) 15:45:27 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000340)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0xffffffffffffffff, 0x8000, {0x23, 0x5fc, 0x4, 0x4, 0x81}, [0x21a5, 0x1]}}, @devid}) 15:45:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) (async) 15:45:27 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x2, 0x30, 0x18, @MIDI_NOTEON=@special, 0x5, 0x6}) 15:45:28 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "c24401d885953c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000080)={{r3, 0x9, 0x3, 0x3c, 0x0, 0x400, 0x39, 0xf3, 0x8001, 0xf8, 0x7, 0xaa1, 0x9, 0x6, 0x7}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 15:45:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x5, 0x8, {{0x29, 0x4, 0x0, 0x2a, 0xa4, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x4b, 0x1, 0x3, [{@empty, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x2}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c59}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x7, [{@loopback, 0x10001}, {@local, 0x9}, {@private=0xa010100, 0x8}, {@private=0xa010100, 0x40}, {@multicast1, 0x6}, {@broadcast, 0x8d}, {@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0xa15}]}, @end, @generic={0x94, 0x3, '8'}]}}}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x5, 0x8, {{0x29, 0x4, 0x0, 0x2a, 0xa4, 0x66, 0x0, 0x1, 0x2, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x4b, 0x1, 0x3, [{@empty, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x2}, {@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c59}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x3}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x7, [{@loopback, 0x10001}, {@local, 0x9}, {@private=0xa010100, 0x8}, {@private=0xa010100, 0x40}, {@multicast1, 0x6}, {@broadcast, 0x8d}, {@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0xa15}]}, @end, @generic={0x94, 0x3, '8'}]}}}}}) (async) 15:45:28 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff17) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7fffffff) socket$nl_crypto(0x10, 0x3, 0x15) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 15:45:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20a540, 0x0) (async) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000000c0)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x4, {0x2, 0x1, 0xbec0, 0x4, 0xfffffffffffffffe}, [0x81]}}, @subvolid=0x1000}) 15:45:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@echo=0x8) 15:45:28 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000340)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000000)={0x1, 0x2, 0xffffffffffffffff, 0x8000, {0x23, 0x5fc, 0x4, 0x4, 0x81}, [0x21a5, 0x1]}}, @devid}) 15:45:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20a540, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000000c0)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x4, {0x2, 0x1, 0xbec0, 0x4, 0xfffffffffffffffe}, [0x81]}}, @subvolid=0x1000}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20a540, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000000c0)={{r2}, 0x0, 0x12, @inherit={0x50, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x4, {0x2, 0x1, 0xbec0, 0x4, 0xfffffffffffffffe}, [0x81]}}, @subvolid=0x1000}) (async) 15:45:28 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff17) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7fffffff) socket$nl_crypto(0x10, 0x3, 0x15) (async) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 15:45:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@echo=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@echo=0x8) (async) 15:45:28 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x7f) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x6, 0x2, "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", 0x7, 0x1f, 0x4, 0x6, 0x0, 0xff, 0x3, 0x1}}}, 0x120) 15:45:28 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x3, 0x0, [0x30, 0x400, 0xffffffffffffdbb9, 0x6, 0x2], [0x4, 0x9, 0x4, 0x0, 0x2, 0x6, 0x80000000, 0x6, 0xff, 0x80000000, 0x8000000000000000, 0x4, 0x4, 0x40, 0x8001, 0x40, 0x7, 0x80000000, 0x80, 0x0, 0x8000000000000000, 0x400, 0xfffffffffffffff9, 0x8001, 0x2, 0x7, 0xfff, 0x7fffffff, 0x1, 0x41, 0x1, 0x400, 0x9, 0x8, 0x6, 0xa69, 0x100, 0x2, 0x3, 0x3ff, 0x800, 0xd94, 0x5, 0x509, 0xc00000000000000, 0x3, 0x5, 0x401, 0x0, 0x8e, 0xd96e, 0x0, 0xc08c, 0x401, 0x1, 0x8001, 0x7, 0xffffffffffffffff, 0x80, 0x1, 0x570, 0x821e, 0x4, 0x8000, 0x6, 0x2, 0xffffffff, 0x7fc, 0x1, 0x1, 0x0, 0x6, 0x1, 0x80000001, 0x5, 0x7fff, 0x2, 0x3, 0x6, 0x1, 0x200, 0xfffffffffffffffe, 0x5, 0x7, 0x8000000000000000, 0x1f, 0xeb, 0x7, 0x3, 0x10001, 0x7, 0x4, 0x8, 0x9d1, 0x75, 0x4b, 0x9, 0x81, 0x9, 0x8, 0x7fffffffffffffff, 0x5, 0x66, 0x100000000, 0x4, 0x1, 0x7, 0x3f, 0xfff, 0x1, 0x8001, 0x2, 0xffffffffffff7fff, 0x1000, 0x7, 0x10001, 0x80000001, 0x4, 0xf3f, 0x10001, 0x800]}) 15:45:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0x3}) connect$bt_sco(r0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) 15:45:29 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) socket$pptp(0x18, 0x1, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000a80)={0x3, [], 0x7, "c24401d885953c"}) 15:45:29 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@echo=0x8) 15:45:29 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x7f) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x6, 0x2, "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", 0x7, 0x1f, 0x4, 0x6, 0x0, 0xff, 0x3, 0x1}}}, 0x120) 15:45:29 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xffffffffffffff17) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7fffffff) socket$nl_crypto(0x10, 0x3, 0x15) (async) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 15:45:29 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0}}) (rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x3, 0x0, [0x30, 0x400, 0xffffffffffffdbb9, 0x6, 0x2], [0x4, 0x9, 0x4, 0x0, 0x2, 0x6, 0x80000000, 0x6, 0xff, 0x80000000, 0x8000000000000000, 0x4, 0x4, 0x40, 0x8001, 0x40, 0x7, 0x80000000, 0x80, 0x0, 0x8000000000000000, 0x400, 0xfffffffffffffff9, 0x8001, 0x2, 0x7, 0xfff, 0x7fffffff, 0x1, 0x41, 0x1, 0x400, 0x9, 0x8, 0x6, 0xa69, 0x100, 0x2, 0x3, 0x3ff, 0x800, 0xd94, 0x5, 0x509, 0xc00000000000000, 0x3, 0x5, 0x401, 0x0, 0x8e, 0xd96e, 0x0, 0xc08c, 0x401, 0x1, 0x8001, 0x7, 0xffffffffffffffff, 0x80, 0x1, 0x570, 0x821e, 0x4, 0x8000, 0x6, 0x2, 0xffffffff, 0x7fc, 0x1, 0x1, 0x0, 0x6, 0x1, 0x80000001, 0x5, 0x7fff, 0x2, 0x3, 0x6, 0x1, 0x200, 0xfffffffffffffffe, 0x5, 0x7, 0x8000000000000000, 0x1f, 0xeb, 0x7, 0x3, 0x10001, 0x7, 0x4, 0x8, 0x9d1, 0x75, 0x4b, 0x9, 0x81, 0x9, 0x8, 0x7fffffffffffffff, 0x5, 0x66, 0x100000000, 0x4, 0x1, 0x7, 0x3f, 0xfff, 0x1, 0x8001, 0x2, 0xffffffffffff7fff, 0x1000, 0x7, 0x10001, 0x80000001, 0x4, 0xf3f, 0x10001, 0x800]}) 15:45:29 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0x3}) connect$bt_sco(r0, 0x0, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) 15:45:29 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 15:45:29 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000640)={r2, 0x3, 0x0, [0x30, 0x400, 0xffffffffffffdbb9, 0x6, 0x2], [0x4, 0x9, 0x4, 0x0, 0x2, 0x6, 0x80000000, 0x6, 0xff, 0x80000000, 0x8000000000000000, 0x4, 0x4, 0x40, 0x8001, 0x40, 0x7, 0x80000000, 0x80, 0x0, 0x8000000000000000, 0x400, 0xfffffffffffffff9, 0x8001, 0x2, 0x7, 0xfff, 0x7fffffff, 0x1, 0x41, 0x1, 0x400, 0x9, 0x8, 0x6, 0xa69, 0x100, 0x2, 0x3, 0x3ff, 0x800, 0xd94, 0x5, 0x509, 0xc00000000000000, 0x3, 0x5, 0x401, 0x0, 0x8e, 0xd96e, 0x0, 0xc08c, 0x401, 0x1, 0x8001, 0x7, 0xffffffffffffffff, 0x80, 0x1, 0x570, 0x821e, 0x4, 0x8000, 0x6, 0x2, 0xffffffff, 0x7fc, 0x1, 0x1, 0x0, 0x6, 0x1, 0x80000001, 0x5, 0x7fff, 0x2, 0x3, 0x6, 0x1, 0x200, 0xfffffffffffffffe, 0x5, 0x7, 0x8000000000000000, 0x1f, 0xeb, 0x7, 0x3, 0x10001, 0x7, 0x4, 0x8, 0x9d1, 0x75, 0x4b, 0x9, 0x81, 0x9, 0x8, 0x7fffffffffffffff, 0x5, 0x66, 0x100000000, 0x4, 0x1, 0x7, 0x3f, 0xfff, 0x1, 0x8001, 0x2, 0xffffffffffff7fff, 0x1000, 0x7, 0x10001, 0x80000001, 0x4, 0xf3f, 0x10001, 0x800]}) 15:45:29 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x7f) (async) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x6, 0x2, "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", 0x7, 0x1f, 0x4, 0x6, 0x0, 0xff, 0x3, 0x1}}}, 0x120) 15:45:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket(0x8, 0x4, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/119, &(0x7f0000000080)=0x77) 15:45:29 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0x3}) connect$bt_sco(r0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0x3}) (async) connect$bt_sco(r0, 0x0, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) 15:45:29 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) 15:45:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) socket$pptp(0x18, 0x1, 0x2) 15:45:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 15:45:30 executing program 5: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/175, &(0x7f0000000140)=0xaf) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:45:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 15:45:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r2, r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x1000, 0x84, &(0x7f0000000900)="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", &(0x7f0000000240)=""/132, 0x9, 0x0, 0xfd, 0x92, &(0x7f0000000300)="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", &(0x7f0000000400)="3ef22cbf1328e31c0567751b5f56567601d4d96741a8a5584e2c6d10b57c3930305de04aa20b493fb4409947afac7b9debc1202dfcc058b81dfe055b75bc532e28a8d9afab4f00b20845f71930e94caf7e35b05887eebc7ff113c69591b68055283dff3eb5f403d951d736dd1763676b906fb374b0461865464803664e5e10a04e112f6ef5b398741c171a21e48541cbc520", 0x1, 0x9}, 0x48) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/199, &(0x7f0000000140)=0xc7) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = socket(0x8, 0x4, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/119, &(0x7f0000000080)=0x77) 15:45:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket(0x8, 0x4, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/119, &(0x7f0000000080)=0x77) 15:45:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 15:45:30 executing program 5: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (rerun: 32) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/175, &(0x7f0000000140)=0xaf) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:45:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "ae572042066489"}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002480)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000002500)={0xb, 0x10, 0xfa00, {&(0x7f00000023c0), r4, 0x700000}}, 0x18) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000013c0)={{r2}, r3, 0x18, @inherit={0x70, &(0x7f0000001340)={0x0, 0x5, 0x5, 0x6de2, {0x6, 0x80000000, 0x8000000000000, 0x1, 0x7ff}, [0xb3000000000000, 0x0, 0x9, 0x4, 0x9]}}, @devid}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f0000002540)=0xa1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r1, 0xf7, 0x0, 0x9c, 0xffffffffffffa6f6, 0x6, 0x8000, 0x4, 0x2, 0x6, 0x5, 0x1, 0x1, 0x1, 0x3d4ce5ae}, 0x8, [0x0]}) 15:45:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r2, r3}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x1000, 0x84, &(0x7f0000000900)="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", &(0x7f0000000240)=""/132, 0x9, 0x0, 0xfd, 0x92, &(0x7f0000000300)="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", &(0x7f0000000400)="3ef22cbf1328e31c0567751b5f56567601d4d96741a8a5584e2c6d10b57c3930305de04aa20b493fb4409947afac7b9debc1202dfcc058b81dfe055b75bc532e28a8d9afab4f00b20845f71930e94caf7e35b05887eebc7ff113c69591b68055283dff3eb5f403d951d736dd1763676b906fb374b0461865464803664e5e10a04e112f6ef5b398741c171a21e48541cbc520", 0x1, 0x9}, 0x48) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/199, &(0x7f0000000140)=0xc7) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/203, &(0x7f0000000100)=0xcb) 15:45:30 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x1}) 15:45:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "ae572042066489"}) (async, rerun: 32) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002480)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000002500)={0xb, 0x10, 0xfa00, {&(0x7f00000023c0), r4, 0x700000}}, 0x18) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000013c0)={{r2}, r3, 0x18, @inherit={0x70, &(0x7f0000001340)={0x0, 0x5, 0x5, 0x6de2, {0x6, 0x80000000, 0x8000000000000, 0x1, 0x7ff}, [0xb3000000000000, 0x0, 0x9, 0x4, 0x9]}}, @devid}) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f0000002540)=0xa1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r1, 0xf7, 0x0, 0x9c, 0xffffffffffffa6f6, 0x6, 0x8000, 0x4, 0x2, 0x6, 0x5, 0x1, 0x1, 0x1, 0x3d4ce5ae}, 0x8, [0x0]}) 15:45:30 executing program 5: connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000080)=""/175, &(0x7f0000000140)=0xaf) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 15:45:30 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) 15:45:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/203, &(0x7f0000000100)=0xcb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/203, &(0x7f0000000100)=0xcb) (async) 15:45:30 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r2, r3}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x1000, 0x84, &(0x7f0000000900)="df3c2e1c3b65a17791bc0432e1f5b10016ff036a76004cd9eead3f3bda0079f4b485e9e9deb91476c4c9d92940e87d2e5a4d64630eb80f3a7d49edb27ae6c56ee91043e4c2e82e852ec36b76c3d231bda2dbdd70502d6b10275f543e603d9ecfce527c66865a444f79ca4ba65850275636d8a9377ba59e16e5d41a738a7e37406cdc30ca034b8015173737db7bc2b8d03e33e185394f2fd1af31c18a0e737e91893d62022c48aaea1b59288f10bc0a04295d3c37b4bba7acaa6d466f17c16b2a6601460838900492dc820b2b257b41b9d945a23eb23465ad5649cf2bf7e77f7d067ef4be3af4b5661c7ce16f213bc522cbc18e00f5613abddf8f04ad31220ade2065d88e5e4e6f77d845c740de858a958a9e42e3b86d6d8baba8818e3a1735c7a48ccfb8dc3a8c4163903ca295fa9b9237769458b42a1cc0bf57fc2760916902985ed9db6461f584b980eead66d71b4e952d204c0cf4406a158b406529afac879e464f9c93e2d55b674bad07ba9ea32f403f8e03a6e6d6e5bad39f6051f7194ef5202417927ffcae69335d5061038af5ac6dba2876412d58abe5edc1ee7079af67242a9696cbeb7c47cf68694db452c3f498fad9192aca6cba9b1e84bf6228fe56681033e04f54ee8af6a00186b0eed8f88a76e7bc550e2441a09d36d48fd936ade632f6a547c187a68d07df047ad22f51d0334d50f72079444e87c1939a762934c4cc5581fbab982ef257e5c6865341b58e9f6595424a493fc2df390e4675aaa05d6d76b04c61654e95073d2385a2006de4742d6cf09049252de13d3b5e0621e1cee4073db1ee24e218f2cb3cafec4e87f3f380f507db7d517020b57cdc39fb8bc34a5bb2ae6cd12619be215bdbb0c387a1b1c69ddfbcc308a7878707349357b42a286cbcba5d9aaf93fddf49ce26749b598432cfa1ba7af857e6d73627717406f0527d11a4c75c1c175cb0941f2e1b8a44947ac401db13db9c0dc8a6ec83201671ff80335e794336054276d4e6b85fd6ffa08bd87e6539c3a56a2a80bef05bb4295479323d6b255c797b18f88c6018698e6c6b46d41870b868181553830b5c6db3d36095fbe23bd26ddd987d9d9fa08671fb811029a8550574616fa731b1b943fc97d8f59ad527cb4aee04b550004ef0439b1fab16f9b7ae1dc0ff24a202a97f62a3af222156adc6079d02790081d2e370ceda69776eceb3e6c524ed468e0db35f8251ce647eb4c318b0ff3a0772c399cea703c92039177aa8a7f83990a2544f565a8d002920205444491c81a3c6cacd4982dc96d87b1df2abbb5e71b2d1bed27535e893c42674fae7044caf527506a2263d5e72520fdce75c7c855f41a7cc62dae1275d9a5c435e89a4c867491bc460a474a56709443317d666936eee34ad80fa16320bd52dcf6d21f5cc2e0bb39dc86f51cbba6096170b493b6989713bc73c932502363150603f21d166c9a54600f5688ced8b5f689cd7f1f19dfaa69cf50997a5dbd06418334ca576e71f960aa943b9e3542d03be17c76881c2948e86ae34223a41676c9da045b5fdc479f7d15479b3aff4a6429b9bfb4dc8309cf02ab696afc550d6140f9cc00bcc8baa4088439b53c5189419adbd76a352bf46afb213200645574f2a8587ac82e6cb7ddc911038c383c67e9173464d3582847a88c5a898b251bf8e85fd5e35e477f70d5d0059b2c5f52aef6f4278e41b9c8129e84d01caed82f00cde2436f6a67ed7600f042e6e13a07e07195e65eae510acfcfaa1d0ee88103060c4a4f3c715b6af619462d007042de6d4c650262654f92cf3a07fba8e1aec637082bdb32e67fad088b78dc60bd10dea0411442cfd4de978524dc65c71f4e9c04b05a39ea21968c683b20572f5a9227e5a369edbd8b7d0f6a510f1bed29832169299291b904281794ff4a7ef3ca18e80157fdc56085dca504885533e084d1444f0897e6d08d9e546ce3c90b0289230d5797e6a1411217a73bd5cfacc3f332bbab26940790865a8070f47fea257bb26f06d49e233a46d820a6d80851072dc72a6e8d53e394dea37fc85fc5aa818678dba36fd53b045fb08643e9c6ab4b83517c48e6d230591951bd7889cabe7d072f04b1045f59fdf9d9eb86803645485c8a1a0a82839b2aa33029250c3c56f197165a709dbe2969f82732762335334453cecc0abfb3a4b0d2ba1a87e69a722e0cc795eb57f5ea50fabed59112f84efa0edf96a846154a3b5a21551c16d122600e59a50c98f39bb7509acd6b4b860856d0cdb2e5487050cfdcd83fe0159aeb92e2364ed7628b03464ccab0bea8bbbe48362a3c5b166e01c77dac394f68e8648a7943a9fa45826565ffa76e0ec6a329a47cd6d013a92b1b6ba88099a09c7053e85238859be718007e289273c9696f533c591fd8d5c0be927e9a132fc023fd4ffc321d019e883713987161bd4ecafb2f158ddb763ce469a13bc1187b3a5c6df06087e4eabdd3c2b9aa9e35462873aafccee15c93f7695cda121c5681c94f9139c17098f20311b6f86e72db87d1b156b5e226b31f42d063a177b167a8184628c06fa3a67dc2fed731e66aaaccb91cc6a710f63bc853dd9b6544b8e834e69155ef202406c0084e2c63e89c64e124b633e01af1116fa156e8300d12bb90e6b178868899af3b0f4a4ad2c61f6fa769f81133cd41a86d46f33dcdf9c5e9c34c27751c7b5904ca7d7f692de69615216e2bcebf73d905586a448f7c970c7c1fa93f1dd27436a4bc837d96e8a6e8b7faeaafa86d7d7b8391af2e88c114a640377303d8532d45411120d3961f284b4f27a81557edc4cd766c0a367f17a136c5ce9107d60da8389b331e2385bab353684440fa0921f39343900141db534ff51eb64a986dd06881405378858c9720ea3d0d69d190985798aaf78f57055bc711f293e7976be84c5af2568f180b77f12837bb81dee16453b12fff54a53f304b3828134673db33be3ffaecccb327895f2ea46eb51cd69e3bba4e11428bd9570728b599fd510d2587215b820d6f704228245521b41bf4ccda5765b9eab2fefbb57029e78df46a4f4084e793c54ced9eb8a89b8ad644767f2b4aefbd1082c9a47807eb21484f4e3ecddd7e01e16dd036cd21d9d76b2f3774b341f999f4f3de66b57f18a810858b4b4fb3ba6b043a31cf1ddf66fed02ec2109957819c278ee55d9cc4848e808089e257187770b19c9be5074894c48544217a7a8f18aeec394ef15343ed08d0c14de1843c18df771952597be278d82fa9fb9a39785a162427280b21440a0d2167118cda74aa498fc66aadcd28df415ee2c6817617c13f4ae8b9473909a37217efdf41fc389bddd3276ed9ce808e4096f1709a151ad3f256298d39a5a5b07dae4646a81ed4ac4133097447c9d2b0974b4416ef5c3a309e527100f7f38fcc6d67dcdc546080c538b8c1e4e566503cd30454ab7b357c5d3b7150a23247a0dd721c3c2396a3320af7fb4cf6a230dcf90fe77c2f593fdf4d1f68d99ded4978b2b098e3a5c01e627cf8d43fd694761516829031b9589cf820f16e41f82b950792a326554b3d79ae11ff0b90accbe3a1f5f2aa5f4ffdbb5c60e1c5310922e173684df3a326a5b12f3b9c1c7311e5da0b3ed7b8892ecb5d17cdc80e0fea66ffbc19ebdbf80d18ef7a997af9ba464056606bb2228944d65a50d0a48ffede0bd492f7704934f07eca015adf62d0937caaa14de46c1111d2e53fc8ad2fae7aaecedd46c8e8f4c1e91b656e5c77e2b0be23e2b32a4f4eeeae30c9cc3b9838654b69cc76a82ea73c534a4e80bfa66df8f2203b4b5e4c59412015907019dde7f2302d8e738356df8859bb306919ee98e9f160ec1f928ef2da6f50e1535d83d4940ddaf666e660f4a1a68a8b614a7ed91bc6119eaa66dc8da08017741c67bbd33b9c04900ca476fa7109ed749be63e5bd0b0c4208278e79cc47688695b3281c53524c3ded33e31f88e0dcb296e524f9567c654bb5ad36d3b17d9f7aab9309fead9c764f2a35f5d43c47e8f0772c1f23fdf083656bafa0a9e1896606106c109df07d314dafefc42ac7b9beed1c182412bd3e55479577cb47aaf7afdd2a03718a1c1f6b087ba2eb5b9f2a60f0e0f4fc67207f69137b56662d48efb61658b9273afedd1f23defe48150dbb912db134bf202d62274390dc59af528a27b0b8dcba85fb531fbc3ad534e1bab4d68b16e43413cc1b0c0abdf0a84c769ad749f22bf337bd28fa72159bdd8d59af9340d228667081c6de09b8db22a77d3fdd0bb19c3cb8fd11f55de0c0243b8d21110dcacc52990b891fc417300f92275a6863aa00d46e08e1851a192aeb51b3367a89361567f78777601ccdebaaa5141cded1848c72bed82b14f077be3b7130b263c64a39d60768f4fec8b754381169c6166a008e113ea5b640fd909d14f55db923482601251b6aaeb850add994b829a26f85fb386b34a5ec558bcb75b1fdb20509a397eccba2a97ac01ff5f62a7d4855fbdccc61d4fb0e8f7b2bb13816e6ffd7e75fae0754cc9e034426de0026dc6372609f38f934ac00ebab56ba946fa8b73e2a3c5eae09c3bcc5fd349b819745ffe807d215e9df1bbeb809e0764b7ff46a08502d2eb9aa1f429f6625a4b990cc783dbb2f038cacecc53762a5743bc6966cb2e4c617ac031b471f15a913c486b94d8f7a180f68abd1bd0d6206fc4c9e0818c20e6ff549e9620d1ff04613421a18f8a84490bf0e53b1376526c78a34faf4bf7cc495e52c7a047b3945fe97e486157a312aa48dc5f60ac0283efe92ffc3e021089d5f296473ce49b2f849251f16e13cc63fb9fc4f1e786db7eca58390f91d990655056a2032c2b10a380b390249637a5180b436a1eb783f1fcaeb54eacb67c430467309eb84d1eb91f5e6da52e2f87066def8cbbfa54449cf51f315a22aed96225f7db85c0cf2eb563241ce85dc1a9f661c5540d03926e228ce79d786dd366f5fd9e7c61151009a28cc8437dd79c8e4201fa8e656f3a8fd62c34424eccf9d87096b6d64c2acda4eed7af282cdeb182093629ca2d232fe6e67db4f7f47a6406d231a91fd437b77edca171ff7a59814a2ef0c009be881a68b089106e2f1d073c78be817b8257fd477156fdfa2addb78339d88763121e47715709725bfbc1f14368b3ef571df5f0293dfed552ea291ea3a8a6b485ffed37cb0cfcd12741070c917b64f75cf6346a5f0ced3ba912d350d3978d7da91dcdf0aedc6fbafc974747916de18caee0da8536d3de7823f8dfc342ddb9a47011b2a2a872b8f8584ef4740b193af05f9f0da0ff30220fecda95b549005a75bb52390b1de41e2feb780838e20a90ab4420b73e2a1a247c3700204258c6a3ca5499b0c5f8f16537ebd4ec478a0cb7fceaf3b2292ab4188a2454ac9320fe8a9a367986fadc5fa433587f176a2574bd0c14bac95efc46c9c76d1168ca52974f62f7add5f3a30f7aa8e6b7799021df21d3bba4508c446f12e35c072bd49b183bbeba46511440cd9bae31a6843472a1863a023343d2c972a1aaae946766da3b0a44e5d1db01c0ff5e6e9a2ccaaa9ad48f960914960e09ba116e0558e2869725c470e8422157e0b16955dee8c22f48afe0dbd060be05a4332c493935089eeab4083a58fe417697cab3c7a81026d1d3ccb3ac4ab75ea74dd8075b4a49ad18406f14cab54176948c6dfa8a38ec6c6f55be60a117be8e642bc164c1b0001e4fee0a05d40552e84b2026c8d9cae3b69c855d2dd4691cd6cf8f185fc2ed1a04634de7ec34a8d547f6c62fd349e456f385f546f656100738b5a04f83c12bb630c160974a1", &(0x7f0000000240)=""/132, 0x9, 0x0, 0xfd, 0x92, &(0x7f0000000300)="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", &(0x7f0000000400)="3ef22cbf1328e31c0567751b5f56567601d4d96741a8a5584e2c6d10b57c3930305de04aa20b493fb4409947afac7b9debc1202dfcc058b81dfe055b75bc532e28a8d9afab4f00b20845f71930e94caf7e35b05887eebc7ff113c69591b68055283dff3eb5f403d951d736dd1763676b906fb374b0461865464803664e5e10a04e112f6ef5b398741c171a21e48541cbc520", 0x1, 0x9}, 0x48) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/199, &(0x7f0000000140)=0xc7) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:31 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:31 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000080)={0x1000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "ae572042066489"}) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002480)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000002500)={0xb, 0x10, 0xfa00, {&(0x7f00000023c0), r4, 0x700000}}, 0x18) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000013c0)={{r2}, r3, 0x18, @inherit={0x70, &(0x7f0000001340)={0x0, 0x5, 0x5, 0x6de2, {0x6, 0x80000000, 0x8000000000000, 0x1, 0x7ff}, [0xb3000000000000, 0x0, 0x9, 0x4, 0x9]}}, @devid}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r5, 0xc0045405, &(0x7f0000002540)=0xa1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r1, 0xf7, 0x0, 0x9c, 0xffffffffffffa6f6, 0x6, 0x8000, 0x4, 0x2, 0x6, 0x5, 0x1, 0x1, 0x1, 0x3d4ce5ae}, 0x8, [0x0]}) 15:45:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/203, &(0x7f0000000100)=0xcb) 15:45:31 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x1, 0x3, 0xb, 0x2, 0xe0b3c9eec7bc8f49, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0xe}, 0x10, r0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:31 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:31 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x501000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000140)=0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000002c0)=r1) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000000c0)=0xfffffe01) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000280)=@l={0x92, 0x8, 0x5c90de98f0440509, 0x6, 0x5, 0x8, 0x1}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0x7ff}) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/119, 0x77}, &(0x7f0000000200)}, 0x20) 15:45:31 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000040)) 15:45:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008805) 15:45:31 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x1, 0x3, 0xb, 0x2, 0xe0b3c9eec7bc8f49, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0xe}, 0x10, r0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:31 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:31 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x501000, 0x0) (rerun: 64) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000140)=0x2) (async) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000002c0)=r1) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000000c0)=0xfffffe01) (async, rerun: 64) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000280)=@l={0x92, 0x8, 0x5c90de98f0440509, 0x6, 0x5, 0x8, 0x1}) (rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0x7ff}) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/119, 0x77}, &(0x7f0000000200)}, 0x20) 15:45:31 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003a6c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003a8c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "2a9f02a2d749fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003b8c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003bac0)={{0x0, 0x5, 0x8, 0x8001, 0x1, 0x2, 0x8, 0xffffedfd, 0x828, 0x7, 0x4, 0x1f, 0x1, 0x70, 0x2}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003bb80)={{0x0, 0x1, 0x3, 0x800, 0x0, 0x4, 0x3, 0x80000001, 0x2, 0x3, 0xc0d9, 0x6, 0x93, 0x3, 0x1000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003bc00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "85cad195723610"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003cc00)={0x160, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x67, "f75fd6d3df7a5c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003dc00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003de00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003e000)={0xffffffff80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "b0f32b77f48775"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003f000)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "ceae8eb2f0751c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000040000)={0xda, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf9, "b237f4ec419fb9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000041000)={0xcba, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "7e71bf6c0be20d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042200)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000042600)={{0x0, 0xfffffffffffffffe, 0x80, 0x8, 0x100000000, 0x8000000000000001, 0x7, 0x4, 0x0, 0x5, 0x0, 0x7fffffff, 0x80000000, 0x4d, 0xd00}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000426c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r2}, {r3}, {}, {r4}, {r5, r6}, {0x0, r7}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r10}, {0x0, r11}, {}, {r12}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r14}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r17}], 0x1, "49f856ea66f86c"}) connect$bt_sco(r0, 0x0, 0x0) 15:45:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003a6c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003a8c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "2a9f02a2d749fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003b8c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003bac0)={{0x0, 0x5, 0x8, 0x8001, 0x1, 0x2, 0x8, 0xffffedfd, 0x828, 0x7, 0x4, 0x1f, 0x1, 0x70, 0x2}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003bb80)={{0x0, 0x1, 0x3, 0x800, 0x0, 0x4, 0x3, 0x80000001, 0x2, 0x3, 0xc0d9, 0x6, 0x93, 0x3, 0x1000}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003bc00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "85cad195723610"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003cc00)={0x160, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x67, "f75fd6d3df7a5c"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003dc00)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003de00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003e000)={0xffffffff80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "b0f32b77f48775"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003f000)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "ceae8eb2f0751c"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000040000)={0xda, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf9, "b237f4ec419fb9"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000041000)={0xcba, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "7e71bf6c0be20d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042000)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042200)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000042600)={{0x0, 0xfffffffffffffffe, 0x80, 0x8, 0x100000000, 0x8000000000000001, 0x7, 0x4, 0x0, 0x5, 0x0, 0x7fffffff, 0x80000000, 0x4d, 0xd00}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000426c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r2}, {r3}, {}, {r4}, {r5, r6}, {0x0, r7}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r10}, {0x0, r11}, {}, {r12}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r14}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r17}], 0x1, "49f856ea66f86c"}) connect$bt_sco(r0, 0x0, 0x0) 15:45:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008805) (rerun: 64) 15:45:32 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x1, 0x3, 0xb, 0x2, 0xe0b3c9eec7bc8f49, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x3, 0xe}, 0x10, r0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x80) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) socket(0x6, 0x5, 0x7e67) 15:45:32 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x501000, 0x0) (rerun: 64) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000140)=0x2) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000002c0)=r1) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f00000000c0)=0xfffffe01) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000280)=@l={0x92, 0x8, 0x5c90de98f0440509, 0x6, 0x5, 0x8, 0x1}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000300)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0x1, 0x7ff}) (async) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async, rerun: 32) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000180)=""/119, 0x77}, &(0x7f0000000200)}, 0x20) (rerun: 32) 15:45:32 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = socket(0x1f, 0x800, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000011) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008805) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20008805) (async) 15:45:32 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) socket(0x6, 0x5, 0x7e67) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) (async) socket(0x6, 0x5, 0x7e67) (async) 15:45:32 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = socket(0x1f, 0x800, 0x100) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000011) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:32 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003a6c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003a8c0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "2a9f02a2d749fe"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003b8c0)={0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003bac0)={{0x0, 0x5, 0x8, 0x8001, 0x1, 0x2, 0x8, 0xffffedfd, 0x828, 0x7, 0x4, 0x1f, 0x1, 0x70, 0x2}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003bb80)={{0x0, 0x1, 0x3, 0x800, 0x0, 0x4, 0x3, 0x80000001, 0x2, 0x3, 0xc0d9, 0x6, 0x93, 0x3, 0x1000}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003bc00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "85cad195723610"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003cc00)={0x160, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x67, "f75fd6d3df7a5c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003dc00)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003de00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003e000)={0xffffffff80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "b0f32b77f48775"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000003f000)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "ceae8eb2f0751c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000040000)={0xda, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf9, "b237f4ec419fb9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000041000)={0xcba, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "7e71bf6c0be20d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042000)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042200)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000042400)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000042600)={{0x0, 0xfffffffffffffffe, 0x80, 0x8, 0x100000000, 0x8000000000000001, 0x7, 0x4, 0x0, 0x5, 0x0, 0x7fffffff, 0x80000000, 0x4d, 0xd00}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000426c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r2}, {r3}, {}, {r4}, {r5, r6}, {0x0, r7}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r10}, {0x0, r11}, {}, {r12}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r14}, {r15}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r17}], 0x1, "49f856ea66f86c"}) connect$bt_sco(r0, 0x0, 0x0) 15:45:32 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:32 executing program 0: getgid() r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:32 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = socket(0x1f, 0x800, 0x100) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000011) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:32 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) (async) socket(0x6, 0x5, 0x7e67) 15:45:32 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:32 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) (async) 15:45:32 executing program 0: getgid() (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:33 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000680)={0x9, 0x1, {0x4, @struct={0xce05, 0x80000000}, 0x0, 0x6, 0xffffffffffffff01, 0x5, 0x2, 0xfb, 0x402, @struct={0x1b567658, 0x7ff}, 0x1ff, 0x80, [0x4, 0x6, 0x0, 0x8, 0x7, 0x5]}, {0xffffffffffff8ff8, @struct={0x7ff, 0x1}, r1, 0x4, 0x1, 0x80000001, 0xfffffffffffffc00, 0xfff, 0x402, @struct={0x40, 0x3}, 0x3, 0x9, [0x7, 0x8, 0x8, 0x1, 0x40, 0x1]}, {0x82, @usage=0x8, 0x0, 0xffff, 0x159, 0x4, 0x40, 0x3, 0x406, @struct={0x80, 0xe5}, 0x6, 0x4, [0x5, 0x101, 0x81, 0x3298, 0x2, 0x7f]}, {0x4, 0x1, 0x7}}) 15:45:33 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x39, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r0, 0x7f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x4}}}, 0x118) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:33 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000140)={@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'dvmrp0\x00'}}, {&(0x7f0000000000)=""/14, 0xe}, &(0x7f0000000040), 0x4b}, 0xa0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:33 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f00000000c0)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, {0x7, 0x6, 0x5, 0x6}}) 15:45:33 executing program 0: getgid() (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 15:45:33 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/95, &(0x7f0000000180)=0x5f) connect$bt_sco(r0, 0x0, 0x700) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/155, &(0x7f00000000c0)=0x9b) 15:45:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000140)={@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'dvmrp0\x00'}}, {&(0x7f0000000000)=""/14, 0xe}, &(0x7f0000000040), 0x4b}, 0xa0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:33 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x39, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) (async) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r0, 0x7f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x4}}}, 0x118) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:33 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f00000000c0)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, {0x7, 0x6, 0x5, 0x6}}) 15:45:33 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000240)={0x0, 0x1, 0x1, [0x8000, 0x6, 0x7, 0x5, 0xffffffffffffffff], [0x7, 0x9, 0x5, 0xd046, 0x5d, 0x1, 0xfffffffffffeffff, 0x5, 0x7, 0xfffffffffffffffa, 0x3d9e, 0x1, 0x4, 0xfffffffffffffe00, 0x100000001, 0x800, 0x40, 0x7fff, 0x81, 0x0, 0x70000, 0x40, 0x0, 0x59, 0x3, 0x3, 0x9, 0x16, 0x1, 0x2, 0x1f, 0x1, 0x5, 0x9, 0x10001, 0x1, 0x81, 0x8d, 0x7f, 0x6, 0x10000, 0x81, 0x1, 0xfffffffffffffffe, 0x10000, 0x0, 0x7, 0x4, 0xf8, 0xfffffffffffffff8, 0x6, 0xc8, 0x1ff, 0x7f, 0x27af, 0x7, 0x1, 0x0, 0x200, 0x4, 0x9, 0x9, 0x3, 0x80, 0x5, 0x0, 0x4, 0x60c, 0xb932, 0x7, 0xec6, 0x1, 0xffffffff, 0x10000000100000, 0x6, 0x8001, 0x8, 0x2e800000, 0xfff, 0xffffffffffffc68e, 0x8, 0x7ff, 0x80, 0x6, 0x86b5, 0x38f, 0x3, 0xffffffff, 0x4, 0x9, 0x8, 0x0, 0x0, 0x2, 0x3, 0x9, 0x80008000000, 0x0, 0x9, 0x4, 0x100, 0x8, 0x0, 0x5, 0x6, 0x51a1, 0x419, 0x4, 0x1b46, 0x81, 0x6, 0x1, 0x9, 0x6, 0x8000000000000000, 0xa76f, 0x1, 0xdb, 0x1, 0x71e, 0x18]}) 15:45:33 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$bt_sco(r1, 0x0, 0x708caf315c1f957) 15:45:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/95, &(0x7f0000000180)=0x5f) connect$bt_sco(r0, 0x0, 0x700) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/155, &(0x7f00000000c0)=0x9b) 15:45:33 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x39, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r0, 0x7f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x4}}}, 0x118) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000140)={@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'dvmrp0\x00'}}, {&(0x7f0000000000)=""/14, 0xe}, &(0x7f0000000040), 0x4b}, 0xa0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000140)={@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'dvmrp0\x00'}}, {&(0x7f0000000000)=""/14, 0xe}, &(0x7f0000000040), 0x4b}, 0xa0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:33 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f00000000c0)) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, {0x7, 0x6, 0x5, 0x6}}) 15:45:33 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) setgid(0xee00) 15:45:33 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$bt_sco(r1, 0x0, 0x708caf315c1f957) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) connect$bt_sco(r1, 0x0, 0x708caf315c1f957) (async) 15:45:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000100)=""/95, &(0x7f0000000180)=0x5f) (async) connect$bt_sco(r0, 0x0, 0x700) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/155, &(0x7f00000000c0)=0x9b) 15:45:33 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"aca1f9b7f5c2242668543b5a303e01db512aaad352ee48e8f186c5f9b33e", 0xff, 0x9ad60b0ae062ec96, 0x401, 0x3, 0x7f, 0xfffffffb, 0x10001, 0x5, [0x19448e74, 0x5, 0xd71e, 0x6, 0x9, 0x5, 0x37ee810a, 0x5, 0x10000, 0x5, 0x24000000, 0x5, 0x6, 0x7ff, 0xe37, 0xfd54, 0xe7, 0x40, 0x8]}) 15:45:33 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setgid(0xee00) 15:45:33 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:45:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "150119061cd407"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYBLOB="00000000010000007f000000000010000900e8000000000004000000000000000200000000000000000000000000000003000000ff010000fbffffff0100f0ff7f3e00000000000006000000000000000200000000000000e9000000000000001000"/120]) syz_open_dev$usbfs(&(0x7f0000000180), 0xc6d, 0x60803) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='initcall_start\x00', r3}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:34 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"aca1f9b7f5c2242668543b5a303e01db512aaad352ee48e8f186c5f9b33e", 0xff, 0x9ad60b0ae062ec96, 0x401, 0x3, 0x7f, 0xfffffffb, 0x10001, 0x5, [0x19448e74, 0x5, 0xd71e, 0x6, 0x9, 0x5, 0x37ee810a, 0x5, 0x10000, 0x5, 0x24000000, 0x5, 0x6, 0x7ff, 0xe37, 0xfd54, 0xe7, 0x40, 0x8]}) 15:45:34 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$bt_sco(r1, 0x0, 0x708caf315c1f957) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) connect$bt_sco(r1, 0x0, 0x708caf315c1f957) (async) 15:45:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "150119061cd407"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYBLOB="00000000010000007f000000000010000900e8000000000004000000000000000200000000000000000000000000000003000000ff010000fbffffff0100f0ff7f3e00000000000006000000000000000200000000000000e9000000000000001000"/120]) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0xc6d, 0x60803) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='initcall_start\x00', r3}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x20008004) 15:45:34 executing program 1: setgid(0xee00) 15:45:34 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"aca1f9b7f5c2242668543b5a303e01db512aaad352ee48e8f186c5f9b33e", 0xff, 0x9ad60b0ae062ec96, 0x401, 0x3, 0x7f, 0xfffffffb, 0x10001, 0x5, [0x19448e74, 0x5, 0xd71e, 0x6, 0x9, 0x5, 0x37ee810a, 0x5, 0x10000, 0x5, 0x24000000, 0x5, 0x6, 0x7ff, 0xe37, 0xfd54, 0xe7, 0x40, 0x8]}) 15:45:34 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:45:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "150119061cd407"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYBLOB="00000000010000007f000000000010000900e8000000000004000000000000000200000000000000000000000000000003000000ff010000fbffffff0100f0ff7f3e00000000000006000000000000000200000000000000e9000000000000001000"/120]) syz_open_dev$usbfs(&(0x7f0000000180), 0xc6d, 0x60803) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='initcall_start\x00', r3}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000240)={0x4, [], 0x80, "150119061cd407"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYBLOB="00000000010000007f000000000010000900e8000000000004000000000000000200000000000000000000000000000003000000ff010000fbffffff0100f0ff7f3e00000000000006000000000000000200000000000000e9000000000000001000"/120]) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0xc6d, 0x60803) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r2, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='initcall_start\x00', r3}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x20008004) 15:45:34 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x39, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r0, 0x7f, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x2}, @in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x4}}}, 0x118) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:34 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0xd, 0x90, 0x0, @MIDI_NOTEON=@special, 0x0, 0x7}) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x3e000000) 15:45:34 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:45:34 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) 15:45:34 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x20008004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008080}, 0x20008004) (async) 15:45:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000240)={{r0}, 0x0, 0x1a, @inherit={0x78, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x5, {0x4, 0xffffffffffffff00, 0x81, 0x8000000000000001, 0x8}, [0x8001, 0x7, 0x1f, 0x5, 0x0, 0x2]}}, @name="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"}) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:34 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 15:45:34 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0xd, 0x90, 0x0, @MIDI_NOTEON=@special, 0x0, 0x7}) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x3e000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0xd, 0x90, 0x0, @MIDI_NOTEON=@special, 0x0, 0x7}) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x3e000000) (async) 15:45:34 executing program 0: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x51) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) 15:45:34 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000240)={{r0}, 0x0, 0x1a, @inherit={0x78, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x5, {0x4, 0xffffffffffffff00, 0x81, 0x8000000000000001, 0x8}, [0x8001, 0x7, 0x1f, 0x5, 0x0, 0x2]}}, @name="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"}) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:34 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@v={0x93, 0xd, 0x90, 0x0, @MIDI_NOTEON=@special, 0x0, 0x7}) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x3e000000) 15:45:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000080)=0x10000087) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x6c51, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x1, 0x3, {0xe6, @usage=0x9, r2, 0x0, 0x7fff, 0x3ff, 0x2, 0x8000000000000001, 0x50, @usage=0x4, 0x20, 0x4, [0x100000000, 0x5d5, 0xffffffff9ff29f86, 0x7, 0x6, 0x6f232718]}, {0x80, @struct={0x2}, 0x0, 0x26, 0x6, 0x5, 0x2, 0x5, 0x4e2, @struct={0xce2, 0x1}, 0x800, 0x2, [0x8f11, 0x4, 0x5, 0x1ff, 0x80, 0x5]}, {0x18000000, @struct={0x3, 0x70d0}, 0x0, 0x20, 0x8, 0x4, 0x6, 0xb2, 0x401, @struct={0x2, 0x7}, 0x4, 0x2, [0x3, 0x8, 0xa960, 0x4, 0x100, 0x4]}, {0x674, 0xf52, 0x6}}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000800)=0x8) 15:45:35 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:45:35 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000240)={{r0}, 0x0, 0x1a, @inherit={0x78, &(0x7f0000000000)={0x0, 0x6, 0x3, 0x5, {0x4, 0xffffffffffffff00, 0x81, 0x8000000000000001, 0x8}, [0x8001, 0x7, 0x1f, 0x5, 0x0, 0x2]}}, @name="b22ae54f820402e59d8e5fc5ff2dda14b4fe8885c0c93afda3d02369cfb72affa4b68caacf946dae754f8c1d2f82b50376a1b6ce5687c2fad63f2a1e66fdb0c1ded06156a6282987a1be47c1287a68e285cbdda100915a58b0fb8d2117af209bcf84e3809642a4c8706e56a53e5049a14d242aa99f43a257aab1110bebd667a740cf4226a91c45b82759c2fb88f2f9558629162c14301f8f49d99b60d75daa786c913569191a5714a75e42947a1e404473f47f173dc47ce5e2870037f57ca2257d4e77df218f1373c21d5556744b2c24ac55355b38acf127b3c25eb27a022d86983272cd51731b0eeb66464a8d18b3e3090a40958565fbb175fb3daa4237c07dc1564b1e28bdcd81acc952f651dc1287b91238165dff8fe7248b76b6b45990607e432ea157b74fc4e1ee737c0331bbde6985b1e53a34e18534b03a4af26d8bc13850fb05287a72dabe8a06ca2f777fe2b69286ccda0d220f74ec40d4923eb6b2f60558b3fcf117557abc2810779adde75484a42d70b419a4cce5ff528d582b0dc6dc303024adcdb078d1a92e43beea66265f1c37520b8d0b2f37d2a2f61fb155f1871cb7b4c383efb02493236e7409cf5de08da913f9d9013013b9d7b052d33ca9e57804f55871324c41fd99026ecedbc540215c8ba3557cf8e19204b8d534e5e300f90940800fb93671864b887d026cf7bf5dd2ba0b28599616a8c49185213fb1496bf413072004440841e07cb320fa3add5ba8b7f621a96dedc743f5e8f16b372ee3a866ee5ae924b7532a591540dedd8bc22277d34b71c645580761bb684d3f378cc8feeb548663a9e62c5fd5beaa492037f597562d48ad90294ce111e2320d9be208d1dcf2bf9dd3b140026d536ab17f8a197c37efba259e25f7c7a19a819de02f73c2dd628ef359022ed4425ca1af7daa86b8e6a8a3efa2f00f2cf480c83787b5c2607c922eca76f9fa1d5e013720ce291d480f1c34eb3d46abd28f10d854416123ebb8c1496f86b9f727faf32160d48e184898af1be45e4de86f6a160faa0866cb79d15b7dd5bbdc1bf7b12abb0ff92d0d395f0f5992d1d25ea833f56ffd2c2877ed1120d0b7d9aa22e2d1c994333060a9b890ed028c4440375c1fd89e49b1bd7d38cb6ae3c6c3433c8e220c9dc16c8a1b5458150eac826acd2d879cd9114f58139593e236d80c90e51f159e71587fcd112df99dca82a053286420527f01943e5fb265d7d91200877a28f3989b4445b23f0860c4174a1489669a93cdd2aedf20e2d0ccfcd1a8981a2829838004074ec66aa8a462973f2ea4f49c5f0395f1ab83d3002bc1672ef66c1f86acd7375bbd5490d0828b061a0b4b8c39d311f83c7981250f5f6497f0144dbd45b076645df96ed1d7055c8e2f6ed846505208bafd9005b2c6154827ed8d8c90a759d03d6ec63fb9d606dd8ab5a75ed33aa8071b422cb0e1d0bd4fbf7d26f540d2b10352508bd63b70c71350e370b05b74b60e7379ac34560129c3394489dd42a62bfa9ede6a0e49208d4763c459c8fb11c308ef9dba76cb9c63114c8033cef34a30f394986e22131fbeec794d81d1216a405550bbc373e0194efee1d2c381d0dc851b8d5d5d3df656d30e45c6da437d631a5fd0ca28ed182d624ae8cf9e3ee27cda71aa5d700198b61b3ec216019f7ce492d1bf3b9317c455fc2ac540255b03ca5a0a4db528a01a292e746ff757424e3069dee4d23ec5256cc24129dacc4b4ef98d3dc377c792fe5dfe1a8935160c155fe03113458c6c30af3a9350e8319dac88adf4b738a817be996eb938cade9db985272208c524889f356935a701aea27b323ce027ea6b4af8f1edf13bfdc4d1c7cfe38a5893b2afc2f3321182d79d68d85568d76f4708c47defb045a79791724dacbc3ba4a64436871a7b0a1d1fa174bfac3c7f18e8cbc7b02aacbda41d52917727409ff1c0c0e610243f8fa352f8a4b3f334d589801c6c2b7006518a2512fbddf0b523643e1adb75c1c1b7d5090916d19f70b7203d544441704371f66b396b6c6a18b482fab683972b985216cfa7e6bf928203293f08a545bef3c6ad66944ec0231dda0ce2f48853800007866f7fd26b42c9042329857dcd8531da8c3d6333e6e1c75feca298aa62ca59cfc222503e3598dfe439620bf615d412d1d37e8d26390c8c42e663bb7b18e95bd6e72e37fe24665c5e7ec51ab45821c07050b34c3bdb4e44341da06b9159585584e24f4b8117784648e751028487c750c140f1afe3b92b5d23d5ff4cba8a9237d83335242219a77dfaa96be5fe0d8ef805bfc47d74af68b357c24499ac986d7a6c3acb129364282a93ef7d97fc56d7378f73140353186901a74f35b5736d55334095140254a108ea5301cf4c63fb0309247c2ed1052895a85f55dbb31fe0a5828ff129392cb69c5eac4cf11dc9a3561811a098a0c85100e7d2bfecb2e9be93bcd49970e7652b453eaa376920eadf278f45ce60b2fd3685a29acf4b179eaa30cf19a92a7c46afc05271bc5da430607e081ce6c3c2cc23c8699f1fcc79d04c12ffd812f8da90f09316daf80f03d6a4465dcace3f71852f8d444031bc8a3f211b63e94a1cfe9b35688c07ace53269ef5772dfb9f85b60e1f7aa598d73bd3233c25ba0aa728f5c6c661f155b7d170b53f94b70a311d3dea741c985bfcdf4853377c3a0076e67f8a6eb48db412e8e919e855fb669fe9cda6247b38227a12c59f089e8ba67107cdba9814170ef57fa32621e9adbd7278750015e438ff94605d47e770d26431da391b16415c04820a2634a8d6227ad43bab053f63b4f6d0dd72deee2e5bc63983c53bc85d57053db59de5ac5e447f9ac6bc556e069a3e8524496aca0de644ed877849da63dc2d72390590feea1c684e296e9b0c774d56c73e03c5cf8d01feb8eaa815fa5cb92de2872be8e3fd8ac3ea7479ab40d6e23bcec975756a44ee43a4d11dcc8f992686ab73958c552f5f027ad50e47cfcc779aa448f9534492735010a3791f8c0dce3bb996ad30745942e1f3798c869f9a8057817f82ff4aecf339eda0ff744049f484ad9824da7f4e7135354aa4247ea20667cadc0e7eaf30a4105b480b352a8909ad32925b420404a29ac16f3350607a516703c1284c59af7cd11fc4aa0f77e58edfadf451363767dcdebc09252f965bbd704e1cd3bd1c5f99df2bfd61fd97e8a2bcc04092e05267258d066ec55bdbd2d24a6084ec6338d057a5bfc000dce40336b7235b54099b5c55b9220dd9f1a4506939d8a4371fe927d92efbe0f4c850e74c1c6893d8392740a70b78b56fb8146788a7f901131524b13721d260d72e0f3b7a58cdcd6777ee5ea1c45ed4b48626a9361b48155e488956b9f1ba4f4ffa5ce6e84d64e74f0133c650ef9c4d75a59625ffbb03569b6e5071ea627f9c8895c80d3a0147ced9d7552799d7210603e858944d105d519a3680ade313052efdfabd4f2cc4baf17af3f5cd3c439611561abfd021d0d915c59767be0f59b3b73609b251c01948747657e110a9adfe5daf1e1c00317bbef64788a2716843c52b9393e4241fd0693736cc1307b639c8f9a39668c01b1cdf95df9b7eee0d9694c4295d6fe2e1c7ca03bb0e5ce69dda2e24c026b12d02db1780a34b7a7db097936b18f0330054eb440ee8dfe61b92ad6aa6e6343c05ee1ce9db72b6678306e09f3df128157b7cb66d86f6bf637920d1e89ec63534997a0f7d17282185d4a39f5bc72e8ee9f2d6a8544da64d2295bf082b18da5c71aa3daf8b78bd0e8e45c509ca34536ff25f53d2422f4f8f5beb45c4e6e947d97caa3908dacd34442c336b4eb84ec293718f1af883f2ddff55efb05df81366bdc734d9c10db444bf86791d5ce70f20e2287e0beb77764649f0aa9002d3403dc59442b95188cb63b144e44a975eedc1ff681094ef13d3c0c6c713a6ad8e69401245ea8bdabc67b5d60cc7181181d43ede2f626d4dbf2ad7d3a02178df05c82489c7c159f588e25004bdc9b7bd9ec834380c3ffcb0df68b6daa3574c7ca0c88aaf5bf070a30817cc052f8ffaceaadc948e2cdec2be6d8ccbc51d8d100d5f5499cd0ae7c5dd4b49fa3f9fcb2ee091f96baa487b409d6ad120c38ddb8dc59d35c8d2df432cbf5c8b5d9f750bb4aae91fe13b33cdc6a64353b1e45f35513dcf39fc77d78b074ce355346430930d2835ce174704e6f306c6324512a2ce07ba136cc4e93ca79a531de23b57461fd16aad380dc3a4bf724eb84cb58885e768a99a5ca4c70828390f4212e4a6cbdb1d0f9f5bd605c2de54011062a2c8e8eecb7b9d52d62a83a530e240be1a4174aa36bbcc7c640d5162bf46cc376bbba3390abe22d7feeeae5143466384c24f81af8b3c863bd1e6eb97da9279ff4a41155777a60b4de650484dbbbba726f1594c1b9b0198345c7ed36bd0d9ea4ed3ef0ce5b9c3b85e630d4e37fb92443d283ab32b13a4d178a1f9bffcbf8fe0f65857163d954d1562101cc75b46682e0e1cab314e632120a6260bd3343e60ce455b43bb07a92f51df541d4121daa081b60a19675615e07bb06211e3443164d3ea1497dd6164e5c6fbf34bd07ef6702dfe63caf7466d638141fbaedc135ffe90c43f6dfd05280c8387948f7de26efdb7655b43ce4ae122edfdcca7165c0a7b3e8192308211aff3f8e72542a00bd72ede54b6cf0c442d73ba6fe647a99eadc4d51ead703125082ecf333a3b323b23bcfb10e6f234b095e1bd53ba276cba4ccaccb9ceb2ea21b25e7cb401763994e9636dddb09f256feec693dd4d4e70ed3ccf9f67edc87cf2b9297ae84692696f469d419024d0a624f73b97e72c926fbb75aacd2c10c86c3bfa197d05f279cb09e2387230fb0610ddeb341549aa1c4cc40c15c0d4e8cff27dbb03e9bb5571fc43d746888a4a8ac3b5c653fbe65d70fc03d0383d4d8b279687636545057d6d09b9217cbede19a452fc4206ef22964bb7111c51514eb1f196851bfa994a14daf208c2ac79fe53a469b1b0112c64b2d84d3488a2416949ba791f78b06cea7594221d98edd062f5c2c38f39e5c2002e3a39a302ad611377599d040e40e07f4922ff43e1bba71075f390129fb566dcf6deeab479ec09b0996cd99d6a204e622ab24f95b98edda1509a9df72141aa52c9d4448da609c600a6997de0db8c2969f7c0f3b1cf7d7db9b95272a3be85a5dee5a7f518a612c4ad4bc819a0d32a1396c5caf3b301e92f8f6ba277e77870554eecde11959c5c37bc72106d9883e681fba9f26a088fb34cc23e34db8d8f4348363a28eddd2db1856c7957707d798ea26ee3aba8e796247555884e52ba2c44edf70f2d69b939027307252fd1f8495778ff4f6d970d793a6f6de9e33009a64ca0bf55e80f206980e1d5321eac12d101f07081f3fa27e51a685b82b1009f0ff460cefc58e863827cd7e50ad3343874f0d1b55bfeb92023309bd4de6eaffa679f82dc2e25365f32827fd67e62f8b81f133cfb6c74c159b2314164f467a7cac0582e0b09311e4a00e8106fe1d2ac3dfb2a38dfa569d02bbc746e7ccfa2edab6485ec0fb1a16f9176a48c2b29fa778ac28db8d00a27e328d5a123ab9f8088af92908dcdbe3285308dcea2fe3245c42a35f53466c51672faf8fa39f84b97805c5f17c3cf4a1adf96c81f1b2a8aab3794a6fa3b9ed89388247a6f51ba4d1f8c77b91165cf0153672e925340862df47a4cd3994ae060ca375bf1bb437e1d35fdcd2c5ea"}) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:35 executing program 0: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x51) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x51) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, 0x0, 0x700) (async) 15:45:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x1c6282) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x5, 0x0, &(0x7f00000000c0)="d069350cd4d15b2705e74d731927aa99e109ff517a26c1e9ede8fa37f34ad0f9668b60f563859619ff0a7ea78c744ceda9c35f9b4819eb78c073c21e7930112974d7769fc6b205e3ba3619cf78a26fc822797acae51a68722e159f00e3d3b03ff2016eef7a5122c5755fca614c7fd90478d6fcc2abea19b3ceecb95bd0626aac52924dede0c787ccf932cd65fce7264a4e52fb6d9f4f7d44e71bc36f81b34355fd9e0d361d9954c87c9773b2"}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000240)=@e={0xff, 0x1, 0xf, 0x3, @generic=0x8, 0xf8, 0x20}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000200)) 15:45:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x6c51, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x1, 0x3, {0xe6, @usage=0x9, r2, 0x0, 0x7fff, 0x3ff, 0x2, 0x8000000000000001, 0x50, @usage=0x4, 0x20, 0x4, [0x100000000, 0x5d5, 0xffffffff9ff29f86, 0x7, 0x6, 0x6f232718]}, {0x80, @struct={0x2}, 0x0, 0x26, 0x6, 0x5, 0x2, 0x5, 0x4e2, @struct={0xce2, 0x1}, 0x800, 0x2, [0x8f11, 0x4, 0x5, 0x1ff, 0x80, 0x5]}, {0x18000000, @struct={0x3, 0x70d0}, 0x0, 0x20, 0x8, 0x4, 0x6, 0xb2, 0x401, @struct={0x2, 0x7}, 0x4, 0x2, [0x3, 0x8, 0xa960, 0x4, 0x100, 0x4]}, {0x674, 0xf52, 0x6}}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000800)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x6c51, 0x8, 0x1}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x1, 0x3, {0xe6, @usage=0x9, r2, 0x0, 0x7fff, 0x3ff, 0x2, 0x8000000000000001, 0x50, @usage=0x4, 0x20, 0x4, [0x100000000, 0x5d5, 0xffffffff9ff29f86, 0x7, 0x6, 0x6f232718]}, {0x80, @struct={0x2}, 0x0, 0x26, 0x6, 0x5, 0x2, 0x5, 0x4e2, @struct={0xce2, 0x1}, 0x800, 0x2, [0x8f11, 0x4, 0x5, 0x1ff, 0x80, 0x5]}, {0x18000000, @struct={0x3, 0x70d0}, 0x0, 0x20, 0x8, 0x4, 0x6, 0xb2, 0x401, @struct={0x2, 0x7}, 0x4, 0x2, [0x3, 0x8, 0xa960, 0x4, 0x100, 0x4]}, {0x674, 0xf52, 0x6}}) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000800)=0x8) (async) 15:45:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x1c6282) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x5, 0x0, &(0x7f00000000c0)="d069350cd4d15b2705e74d731927aa99e109ff517a26c1e9ede8fa37f34ad0f9668b60f563859619ff0a7ea78c744ceda9c35f9b4819eb78c073c21e7930112974d7769fc6b205e3ba3619cf78a26fc822797acae51a68722e159f00e3d3b03ff2016eef7a5122c5755fca614c7fd90478d6fcc2abea19b3ceecb95bd0626aac52924dede0c787ccf932cd65fce7264a4e52fb6d9f4f7d44e71bc36f81b34355fd9e0d361d9954c87c9773b2"}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000240)=@e={0xff, 0x1, 0xf, 0x3, @generic=0x8, 0xf8, 0x20}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000200)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x1c6282) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x5, 0x0, &(0x7f00000000c0)="d069350cd4d15b2705e74d731927aa99e109ff517a26c1e9ede8fa37f34ad0f9668b60f563859619ff0a7ea78c744ceda9c35f9b4819eb78c073c21e7930112974d7769fc6b205e3ba3619cf78a26fc822797acae51a68722e159f00e3d3b03ff2016eef7a5122c5755fca614c7fd90478d6fcc2abea19b3ceecb95bd0626aac52924dede0c787ccf932cd65fce7264a4e52fb6d9f4f7d44e71bc36f81b34355fd9e0d361d9954c87c9773b2"}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000240)=@e={0xff, 0x1, 0xf, 0x3, @generic=0x8, 0xf8, 0x20}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (async) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000200)) (async) 15:45:35 executing program 0: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x51) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x51) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, 0x0, 0x700) (async) 15:45:35 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x773102, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:35 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x6c51, 0x8, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000400)={0x1, 0x3, {0xe6, @usage=0x9, r2, 0x0, 0x7fff, 0x3ff, 0x2, 0x8000000000000001, 0x50, @usage=0x4, 0x20, 0x4, [0x100000000, 0x5d5, 0xffffffff9ff29f86, 0x7, 0x6, 0x6f232718]}, {0x80, @struct={0x2}, 0x0, 0x26, 0x6, 0x5, 0x2, 0x5, 0x4e2, @struct={0xce2, 0x1}, 0x800, 0x2, [0x8f11, 0x4, 0x5, 0x1ff, 0x80, 0x5]}, {0x18000000, @struct={0x3, 0x70d0}, 0x0, 0x20, 0x8, 0x4, 0x6, 0xb2, 0x401, @struct={0x2, 0x7}, 0x4, 0x2, [0x3, 0x8, 0xa960, 0x4, 0x100, 0x4]}, {0x674, 0xf52, 0x6}}) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000800)=0x8) 15:45:35 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:36 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) 15:45:36 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x773102, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x1c6282) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x5, 0x0, &(0x7f00000000c0)="d069350cd4d15b2705e74d731927aa99e109ff517a26c1e9ede8fa37f34ad0f9668b60f563859619ff0a7ea78c744ceda9c35f9b4819eb78c073c21e7930112974d7769fc6b205e3ba3619cf78a26fc822797acae51a68722e159f00e3d3b03ff2016eef7a5122c5755fca614c7fd90478d6fcc2abea19b3ceecb95bd0626aac52924dede0c787ccf932cd65fce7264a4e52fb6d9f4f7d44e71bc36f81b34355fd9e0d361d9954c87c9773b2"}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000240)=@e={0xff, 0x1, 0xf, 0x3, @generic=0x8, 0xf8, 0x20}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) (async) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000200)) 15:45:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_yield() connect$bt_sco(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000080)={{r0}, 0x0, 0x16, @inherit={0x60, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x8, {0xa, 0x3, 0x9, 0x3, 0x7ff}, [0x4, 0x9, 0x400040000000000]}}, @name="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"}) 15:45:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0x0) 15:45:36 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x255ae478834e6fd, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0x0) 15:45:36 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x773102, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x773102, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:36 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:36 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_yield() (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000080)={{r0}, 0x0, 0x16, @inherit={0x60, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x8, {0xa, 0x3, 0x9, 0x3, 0x7ff}, [0x4, 0x9, 0x400040000000000]}}, @name="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"}) 15:45:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bind$vsock_dgram(r2, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0x0) (async) 15:45:37 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000000)) 15:45:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200), 0x8) (async) 15:45:37 executing program 1: ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x255ae478834e6fd, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:37 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) sched_yield() connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000080)={{r0}, 0x0, 0x16, @inherit={0x60, &(0x7f0000000000)={0x0, 0x3, 0x9, 0x8, {0xa, 0x3, 0x9, 0x3, 0x7ff}, [0x4, 0x9, 0x400040000000000]}}, @name="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"}) 15:45:37 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x5, 0x1aa2, r0, 0x800, '\x00', 0x0, r0, 0x5, 0x0, 0x1, 0xe}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9e9c, 0x0, 0x0, 0x0, 0x1}, [@generic={0xe3, 0xb, 0x9, 0x7e, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x2, 0x3, 0x9, 0x101, 0xffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0xa2, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x9, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, r1, 0xffffffffffffffff]}, 0x80) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 15:45:37 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x5, 0x1aa2, r0, 0x800, '\x00', 0x0, r0, 0x5, 0x0, 0x1, 0xe}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9e9c, 0x0, 0x0, 0x0, 0x1}, [@generic={0xe3, 0xb, 0x9, 0x7e, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x2, 0x3, 0x9, 0x101, 0xffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0xa2, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x9, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, r1, 0xffffffffffffffff]}, 0x80) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 15:45:37 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000000)) (async) 15:45:37 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:37 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x5, 0x1aa2, r0, 0x800, '\x00', 0x0, r0, 0x5, 0x0, 0x1, 0xe}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x9, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9e9c, 0x0, 0x0, 0x0, 0x1}, [@generic={0xe3, 0xb, 0x9, 0x7e, 0x3}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff8}, @generic={0x2, 0x3, 0x9, 0x101, 0xffffffff}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0xa2, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x9, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x1, r1, 0xffffffffffffffff]}, 0x80) (async, rerun: 64) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r3, 0x0, 0x0) 15:45:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x255ae478834e6fd, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:37 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r0, 0x0, 0xff7d) 15:45:37 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/58, &(0x7f0000000080)=0x3a) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (rerun: 32) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000000)) 15:45:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x775200, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 15:45:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:38 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r0, 0x0, 0xff7d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) connect$bt_sco(r0, 0x0, 0xff7d) (async) 15:45:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/122, &(0x7f0000000080)=0x7a) 15:45:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0xf, 0xd0, 0x1b, 0xa7, 0x7f, 0x3}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:38 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200), 0x8) 15:45:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async, rerun: 64) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/122, &(0x7f0000000080)=0x7a) (rerun: 64) 15:45:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x775200, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 15:45:38 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0xf, 0xd0, 0x1b, 0xa7, 0x7f, 0x3}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:38 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r0, 0x0, 0xff7d) 15:45:38 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=""/122, &(0x7f0000000080)=0x7a) 15:45:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000000)={"2c84d0bae2f5cda06410f8399f3fc851b49b85e3cd7814aff73ed813fe93", 0x6, 0x0, 0x0, 0x3, 0x100, 0x7, 0x10000, 0x6, [0x4, 0x45fd, 0x0, 0x7ff, 0x7, 0x2, 0x5, 0x100, 0xfff, 0x9, 0x7, 0x7, 0x80, 0x0, 0x80000000, 0x2, 0x1, 0x5, 0x7]}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@l={0x92, 0xf, 0xd0, 0x1b, 0xa7, 0x7f, 0x3}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:39 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async, rerun: 64) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x775200, 0x0) (rerun: 64) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) 15:45:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/129, &(0x7f00000000c0)=0x81) connect$bt_sco(r0, 0x0, 0x700) 15:45:39 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:39 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/129, &(0x7f00000000c0)=0x81) connect$bt_sco(r0, 0x0, 0x700) 15:45:39 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x2, 0x5, {0x5, 0xbd8, 0xfffffffffffffff7, 0x1, 0x2}, [0x6, 0x2, 0xfffffffffffffffd, 0x7ff, 0x4, 0x3]}}, @name="3ac35748c4f6532338a1f22e0bfac469ded29687b23b90fcb6fb7118fdc90d5bfa25cdec3095009e38ca2311092942f430e6c82236b99d3fa4eabd916f156a4ffd78c6c37ca80a2d4e44b4066d2cadf93c0a3656dbbbad53a727577401b860c1083ccb7f59e35d1bad800c7647570f55adf5a18cf060f6ae656a259782247af833ca817604f8de804e9b27ba5b47c2a94b87626f6e49ac66d6813af4873676dd729673e517d866d2071e5a13695b27e2ece22899d9dfabea95f7315b9c0256818cd537a656bd1e57c4120258e8fe2bc37ab7d6d04e1dfa21b3e2bdcb9736788a251ac21839ac69224cb1bad1a3a81d63ed446e93b0fdc606eadf51b6e899998397bf1c531707e6a0bf836c6b2a09f797bb28750d6814bb8761e1a8f0cacf6fdf0d199da1d6b9ec31725fbf583b10d5378df6f65b5b7a00ed837150efb1fbdecaa7fe1b80129aa8a4edce95d176cf3a8168fbe9b98f4a505af0cc45967f953b62d70703ae262a4fb2d6d0df7b5512dd004fd81e63326260e65b3a5cf1b23cfc15627dd4a2401c2effd5a9edc7494d9b96b7cbe005bf9d437bea2a17439f73f7c981533e444c07ef907b28dd7d098e0fa61a56347e5bc235f2e4019e6df4894b5834f03b4353ca4c20f21de488b784b0038eb3c25b429f9002b7927dbf63260210dd954418e09b733294b30970a97ef78dc7d5df48bf2d9d0aa211b400b0d4cafb59e856e221735f2289d0f0cbc560670f93d6537f8de437abdfd720767a9ed63e8c04652c18e409994386c8651ca0abae3931679d8c2a8a1b6d386be8f341bfc59f5e8f9fa0a308715339f68fa251553f7cb17103581e83d07abe490aa60e1d7545bf43adafe26d89fce2fa519043fe1a356d8eb6e9b62705ae47e9dc45636ed8261dc44ff9320199b07f4b661bf4302cfb2b9f0a5bde5cd3ea923a5cddb49d990e7d8e5cadcacb92bf9f31846f4d6c34d4b8aa1a00fa5b97b8d29ddf366a4f18e3e6d58d62b9dee273f177e6c404def84dd67c2ca44a79b18b17b567ac317de4ce0f2ac654211fde9edf4cd80625cf4e984005b3628d0149b3cfa791a7205c69243abaf62025ffa429fd251e5bd8b6b7dd828230c1cd5df41aba2c8ccd1ce2f4e4cb7caa3cac3cfcbde12f0875a66150f663d5b34a1306bd7c0052609b942bd1c9fb4aa149f54dd6cd27090f9110a4ad0a0ef13f9d67aaf350a5efdf293bd4edfe9804880b3ebe4254e72a74139ea5d89ebacdabc16b6acf6aa4d2c52000230c34d20f646fd6e79a656d9f24ed1b9afbcf1d7920c9f91f840a006efc61f9bfd82b17acb2a5038349a17f64b12c18360595f8371ea7fd24bb5f0535b019abaf433bd766d04550ac3167984ef2f1146b9ff1014a07f0c39f391ccfe22a22c01a41752279bc48d34a4e5b79dfffb548c834afae14e964979c0a09b522ec4bfeef51a1d78452bb521e7c72914db11fb7c676bf58b916b85518e4a6c86a1aa7a730eba719c6d6fb0ded4f12fe43e3117e2071a7a627bf49ccaff48f3aa0922e78b63fe63b7cb64ebd459b718671fcdf9221f2a7a8440acee700efe88128bae35b0bfd9660f013b3fc8a33c34070b540904a68c35218926d42e99d1a745ea412eadc32dd03e6e690cb05ad563309ef66ccaf5c3d9c709b8ff9f154d2d1569265ade13a5a5ebc1ac3d26b73bd0190114eb6393b899c1a04d028d4fe08eb8a0bbf498d7bc5d8a5e7011586209e5a56c6f418c5e5b1c98d50866d555b79517594555fed92bcb6504339f15c4fb96735fd1f53ec156c152dd59ba5a634e196d6bcb352e2d6b23e0ac2b42f2a5caa3a399239b732c3094cf1854c16e9d64f0f70831b6ecfa95c95e51bcf96388bd51eae2e1f869f7ec223456a2174bf7967c766f0158e63ee80d26d7be068ab4dd3dc12a7b8fec64e7febefde435007f86b1917181c3bfc462d619e6530ce8b29ec0e9f84939a13e9801891b2e010f1a4eef0cd3ed222842e3340fc543ea93ea77f497dd34a733bd395b2b731f9978981aea993a583919e7858883dba91dcd0bf7cdce0e7a3095aeb484c9e5a826ec5bc18ace0b94c22a438d48e2425438f6b28e532609ea965212b35938467526be5f1c4711f77c71724fab8c02efd266d07bbc8187562b0f05bbcaf36d61a3c5975674f286496f7de2b182d18c8d2d91fee48b4464702d5ea5877cfea5cb2c0d8eb8961dfeb533de9fb6d9b6f1c36d5f947516e9e016198860dc0aba69cd6df6ed0545bb848d0ee39c715a03be08e3d6bc31bf247c61b39ddc3139c95bcd1127c72b402f6c85ea6a84f6825043daa3061cd7a89b8ca36d0e2b1bc9ee67856bb48b231f15628472bc486ba0346ef8cc0cd6003a331d4debcf2932cd55aff4521ed9dcde11fdcac4b00b3210e116805ef3e33fa071fa57238a58445219c930ba191ccb941a497c443af07f04c395f51560ca189fc88612049978a688aec2092682d2c859d43d672888697ff2e1c79153258183b25ce60864377746296285cbdf718c2d98d1fabda0f912ab51b6c509aeca8cc3268df39b24d3019b4b4481d99fbad1df7333e51064b62651d5074d15dc747f889e3b8a6e06b03cfad3729bfa2a32b54c0a2e43357c18618ca76fbe9d6c73bbd89bc91b66723db4f332bcd107c33e39fa5b2c8047a6e1bb47651a75770003dd81def3b880216d86b59b4178989c01a381d89fa3ce5a59f8c0d52840147edf3d4874f9f8548cdcb4248de49b010018047c8ca0a21e96d1fe014fe42d5dfaecd3a71aaf4c794aa124f320dfdf0ac56f7379e131f38c1ad35ecb1a7bf02c3d92cbab8c7e0292a5f56998808ddeb3f6248b19079cac63442cec5bea887415f3ba7d4abcf1a1720e6c4592db1e54d72adbbd9c6e4b973e418e1f0ccead3e2ed9ac8d73eb66d064fe46a7d7202b9c6d308b264e5df489885d5f268ee42d96e602866d6022993ddfa6b6d8e9bb1d4db24c9ac39bdfb032f6ef78ffd876e6527e610abe71dd91846e3481c42c7004d1626303ca20db12028ad454ff37c4cf3a0ea9b222b54ebf9cad964c6928360ae591848ebc73afdda8ec6ec114607c9d04e5f83086ca7bc8b5bd46cb26037b4ee5ae1b6bd4830409870748194e0e384bfd7ee7bc59b390f91265bc731327da9ba13e85c21823d6772526d3cfa7b75364aa8210e2471c056dd5508a45ff28a971f16bd0c8c5eac0ff02855eee5119ccef76aac0dc24b55c14da98326d6fa9a18a7cd624cd875b5cbabc6622199e5683f1aeb3db1e0b5e1e68a2bab899c2611697ddf847e668118e34d3249feec5acaac610b1de0a93b616d4169e21c605af2db636bd68d55ec734600066581036cbcb72aea0e7ce1e85e8b5b8a72e56bf194b0ca231efed284743c85f2567472d25e3351e703cffc6f0becead376dd5f03a8c4698d9b98b8195f923d00163bcae3e2f8310b205f4175abf2a3baf9cabbbe7d318973f18ad7c90f8befe31d5a847dd7339ec5211c744704c1f6ff9450d0c80bb1953b0bd11a6a4d01130b94767ca78424012b1325353e7178f0746846a8542f8cc0d4683b4641faba93c3faa7316d440f996703b0e114ae4b9438f620312ef0e57f086b2c548a165fe33716a307eaf9dded867b30874a1faa9340717570ccf2652fc64234e87fc9001e4bd9e0764dcdd06b41b9b0391f49f90d78919f977463a898a16d659139b42b3475acb0e21e03791cc2a67e6201bc8e5d21ec2ada301ea2059d97c956a8cd18fe3fa254d538db6792b7bee7d6113be242d5d7c0f2e5d417fa25efb533e14f538570a868454d468132cab5026ebb43f370386c83c96594b7d356d5cd98ff70ae2112b289c8422ce3586f849c72f4a327d2d22b399d4c7e244ac5f55ebf81f925e9a345e3444c15ff517fd72dfd6f5647ccec705a08ff07327e1973feec6f3b4c07b7617a8cb01d00da1f5771a8eefe8616672fad086821326a7a1dc1f9115446bc09ba8b0014b2afbc6d8331c88e99a7853efe47d68494b4f0d5e39db2c4b192fc007d6cf0e6033d0d50d566a5a9d6a75526f039d300e5ede6284d450fe52f3922626677b134425b1244af2fb1e7fb02d4b79c82ab7d36aa477f0f7ff318cd6855c043860f4270388e424e787f378f5744aac93e7be7a2594616362468eef588148cd3c41bbc913622170599f1944f91bd678d08c33828a9ec09580beee20144f9d6b970f0861dbfa2e1d2b6b6f78acb3994f81e7a5cf2f707776e5621e631281a28479e0cfb80cf0c4d94f2ceca6de4f96081a4e7ec117f8ced1790475c029348e3283a3eebf7393e9f78b5749762df0701811c380ae1a674ccaa2f3ab77aed6933c2b42adf9cc0f88c979208fdd34a4650598b530cc648ebc83e9e9b1690acb219b47aee5aa895df03fb18db233da107654625c02072c412768c1ba8a064696a50ce21a617107f54ead92f59be30c472188298a6a119c1637e7104bac746df3aeb5ba36da45a2431c2af96c913c260a8c735b35302a89fffd07737f84937ada31d8b3f8c49b70d9b00c76f44b2e80200a62c6b387e642ad88f7d97d3a6c0840669186f27c6b2456b9287ba0cab705e65e60093a00e29235c3aab285f830f890bdbe8ce5756c485afc55e44685cc874fdf2e93983e1137af5fb03c8d31d1ef354a2c8c6f22d6d434942ef864b8a5072cbb467f29fd3a2cb8f136c11b4e44683f1b98a4a5e65ed3915f8691c24dddf4cc0956d6001a804e686edeb56130123bdee8b339dd8690b18c7c2f53c0df25e5d992374bd7af68d26af5302e8871770445968dfd3d6dd204de36ae8350aa6267bd19afdd68ac84a7bf972abd241ad04edcd2da383ad5950d62fe6af3a92546ecc1e3832312701584afa145f625b7aa5bf60263325995640b6f0d4371ce0cef08dd493565e4072369e36e945d75473eb0a64671edd9f7bda776e87bf2e7ecea8943ca2ebc3ed5d71f9c57a127ad2d913c61ea86c10d61147b766abb22b60efdb5333d51a63b5f9b00b9ce5e9c7325de5dd00d1b604f615173692fa94f45d23aedb5ae2aa8cfe1bd7594ca14dde684dce494884255778bd9245ad62ca22083faf7f17ead804a6515cf5b1844f8b035506fa7507337a5b827810341adfb92181e51c1d6f2f1a89e9e89705df523c990f85a640c15db2a8722fcbc528087680e9f67746da8418ddb78495198e9922ec849490af934f27b6278842079105b3d014f84b3d26b8f78f73a13c9e6e854b50230021e6d3b3218bd097374ef52d3b85981cac24a74cf3460c1a522d7df0dfbd45375bdda2b5fd7551f18b8810189e9585375e22e7ffc57fb93d3ef5e08c7af5c5aee27f974658674781a3bb7511db8d9439bc8d545cc0127fb14788dde2aa74979c7e71bf15a7ac6c064b0b64552e791a5fe6842d3def835b3ff0c60f92679a1da7b5447251d153b06043ecd35b5989d8ac342f4818c566a2e0ef7f588a2aa618c8bb5b00b82f5b6bd60cba0fc8b7e8ccc904ec5e41b75b6ffc6d0c37e3b3d63f743abee6362247f72d31d9f5659ec7e981505ba7b3fd854b3dbfdf3239bd5ac76de831d125e37ecbf19a8d83abbd00ccd154251cf451d0ba0d0e2ff2e819b5f4d2e7d670c490609a8b69fe93aa923dae8099445a902e1719f7468b50deb552f6dd7514047a22d1675afebc15b2fb86e4c008f6db7840c5bfccebfe33e3594c9a72048bc56aad1ed08f6c25a51a1fce6492"}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121600, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000100)) 15:45:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000000)={"2c84d0bae2f5cda06410f8399f3fc851b49b85e3cd7814aff73ed813fe93", 0x6, 0x0, 0x0, 0x3, 0x100, 0x7, 0x10000, 0x6, [0x4, 0x45fd, 0x0, 0x7ff, 0x7, 0x2, 0x5, 0x100, 0xfff, 0x9, 0x7, 0x7, 0x80, 0x0, 0x80000000, 0x2, 0x1, 0x5, 0x7]}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:39 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x59) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffff6c) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x2) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/129, &(0x7f00000000c0)=0x81) (async) connect$bt_sco(r0, 0x0, 0x700) 15:45:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x2, 0x5, {0x5, 0xbd8, 0xfffffffffffffff7, 0x1, 0x2}, [0x6, 0x2, 0xfffffffffffffffd, 0x7ff, 0x4, 0x3]}}, @name="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"}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121600, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000100)) 15:45:39 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:39 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000000)={"2c84d0bae2f5cda06410f8399f3fc851b49b85e3cd7814aff73ed813fe93", 0x6, 0x0, 0x0, 0x3, 0x100, 0x7, 0x10000, 0x6, [0x4, 0x45fd, 0x0, 0x7ff, 0x7, 0x2, 0x5, 0x100, 0xfff, 0x9, 0x7, 0x7, 0x80, 0x0, 0x80000000, 0x2, 0x1, 0x5, 0x7]}) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000000)={"2c84d0bae2f5cda06410f8399f3fc851b49b85e3cd7814aff73ed813fe93", 0x6, 0x0, 0x0, 0x3, 0x100, 0x7, 0x10000, 0x6, [0x4, 0x45fd, 0x0, 0x7ff, 0x7, 0x2, 0x5, 0x100, 0xfff, 0x9, 0x7, 0x7, 0x80, 0x0, 0x80000000, 0x2, 0x1, 0x5, 0x7]}) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) 15:45:39 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000280)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x99, {0x0, 0x9, 0xcc7, 0x1000, 0x1f}, [0xffffffffffff4982, 0x83f6]}}, @name="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"}) 15:45:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x59) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffff6c) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:39 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:39 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000180)={0x1, 0x6, 0x2, 0x5, {0x5, 0xbd8, 0xfffffffffffffff7, 0x1, 0x2}, [0x6, 0x2, 0xfffffffffffffffd, 0x7ff, 0x4, 0x3]}}, @name="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"}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140), 0x4) (async) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x121600, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x80045104, &(0x7f0000000100)) 15:45:39 executing program 4: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x20, 0xfb, 0x5, 0x7, 0x0, 0x7fffffff, 0x6028, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7, 0x7}, 0x10, 0x1, 0xf4b, 0x6, 0x4, 0x9, 0x20, 0x0, 0x100, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0xa) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:39 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000280)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x99, {0x0, 0x9, 0xcc7, 0x1000, 0x1f}, [0xffffffffffff4982, 0x83f6]}}, @name="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"}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000280)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x99, {0x0, 0x9, 0xcc7, 0x1000, 0x1f}, [0xffffffffffff4982, 0x83f6]}}, @name="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"}) (async) 15:45:39 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:39 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x59) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffff6c) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000080)=0x59) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) (async) connect$bt_sco(r1, &(0x7f0000000200), 0xffffffffffffff6c) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:39 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9}) 15:45:39 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000280)={{r2}, r3, 0x0, @inherit={0x58, &(0x7f0000000200)={0x1, 0x2, 0x4, 0x99, {0x0, 0x9, 0xcc7, 0x1000, 0x1f}, [0xffffffffffff4982, 0x83f6]}}, @name="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"}) 15:45:39 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:39 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:39 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103500, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x60) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:39 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103500, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x60) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 15:45:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:40 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x103500, 0x0) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x60) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x20, 0xfb, 0x5, 0x7, 0x0, 0x7fffffff, 0x6028, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7, 0x7}, 0x10, 0x1, 0xf4b, 0x6, 0x4, 0x9, 0x20, 0x0, 0x100, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0xa) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x20, 0xfb, 0x5, 0x7, 0x0, 0x7fffffff, 0x6028, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7, 0x7}, 0x10, 0x1, 0xf4b, 0x6, 0x4, 0x9, 0x20, 0x0, 0x100, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0xa) (async) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) 15:45:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async, rerun: 32) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) (async, rerun: 32) connect$bt_sco(r0, 0x0, 0x700) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 15:45:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) 15:45:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "64e74bf5e63078"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x89, "105f35f08fd587"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "5de762204c2239"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa1, "0da1ab3f8fcb32"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x82, "b97bf26c0b6ac6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "a55192eacf7e7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e2d45c7032ca77"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5805dcc726ea51"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) 15:45:40 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000900)={{r1}, 0x0, 0xc, @unused=[0x3, 0x889, 0x0, 0xe3], @subvolid=0x100}) connect$bt_sco(r0, 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4009, 0x267, 0x4f, 0x3}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:40 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000900)={{r1}, 0x0, 0xc, @unused=[0x3, 0x889, 0x0, 0xe3], @subvolid=0x100}) connect$bt_sco(r0, 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4009, 0x267, 0x4f, 0x3}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000900)={{r1}, 0x0, 0xc, @unused=[0x3, 0x889, 0x0, 0xe3], @subvolid=0x100}) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4009, 0x267, 0x4f, 0x3}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) 15:45:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "64e74bf5e63078"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x89, "105f35f08fd587"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "5de762204c2239"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa1, "0da1ab3f8fcb32"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x82, "b97bf26c0b6ac6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "a55192eacf7e7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e2d45c7032ca77"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5805dcc726ea51"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [], 0x8, "64e74bf5e63078"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [], 0x89, "105f35f08fd587"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [], 0x5, "5de762204c2239"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [], 0xa1, "0da1ab3f8fcb32"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [], 0x82, "b97bf26c0b6ac6"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [], 0xf8, "a55192eacf7e7f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [], 0x40, "e2d45c7032ca77"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [], 0x40, "5805dcc726ea51"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) (async) 15:45:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x82041, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic}) 15:45:40 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0xbc54) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:40 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) (async) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 15:45:40 executing program 4: perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x20, 0xfb, 0x5, 0x7, 0x0, 0x7fffffff, 0x6028, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x7, 0x7}, 0x10, 0x1, 0xf4b, 0x6, 0x4, 0x9, 0x20, 0x0, 0x100, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0xa) (async, rerun: 32) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x2) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000000c0)) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:40 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000900)={{r1}, 0x0, 0xc, @unused=[0x3, 0x889, 0x0, 0xe3], @subvolid=0x100}) (async) connect$bt_sco(r0, 0x0, 0x0) (async, rerun: 32) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4009, 0x267, 0x4f, 0x3}) (async, rerun: 32) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:40 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0xbc54) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0xbc54) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) (async) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:40 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:40 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "64e74bf5e63078"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x89, "105f35f08fd587"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "5de762204c2239"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa1, "0da1ab3f8fcb32"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x82, "b97bf26c0b6ac6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "a55192eacf7e7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e2d45c7032ca77"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5805dcc726ea51"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) 15:45:41 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "64e74bf5e63078"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x89, "105f35f08fd587"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "5de762204c2239"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa1, "0da1ab3f8fcb32"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x82, "b97bf26c0b6ac6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "a55192eacf7e7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e2d45c7032ca77"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5805dcc726ea51"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) 15:45:41 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0xffffffff, "6be2072fa64517a333875bd5680b6a8d873d6cdfa19a6c5c8f0e6f7686870528"}) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 15:45:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "64e74bf5e63078"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x89, "105f35f08fd587"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "5de762204c2239"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa1, "0da1ab3f8fcb32"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x82, "b97bf26c0b6ac6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "a55192eacf7e7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e2d45c7032ca77"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5805dcc726ea51"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [], 0x8, "64e74bf5e63078"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [], 0x89, "105f35f08fd587"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [], 0x5, "5de762204c2239"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [], 0xa1, "0da1ab3f8fcb32"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [], 0x82, "b97bf26c0b6ac6"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [], 0xf8, "a55192eacf7e7f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [], 0x40, "e2d45c7032ca77"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [], 0x40, "5805dcc726ea51"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) (async) 15:45:41 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0xbc54) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0xbc54) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_SOURCE(r2, 0xc0045406) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) socket$pptp(0x18, 0x1, 0x2) (async) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) (async) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:41 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async, rerun: 64) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0xffffffff, "6be2072fa64517a333875bd5680b6a8d873d6cdfa19a6c5c8f0e6f7686870528"}) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 15:45:41 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_sync_fs\x00'}, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:45:41 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000044200)={0x8e, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "64e74bf5e63078"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045200)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x89, "105f35f08fd587"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000046200)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "5de762204c2239"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000047600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xa1, "0da1ab3f8fcb32"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000048600)={{0x0, 0x2, 0xa0c, 0x9, 0x2, 0x216344ad, 0x4, 0xffffff6e, 0x8, 0x400, 0x3f, 0xfab, 0x8, 0x4, 0x8b}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x82, "b97bf26c0b6ac6"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049680)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xf8, "a55192eacf7e7f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a680)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x40, "e2d45c7032ca77"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004b680)={{0x0, 0x9, 0x298, 0xfffffffffffffffc, 0x40, 0x8, 0x2, 0x1000, 0x2, 0x0, 0x1ff, 0x8, 0x2, 0x3b97fdca, 0x3}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b740)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5805dcc726ea51"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c740)={{0x0, 0x6, 0x7f, 0xfff, 0x1, 0x4e, 0x20, 0x1400, 0x0, 0x4, 0xffffff97, 0x53d, 0x3, 0x8, 0x56}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c7c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004c9c0)={{0x0, 0xfffffffffffff8c7, 0x14e000000000000, 0x101, 0x4, 0x8, 0x7fffffffffffffff, 0x8001, 0x2, 0x401, 0x3, 0x4, 0x7ff, 0x3, 0x3}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ca80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004cc80)={{0x0, 0x2, 0x0, 0x2, 0x7f0, 0x401, 0x20200, 0x7, 0x200, 0x2, 0x5, 0x4, 0x7, 0x5ebc, 0x100}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004cd00)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {0x0, r2}, {0x0, r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {r7}, {}, {r8}, {}, {}, {}, {0x0, r9}, {r10}, {}, {r11, r12}, {r13, r14}, {}, {r15, r16}, {r17}], 0x0, "217a5019fa663d"}) 15:45:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 15:45:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) connect$bt_sco(r0, 0x0, 0x700) 15:45:41 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0xffffffff, "6be2072fa64517a333875bd5680b6a8d873d6cdfa19a6c5c8f0e6f7686870528"}) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0xffffffff, "6be2072fa64517a333875bd5680b6a8d873d6cdfa19a6c5c8f0e6f7686870528"}) (async) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r3, 0x0, 0x0) (async) 15:45:41 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) connect$bt_sco(r1, 0x0, 0x0) 15:45:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 15:45:41 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) connect$bt_sco(r0, 0x0, 0x700) 15:45:41 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:41 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x1d) 15:45:42 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_sync_fs\x00'}, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 15:45:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 15:45:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 15:45:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) connect$bt_sco(r0, 0x0, 0x700) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) connect$bt_sco(r0, 0x0, 0x700) (async) 15:45:42 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x1d) 15:45:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/37, &(0x7f00000001c0)=0x25) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000080)={"92627baeb09b5ea168ed60a64c8ae40cbd4aad5a0026f984e95d324d685e", 0x400, 0x1, 0x0, 0x7f, 0xcee1, 0x0, 0x2a, 0x2, [0x3, 0x7, 0x0, 0xcf0, 0x4, 0x800, 0xdfe, 0x2, 0x6352, 0x200, 0xf86, 0x1000, 0x66c2, 0x5, 0x6, 0x5, 0x3, 0x2, 0x3ff]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:42 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x1d) 15:45:42 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000900)={{r0}, r2, 0x8154cb7393b5e80d, @unused=[0xac, 0x3, 0x4, 0x212], @subvolid=0x9}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x210001, 0x0) write$sequencer(r1, &(0x7f0000000040)=[@t={0x0, 0x1, 0x1, 0x3}, @n={0x1, 0x1, @SEQ_NOTEON=@note=0x34}, @s={0x5, @SEQ_MIDIPUTC=0xc9, 0x14, 0x40}, @t={0x81, 0x3, 0x40, 0xd2}, @e={0xff, 0x0, 0xe, 0x6, @generic=0x7, 0x5, 0x55, 0x8a}, @raw={0xfe, 0x2, "d9f13614b532"}, @t={0x81, 0x8, 0x0, 0x6}, @v={0x93, 0x2, 0x90, 0xa, @MIDI_NOTEON=@note=0x4, 0x81, 0x2}], 0x38) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x7ff) 15:45:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 15:45:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/37, &(0x7f00000001c0)=0x25) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000080)={"92627baeb09b5ea168ed60a64c8ae40cbd4aad5a0026f984e95d324d685e", 0x400, 0x1, 0x0, 0x7f, 0xcee1, 0x0, 0x2a, 0x2, [0x3, 0x7, 0x0, 0xcf0, 0x4, 0x800, 0xdfe, 0x2, 0x6352, 0x200, 0xf86, 0x1000, 0x66c2, 0x5, 0x6, 0x5, 0x3, 0x2, 0x3ff]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/37, &(0x7f00000001c0)=0x25) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000080)={"92627baeb09b5ea168ed60a64c8ae40cbd4aad5a0026f984e95d324d685e", 0x400, 0x1, 0x0, 0x7f, 0xcee1, 0x0, 0x2a, 0x2, [0x3, 0x7, 0x0, 0xcf0, 0x4, 0x800, 0xdfe, 0x2, 0x6352, 0x200, 0xf86, 0x1000, 0x66c2, 0x5, 0x6, 0x5, 0x3, 0x2, 0x3ff]}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:43 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_sync_fs\x00'}, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_sync_fs\x00'}, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) 15:45:43 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000900)={{r0}, r2, 0x8154cb7393b5e80d, @unused=[0xac, 0x3, 0x4, 0x212], @subvolid=0x9}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/165, &(0x7f00000000c0)=0xa5) 15:45:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x210001, 0x0) write$sequencer(r1, &(0x7f0000000040)=[@t={0x0, 0x1, 0x1, 0x3}, @n={0x1, 0x1, @SEQ_NOTEON=@note=0x34}, @s={0x5, @SEQ_MIDIPUTC=0xc9, 0x14, 0x40}, @t={0x81, 0x3, 0x40, 0xd2}, @e={0xff, 0x0, 0xe, 0x6, @generic=0x7, 0x5, 0x55, 0x8a}, @raw={0xfe, 0x2, "d9f13614b532"}, @t={0x81, 0x8, 0x0, 0x6}, @v={0x93, 0x2, 0x90, 0xa, @MIDI_NOTEON=@note=0x4, 0x81, 0x2}], 0x38) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x0) (rerun: 64) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x7ff) 15:45:43 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x20, 0xff, 0x2, 0x0, 0x7fff, 0x2011, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x64, 0xea0, 0xfffffff7, 0x1, 0x6, 0xd32, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xff, 0x2, 0x7f, 0x0, 0x0, 0x3, 0x1808, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0xfffffffffffffc00, 0x2}, 0x10000, 0x8, 0xff, 0x7, 0x0, 0x0, 0x40, 0x0, 0x85af}, 0xffffffffffffffff, 0xb, r1, 0x7) 15:45:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/37, &(0x7f00000001c0)=0x25) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000080)={"92627baeb09b5ea168ed60a64c8ae40cbd4aad5a0026f984e95d324d685e", 0x400, 0x1, 0x0, 0x7f, 0xcee1, 0x0, 0x2a, 0x2, [0x3, 0x7, 0x0, 0xcf0, 0x4, 0x800, 0xdfe, 0x2, 0x6352, 0x200, 0xf86, 0x1000, 0x66c2, 0x5, 0x6, 0x5, 0x3, 0x2, 0x3ff]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/37, &(0x7f00000001c0)=0x25) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r2, 0xc08c5102, &(0x7f0000000080)={"92627baeb09b5ea168ed60a64c8ae40cbd4aad5a0026f984e95d324d685e", 0x400, 0x1, 0x0, 0x7f, 0xcee1, 0x0, 0x2a, 0x2, [0x3, 0x7, 0x0, 0xcf0, 0x4, 0x800, 0xdfe, 0x2, 0x6352, 0x200, 0xf86, 0x1000, 0x66c2, 0x5, 0x6, 0x5, 0x3, 0x2, 0x3ff]}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:43 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x20, 0xff, 0x2, 0x0, 0x7fff, 0x2011, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x64, 0xea0, 0xfffffff7, 0x1, 0x6, 0xd32, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xff, 0x2, 0x7f, 0x0, 0x0, 0x3, 0x1808, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0xfffffffffffffc00, 0x2}, 0x10000, 0x8, 0xff, 0x7, 0x0, 0x0, 0x40, 0x0, 0x85af}, 0xffffffffffffffff, 0xb, r1, 0x7) 15:45:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"46587456f9b7b2b5ff6b997d55e8fe4a463584120db50ef56a89fa483af4", 0x100, 0x2, 0x401, 0xe8, 0xee2c, 0x1, 0xfffffeff, 0x1, [0x80000000, 0x2, 0x3f, 0x2, 0xdb, 0x80, 0x8000, 0x101, 0x7, 0x9, 0x4, 0x3dc, 0x6, 0x1, 0x9, 0xfffff605, 0xbc10, 0x8, 0xfffff001]}) 15:45:43 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000900)={{r0}, r2, 0x8154cb7393b5e80d, @unused=[0xac, 0x3, 0x4, 0x212], @subvolid=0x9}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) 15:45:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x210001, 0x0) write$sequencer(r1, &(0x7f0000000040)=[@t={0x0, 0x1, 0x1, 0x3}, @n={0x1, 0x1, @SEQ_NOTEON=@note=0x34}, @s={0x5, @SEQ_MIDIPUTC=0xc9, 0x14, 0x40}, @t={0x81, 0x3, 0x40, 0xd2}, @e={0xff, 0x0, 0xe, 0x6, @generic=0x7, 0x5, 0x55, 0x8a}, @raw={0xfe, 0x2, "d9f13614b532"}, @t={0x81, 0x8, 0x0, 0x6}, @v={0x93, 0x2, 0x90, 0xa, @MIDI_NOTEON=@note=0x4, 0x81, 0x2}], 0x38) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) connect$bt_sco(r0, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x7ff) 15:45:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"46587456f9b7b2b5ff6b997d55e8fe4a463584120db50ef56a89fa483af4", 0x100, 0x2, 0x401, 0xe8, 0xee2c, 0x1, 0xfffffeff, 0x1, [0x80000000, 0x2, 0x3f, 0x2, 0xdb, 0x80, 0x8000, 0x101, 0x7, 0x9, 0x4, 0x3dc, 0x6, 0x1, 0x9, 0xfffff605, 0xbc10, 0x8, 0xfffff001]}) 15:45:44 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) 15:45:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x20, 0xff, 0x2, 0x0, 0x7fff, 0x2011, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080)}, 0x64, 0xea0, 0xfffffff7, 0x1, 0x6, 0xd32, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xff, 0x2, 0x7f, 0x0, 0x0, 0x3, 0x1808, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0xfffffffffffffc00, 0x2}, 0x10000, 0x8, 0xff, 0x7, 0x0, 0x0, 0x40, 0x0, 0x85af}, 0xffffffffffffffff, 0xb, r1, 0x7) 15:45:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 15:45:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"46587456f9b7b2b5ff6b997d55e8fe4a463584120db50ef56a89fa483af4", 0x100, 0x2, 0x401, 0xe8, 0xee2c, 0x1, 0xfffffeff, 0x1, [0x80000000, 0x2, 0x3f, 0x2, 0xdb, 0x80, 0x8000, 0x101, 0x7, 0x9, 0x4, 0x3dc, 0x6, 0x1, 0x9, 0xfffff605, 0xbc10, 0x8, 0xfffff001]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f00000000c0)={"46587456f9b7b2b5ff6b997d55e8fe4a463584120db50ef56a89fa483af4", 0x100, 0x2, 0x401, 0xe8, 0xee2c, 0x1, 0xfffffeff, 0x1, [0x80000000, 0x2, 0x3f, 0x2, 0xdb, 0x80, 0x8000, 0x101, 0x7, 0x9, 0x4, 0x3dc, 0x6, 0x1, 0x9, 0xfffff605, 0xbc10, 0x8, 0xfffff001]}) (async) 15:45:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) 15:45:44 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"ce02e1c4a38337853afa73da946c671ef76ef839cd3d221abd1632c67304", 0x8, 0x1, 0x0, 0xffff, 0x0, 0x2, 0x8, 0x3, [0x8f4, 0x1b, 0x5, 0x2800, 0x5, 0x80000000, 0x10000, 0x80000000, 0xff, 0x1b7a, 0x9, 0x4, 0x800, 0xffffffff, 0x6, 0x1, 0x50fb]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) read$watch_queue(r2, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) connect$bt_sco(r0, 0x0, 0x700) 15:45:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0xfffffffffffffdba) keyctl$join(0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15:45:44 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) 15:45:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x9) 15:45:44 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"ce02e1c4a38337853afa73da946c671ef76ef839cd3d221abd1632c67304", 0x8, 0x1, 0x0, 0xffff, 0x0, 0x2, 0x8, 0x3, [0x8f4, 0x1b, 0x5, 0x2800, 0x5, 0x80000000, 0x10000, 0x80000000, 0xff, 0x1b7a, 0x9, 0x4, 0x800, 0xffffffff, 0x6, 0x1, 0x50fb]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"ce02e1c4a38337853afa73da946c671ef76ef839cd3d221abd1632c67304", 0x8, 0x1, 0x0, 0xffff, 0x0, 0x2, 0x8, 0x3, [0x8f4, 0x1b, 0x5, 0x2800, 0x5, 0x80000000, 0x10000, 0x80000000, 0xff, 0x1b7a, 0x9, 0x4, 0x800, 0xffffffff, 0x6, 0x1, 0x50fb]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:44 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0xfffffffffffffdba) keyctl$join(0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0xfffffffffffffdba) (async) keyctl$join(0x1, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 15:45:45 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) read$watch_queue(r1, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x9) 15:45:45 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) 15:45:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, 0x0, 0x700) 15:45:45 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"ce02e1c4a38337853afa73da946c671ef76ef839cd3d221abd1632c67304", 0x8, 0x1, 0x0, 0xffff, 0x0, 0x2, 0x8, 0x3, [0x8f4, 0x1b, 0x5, 0x2800, 0x5, 0x80000000, 0x10000, 0x80000000, 0xff, 0x1b7a, 0x9, 0x4, 0x800, 0xffffffff, 0x6, 0x1, 0x50fb]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"ce02e1c4a38337853afa73da946c671ef76ef839cd3d221abd1632c67304", 0x8, 0x1, 0x0, 0xffff, 0x0, 0x2, 0x8, 0x3, [0x8f4, 0x1b, 0x5, 0x2800, 0x5, 0x80000000, 0x10000, 0x80000000, 0xff, 0x1b7a, 0x9, 0x4, 0x800, 0xffffffff, 0x6, 0x1, 0x50fb]}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:45 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) connect$bt_sco(r0, 0x0, 0xfffffffffffffdba) keyctl$join(0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) connect$bt_sco(r0, 0x0, 0xfffffffffffffdba) (async) keyctl$join(0x1, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) 15:45:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) ioctl$SNDCTL_TMR_START(r0, 0x5402) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) (async) ioctl$SNDCTL_TMR_START(r0, 0x5402) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x9) (async) 15:45:45 executing program 5: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{@none}, {}, {@none}, {}, {@fixed}]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000080)={@none, 0x8}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:45 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000180)=0x1) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/236, &(0x7f0000000140)=0xec) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:45 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:45 executing program 5: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{@none}, {}, {@none}, {}, {@fixed}]}) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000080)={@none, 0x8}) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x981, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) write$sequencer(r1, &(0x7f00000000c0)=[@generic={0x88}], 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x40, 0x1f}) 15:45:45 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000180)=0x1) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/236, &(0x7f0000000140)=0xec) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000180)=0x1) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/236, &(0x7f0000000140)=0xec) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:46 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) 15:45:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) 15:45:46 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x981, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) write$sequencer(r1, &(0x7f00000000c0)=[@generic={0x88}], 0x1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x40, 0x1f}) 15:45:46 executing program 5: ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{@none}, {}, {@none}, {}, {@fixed}]}) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000080)={@none, 0x8}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:46 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000180)=0x1) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/236, &(0x7f0000000140)=0xec) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000180)=0x1) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/236, &(0x7f0000000140)=0xec) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x981, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) write$sequencer(r1, &(0x7f00000000c0)=[@generic={0x88}], 0x1) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000)) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x40, 0x1f}) 15:45:46 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:46 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000014c0), 0x7014c0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xffffffffffff1821, 0x0, [0x8, 0x8001, 0x8, 0xffffffff00000001, 0x6], [0x8000000000000000, 0x5, 0x7, 0x7, 0x7, 0x584b17a5, 0x9, 0x3, 0xfffffffffffffffd, 0x81, 0x3, 0xb, 0x4, 0x7, 0x8, 0x7fffffffffffffff, 0x6d79475d, 0x0, 0x3f, 0x4, 0x238, 0x6, 0x8, 0x2, 0x7, 0xd630, 0x0, 0x6a3, 0x8, 0x200, 0x6, 0x81, 0x10000000000000, 0x8000000000000000, 0xfffffffffffffffd, 0xd2f, 0x8, 0x7ff, 0x5, 0x6, 0x49, 0x1, 0x6, 0x8, 0xc2, 0x5, 0x8, 0xffffffff00000001, 0x8001, 0x101, 0x0, 0x6, 0x2f6, 0x5, 0x7, 0x6793, 0xfffffffffffff448, 0x7, 0x6, 0x7, 0x4, 0x5, 0xe48, 0x6383c742, 0x7ff, 0x1, 0x6, 0x2, 0x2, 0x98, 0x9, 0x8000000000000001, 0x800, 0x7ff, 0x2000000001, 0x1a20000000000, 0x27c, 0x3, 0xf4, 0x1ff, 0xf2a, 0x0, 0x2, 0x6, 0x0, 0xb15, 0x0, 0x8, 0x8, 0x6, 0x2, 0x76f, 0x1, 0x9, 0x8000000000000001, 0x7fffffff, 0x7f, 0x10001, 0x100000000, 0x9, 0x1, 0x80000000, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x8, 0x100000000, 0x1, 0x3, 0x5, 0xffffffff, 0x10001, 0x7, 0x5, 0x2, 0x8, 0x3, 0x2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000004c0)={{r0}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x5, {0x2, 0x4092, 0x4, 0x862, 0x7fffffff}, [0x2480000000000, 0x1, 0x6, 0x7, 0x1]}}, @devid=r2}) connect$bt_sco(r0, 0x0, 0x0) 15:45:46 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000000c0)={'binder0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x581040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000180)) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f149d0be2dfe6a612e255d6233e23561625bbfa4428ce0c0604ed698f30e", 0x400, 0x2, 0x0, 0x9, 0x2, 0x7f, 0xc6a, 0x5, [0x0, 0xfedb, 0x3ff, 0x400, 0x7fff, 0x1f, 0x2, 0x100, 0x60000000, 0xffffffff, 0x4, 0x9, 0x8, 0x1, 0x3, 0x1ff, 0x4, 0xf0, 0xffffffff]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:46 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x28400, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:47 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x5, {0x3, 0x2, 0x915, 0x8}}) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8) 15:45:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000014c0), 0x7014c0, 0x0) (rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xffffffffffff1821, 0x0, [0x8, 0x8001, 0x8, 0xffffffff00000001, 0x6], [0x8000000000000000, 0x5, 0x7, 0x7, 0x7, 0x584b17a5, 0x9, 0x3, 0xfffffffffffffffd, 0x81, 0x3, 0xb, 0x4, 0x7, 0x8, 0x7fffffffffffffff, 0x6d79475d, 0x0, 0x3f, 0x4, 0x238, 0x6, 0x8, 0x2, 0x7, 0xd630, 0x0, 0x6a3, 0x8, 0x200, 0x6, 0x81, 0x10000000000000, 0x8000000000000000, 0xfffffffffffffffd, 0xd2f, 0x8, 0x7ff, 0x5, 0x6, 0x49, 0x1, 0x6, 0x8, 0xc2, 0x5, 0x8, 0xffffffff00000001, 0x8001, 0x101, 0x0, 0x6, 0x2f6, 0x5, 0x7, 0x6793, 0xfffffffffffff448, 0x7, 0x6, 0x7, 0x4, 0x5, 0xe48, 0x6383c742, 0x7ff, 0x1, 0x6, 0x2, 0x2, 0x98, 0x9, 0x8000000000000001, 0x800, 0x7ff, 0x2000000001, 0x1a20000000000, 0x27c, 0x3, 0xf4, 0x1ff, 0xf2a, 0x0, 0x2, 0x6, 0x0, 0xb15, 0x0, 0x8, 0x8, 0x6, 0x2, 0x76f, 0x1, 0x9, 0x8000000000000001, 0x7fffffff, 0x7f, 0x10001, 0x100000000, 0x9, 0x1, 0x80000000, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x8, 0x100000000, 0x1, 0x3, 0x5, 0xffffffff, 0x10001, 0x7, 0x5, 0x2, 0x8, 0x3, 0x2]}) (rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000004c0)={{r0}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x5, {0x2, 0x4092, 0x4, 0x862, 0x7fffffff}, [0x2480000000000, 0x1, 0x6, 0x7, 0x1]}}, @devid=r2}) connect$bt_sco(r0, 0x0, 0x0) 15:45:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:45:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000180)) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f149d0be2dfe6a612e255d6233e23561625bbfa4428ce0c0604ed698f30e", 0x400, 0x2, 0x0, 0x9, 0x2, 0x7f, 0xc6a, 0x5, [0x0, 0xfedb, 0x3ff, 0x400, 0x7fff, 0x1f, 0x2, 0x100, 0x60000000, 0xffffffff, 0x4, 0x9, 0x8, 0x1, 0x3, 0x1ff, 0x4, 0xf0, 0xffffffff]}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:47 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r1, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:47 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000000c0)={'binder0\x00'}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x581040, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) 15:45:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x33, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x20, 0x3, 0xf, 0x0, 0x80000001}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @jmp={0x5, 0x0, 0x7, 0x0, 0xb, 0x50, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x9, 0xb, 0x6, 0x80, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f00000000c0)=""/238, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x6, 0x8, 0x66f800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x1f}, 0x10) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x18, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x4, 0x0, 0x8, 0xb, 0xa, 0xfffffffffffffffe, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000580)='GPL\x00', 0x1, 0xe5, &(0x7f00000005c0)=""/229, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x6, 0x2, 0xdfc4dabb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, r1, r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r4, r1, 0x22}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r6}}, 0x18) openat$cgroup_devices(r3, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) 15:45:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000180)) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f149d0be2dfe6a612e255d6233e23561625bbfa4428ce0c0604ed698f30e", 0x400, 0x2, 0x0, 0x9, 0x2, 0x7f, 0xc6a, 0x5, [0x0, 0xfedb, 0x3ff, 0x400, 0x7fff, 0x1f, 0x2, 0x100, 0x60000000, 0xffffffff, 0x4, 0x9, 0x8, 0x1, 0x3, 0x1ff, 0x4, 0xf0, 0xffffffff]}) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000180)) (async) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f00000000c0)={"f149d0be2dfe6a612e255d6233e23561625bbfa4428ce0c0604ed698f30e", 0x400, 0x2, 0x0, 0x9, 0x2, 0x7f, 0xc6a, 0x5, [0x0, 0xfedb, 0x3ff, 0x400, 0x7fff, 0x1f, 0x2, 0x100, 0x60000000, 0xffffffff, 0x4, 0x9, 0x8, 0x1, 0x3, 0x1ff, 0x4, 0xf0, 0xffffffff]}) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) 15:45:47 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x5, {0x3, 0x2, 0x915, 0x8}}) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x5, {0x3, 0x2, 0x915, 0x8}}) (async) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8) (async) 15:45:47 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000014c0), 0x7014c0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000080)={0x0, 0xffffffffffff1821, 0x0, [0x8, 0x8001, 0x8, 0xffffffff00000001, 0x6], [0x8000000000000000, 0x5, 0x7, 0x7, 0x7, 0x584b17a5, 0x9, 0x3, 0xfffffffffffffffd, 0x81, 0x3, 0xb, 0x4, 0x7, 0x8, 0x7fffffffffffffff, 0x6d79475d, 0x0, 0x3f, 0x4, 0x238, 0x6, 0x8, 0x2, 0x7, 0xd630, 0x0, 0x6a3, 0x8, 0x200, 0x6, 0x81, 0x10000000000000, 0x8000000000000000, 0xfffffffffffffffd, 0xd2f, 0x8, 0x7ff, 0x5, 0x6, 0x49, 0x1, 0x6, 0x8, 0xc2, 0x5, 0x8, 0xffffffff00000001, 0x8001, 0x101, 0x0, 0x6, 0x2f6, 0x5, 0x7, 0x6793, 0xfffffffffffff448, 0x7, 0x6, 0x7, 0x4, 0x5, 0xe48, 0x6383c742, 0x7ff, 0x1, 0x6, 0x2, 0x2, 0x98, 0x9, 0x8000000000000001, 0x800, 0x7ff, 0x2000000001, 0x1a20000000000, 0x27c, 0x3, 0xf4, 0x1ff, 0xf2a, 0x0, 0x2, 0x6, 0x0, 0xb15, 0x0, 0x8, 0x8, 0x6, 0x2, 0x76f, 0x1, 0x9, 0x8000000000000001, 0x7fffffff, 0x7f, 0x10001, 0x100000000, 0x9, 0x1, 0x80000000, 0x1ff, 0x5, 0x9, 0x2, 0x2, 0x8, 0x100000000, 0x1, 0x3, 0x5, 0xffffffff, 0x10001, 0x7, 0x5, 0x2, 0x8, 0x3, 0x2]}) (rerun: 32) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f00000004c0)={{r0}, 0x0, 0x4, @inherit={0x70, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x5, {0x2, 0x4092, 0x4, 0x862, 0x7fffffff}, [0x2480000000000, 0x1, 0x6, 0x7, 0x1]}}, @devid=r2}) connect$bt_sco(r0, 0x0, 0x0) 15:45:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x33, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x20, 0x3, 0xf, 0x0, 0x80000001}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @jmp={0x5, 0x0, 0x7, 0x0, 0xb, 0x50, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x9, 0xb, 0x6, 0x80, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f00000000c0)=""/238, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x6, 0x8, 0x66f800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x1f}, 0x10) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x18, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x4, 0x0, 0x8, 0xb, 0xa, 0xfffffffffffffffe, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000580)='GPL\x00', 0x1, 0xe5, &(0x7f00000005c0)=""/229, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x6, 0x2, 0xdfc4dabb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, r1, r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r4, r1, 0x22}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r6}}, 0x18) openat$cgroup_devices(r3, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) pipe2$watch_queue(&(0x7f00000004c0), 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x33, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x20, 0x3, 0xf, 0x0, 0x80000001}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @jmp={0x5, 0x0, 0x7, 0x0, 0xb, 0x50, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x9, 0xb, 0x6, 0x80, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f00000000c0)=""/238, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x6, 0x8, 0x66f800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x1f}, 0x10) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x18, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x4, 0x0, 0x8, 0xb, 0xa, 0xfffffffffffffffe, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000580)='GPL\x00', 0x1, 0xe5, &(0x7f00000005c0)=""/229, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x6, 0x2, 0xdfc4dabb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, r1, r3]}, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r4, r1, 0x22}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400), 0x13f, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r6}}, 0x18) (async) openat$cgroup_devices(r3, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) (async) 15:45:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x90, 0x11}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000380)={{r3}, r4, 0x6, @inherit={0x98, &(0x7f00000002c0)={0x0, 0xa, 0x73b, 0x3, {0x0, 0x6, 0x5, 0x80, 0x3}, [0x8, 0x9, 0x6, 0xa6, 0x8, 0x4f, 0x3, 0x3, 0x8000, 0xffffffffffffffff]}}, @name="8aaf78622529ccbfa42d4d828e06ad0f645a359ce300510883b9260cc4d997a1c432882c41e666bf9bd89536d7fcaeb5e5679fbbb5e80cf0b4f499e2f48de3642231cc159e48ae9a6a631f54af4de0fc20273100f8266b08d101f4b846735c13978326c32e128faa0e485a0e31d2c348f87a3f729c28707bf7bcf0843a5360cbac4a0b2ec9583119a84ab2cf67e36af3e329b1c437977e6be5168aa4a194406a354e508379d57343ca7ddb37f16fa520956bb20a5e669eaf5bedc9ae6458ee382c5a94d17cfd60922c16a4054b8f069d30ff816f1108374f9753ffd12f804a4a6d9199174f66a8c68cdd5a490b9ca58970487f636087c3deb15c471a6410c2f55bb7580d4aef88379c677bf455792a491cfdb71069d756ea0e6ff18f0e5a49b4843a97dbdeb13395df1548c8135b0ee486c58ca8ebb09e95e91938809585883cdf6cdb0a801f0939f69342148276d15990a092ee7e715091da160ded79c2b6092b1539e36c52aa9f73008f29fc19aabc416a9924df2e8a7b827e3ff2cad6b4937104994996902e0c7bc976eff6896843e0933d86dcdf67688bac53c997d7ff64fca631b653711668e5093bb2c42fa39979b4de59a2c34d7dae1477327e3ddaa1e9e9d3d861227ceb722b0606967c4c6c260f41c1018405fcedd850f857f6107721fef0a8ef7f1b06e9f604c1ac56af61bff156e973f422ca27b2ddc604d1f2b443a80b8ce18396b9d6d30b32b0b57c9ba4fa7fa6fe47de0fed19d89d529e679db14bf2de3bbc289e04a0ac3089212539c131b6a28eb155353a7020e8cf7f5c1bb89a8b18856eb0d91459e282d62feffb237094e573de1fac4cc35299c429245b090803b7174a31f5be28989cf426d11a6361b21ce4be5b2e599a0d540394bb6eefc996da0a46ed255417b517ee798c9afb10bf4f32a381e20114ab6a7cdaed8b75ada8dcce8b79d1ccaa00031678d4208b2ea72adcbf7ae769d9c2822620423b1d9f780d6b316d5bc50923a8044186d31c285b6f01d19d73a763af405af647f9b6323d0b1a329dae469fa8b8dbc2e9f4a1d3c3283f6dea001d739ba555edc1e4af1074cfbee738ec4803eacf36a9f28720f5b269f27f33f1a69f82708a9feea8f639ccfca45ed90a25921f232d583b979d33bb04e7730cbff20372dcb1d36c92ca5a4906093677e11394ba2c847509cd6437feeb9f494c61355c74479298244bb27b7edfd5fc15bb13c8b8a712ee724059c0196d8f6d343f65afb7a7f63dda5555fb3d90ce18543a44a16220af117841337b71828aa9dbd63f8d974b9c77b66b06d71b406f3bdd787643292de04e337e2b079b274e1f1c53e8d99879c5cd81ff35c512137c875feee8f903be9bd1dc83a5b6c4573bf5adefda05fbed7fb9d5f8d8b672f2002fdd193d1e52a6c9c33a278cf4b81aea819a295a9a683f8fdb26e69ad289179a55d6cf0a59265fd4f9863a998d6917930b64e601bf35680c104bdc71f3ce138c6f6ba51caca618ecd70b14b838facd81aa5bc6e2768a77193dcf5d968ddcaa830279f5b6f6c41f3361352b842143bdfb2c009e94f15abefe772a4c7570c3df6f36022335418e25fc0f34c94632227c26b30b02d5eb650a45798c248c4b9f5429b80b39df11e041c91c769b870c9dcb41234d8eaa6489329f0c2d30dbbf93f7f03b83f030210f6e7a8c72d9dc9bbc8e1e8ee7293bc8dded5604a93d872fbfb2727f15da7b80768ca096e7e561e7e1f6d2d7b5b888f54d0652573fcc4d3c90ce9e291b0207901de9670b53d1089705a5958212de2ee888cf81b74eafd534d087a5635366d45b9d7fb864fcb21542fc66d6153d3fa9cddb4c801734a4d9119bd54900672aef24673aaa93e36705cc63cfe429e31308cced010f33d0c246f64315001f58a1668a2e6639033270305ab61c186e039668519c1a0cf546e43cf9f102a4331848a17ec09068f0ff4a4128dab65fa227a9c3b8b119c5eab82b02122ec6db00be3195f50f926281112958475087c73578fe3d52ee921435af41f6d113a701b904612364900ea7a8da9267d9ab33403d9db94ca568a2079fd725545a7a928b344afbf1f370efdcc94503fda09c4f20a6be7a8a33286dc97bec3de09e78b00e2611fa5aea16fd18ca987347bfbf1b787a005b8f9fdbba611d7659a823d874e173fa88225716691db4357ab7705c1ea6c1b73b406cd5624c3a643177275679ed36032539ad8b771d5d9bda5a9d69d7cbf7f04230eb12e6f37f8bbb1d77bf64ffc24320315b72b6c4495b5db6ff102d969a48b33ccfcabe4260eacd43ba715072ee3d0eef8fb17114932fdf72a510840d081a1a07d7e7cda1b3cc703e0f3c6625ca47445669d09df0d1ff7063fde0af7137c7a0a81f6c29d032dea7b734f2d389402b2ef4027121f449613362398e0ed3015799527e228e85d1f550022bb91a694361d3fadbcb65b13b681d5776d7a146973720e757feb66968edd14e9df4c6072be09e8c6b74f189401774497e69b9d35cb5bc5ee31cb50946fb7433dbb6af56fc6a317c9f0d5546d4f753f565b2f603c89d3651ff446d6dc7f1bca97722ce9dbc9c33bcb7f875f9341fc519591d2850a3ee8b1a86b4dece5d29e817eb6c0700e7f9f7d34dd57af147519453231c55e711a17109b92bf36e13f930918786b591ea011c0ed94e82233e12000f40204866af2ee7dbcadb3289493709f00d7a598475330a3e6f129160851ad13da2df219009dd5011436bdfd0c1944666a612e0cecad82e2bd786a62d03a30f016d500b418dd79480911d7d163a2e9d2c533b3242ec4af918130f8a7f841c3678dce118bc91ec248babf4905069666b30863db3a104c8cc15f7ea60377a9145199e24bcfc80291df07afd892739810d465c256b73d8bed920eff1c45ee4d8624ddf0ff6edf4b5b7d6e54114f51df94bae6ff73e2b4ec48e2ac1ef2036b3caef5c46c742745c372666e424c2f1e672006491092c4f629d48763083cca966d171a7d606e58100428997ae08369868a1f9b82c98fdc8e29ac4c91f2248a8a38eb1a0eda52d7748264289e33c9bbc87708a2765b90e7e69d468946641f98f242391a75ae4465074b863f550560511ec413849fc07dfe3d3290eab83fa30292b1e4b4576d4a97b177d15fdf696c80618d0e6c973bec2fa7f9bc723320331104619a0433dd7493b5c0651d1ffe0b03e4cf55a46b54207e204d6428e5c48e5614fdaca691036aeea69a571ec8220bb931622487a0c72aefc27ae1e1f619cf1d3886de347d46bf86dcb711057437d77965334da8e07f9783a4ec7af93a24bf2505d3b51c286103ed5626eace6287858892384198d510ccf6e55fac492dbd6ae02085bbc7fce4bdd89051efc2c93e68d12a4da054c5e865de1ec31bf28a4044e0a8fbc965e6b239bc66518ebc40e8c90109a603829c3bb43e9137be2f9825936d0dc4c89e3458d0ab26cf5efef49451057b80d3b7c1461e52d4a6c8bb1cbca474d6280955b6651eef1854532c8d6776843235cb0d2cb2c65947c348cee4b78b9061918df26e9bb247228677691ff648c7a48500aaebe965cbf6e6644c1e3914136591e32fd25d6d311bf54e786f93c19a7f69540707cf10478c397d04872284ebe362523b5ca17b43bd4bb2fb03ddfb32c01269a378307ade5b7c4892466cefdfbb28aadb76f1fb60a2672535a87329b5cb7c96bd80039b2429d2e84a3d189b0d31a699eb8b20d084f9872eb3f8f64fde78416a118a439beb547de3feb1e574571ea0728e45b55735196a408a46ab9f96c04db6a0555a94eea8bf443adb32fc244db8abc7ef006309f213ae2c71d444a1d42ddb11bed72dd6c50b56b207315ee762829b51183fae3e56fd30339b90162b0ee5b38c1f3641ad08b490e52eb1f200cd2d5fc9e78f8a3aebabebd702be6354076a34045e0f7398e4791fcddd3f8f4b19edaf8649304e7d177d25c9517e9a22d7791672f0405baa63acdff6b80296645c541dab745256c1bf6d894c6de3b2f668f1dee97748d1134d79bdf61b36eeff945a269d70ecc430aeb09968804170c49f00dd062fa7701bae16901afa36c94ea3681327c0eaf231ce70e1b07c48c1cc6f562e3aa2a600a2ffeb7924cdb81378655685d75849da689265835826995ed99a6c5952fded48fc1194637aaef5c0957a7569df016947eb05837da6b250cb8e6c9f4170d8abf74869ae5ccbd9dcb475378fe5c7f67cafbe28b4ce1ff07002893512e761497e0dccf172ffca83e070cf26d84baa3e48f2b7fe9770e1cde7c2fba6c0afec05abbe2b72a9cb73fc961b6128d008785d2eaaaa68336804523e450acbed9570cc57832323d028327605f3605ad0dedce81f2f63fec6d96d5e3e96d89a17613a6e3abbae95082c7e03f9742487e6e43d85299ff3a9b4e2ddec63fe9374a5051286e6a8cb2712fca7a19454e6667230af638cd88c00ec8effaecbc138b8077f2ae6d1328e7b4b8578d30124b53ec1918adc2df9cdeeb2d67cf2b8ead39acef9fe07d31825e4eaf7c9c506691a023537c054e94dfb6346ca0bfdd8ab9c121132e9e2ac8d61cdfdddbacf4d5e0d24f67adc91b930e0df885245c219ab3cc69191701b9268043c0ca3800564c72139a7a12d2690a32737420d36661377410cdd78a104c327ab6742c24c24ca1c00a452988eec68b5b03f20c63d584147ef9ef3e1c74f8b057fa5cef57f35b125b78d674eada07a95ea206413c3d29c30f2561e6cee1339bc38189fac081f503f53f5e9e148b9f875974a80df2f2c775d8b9ebbfb324d08c2746cb972b01d6baf0871242b4e42c563b0384cdc5e164bc72c5f7cf520efbf274c38e0e346f245202d9cc5b2e37d4da2e1ebf487f35c95f79da70dbb08d3bd313737aca8f1a3e1b88f3db16c7adadc03c6e67e53881b45daf82adf4b5767c504fc01f351c442b7275ef42538f3c4d4ee5be2bfbe4a038119cd6353212d82a25c20dc48bd200de59200834c78f9b9f5fb0a69cf64da19544e518d830aaf0a6f8cc4bb9accac3c36b8f1c676bc8a0a4cbe3d2ee4f9749cf048889ff5d3713ae3b11f6e8bec900a1cc67f7f74cbe833ff492e2463dee5ef483a5aca74d8882bbe37975d102e97b4435b57ca91b8ab3715e1aacf897179ffe24be614a5c5f6f47813e8310604dbc547e8865b97344860e7a32aa7d4bdd4ee52667af60694f7a5d5f88790608f525409bc120d3e59dd400f132603125e4175992dba44fdf0112e38ec47fa18729bfcd0ba8f849b4b303263b0daec2a7a8555a2753d2432c3e35183972ad9e315f52c602c316a5b7eaee4305105e890e3008013ffdf5663502fd4f75359977828815b3846488ef4de0d4b7c703ae3a2b5bfe8f8c92ccf8d3a80ccd22beff5618939e0727e4096b5535f88586ae00b85a6ba84e7c2cb02f9509f3697ae7c3b0cafb8c1fafd6d7f1ac2752a6bd490a7c0d1beb9b5498d1100f4d77aabf3753ac7e3e45aa66974026b91ff18ced56ed96a5694bb2b9468254332bd7e6eb158fd81d596340be2f038bd24b26faa38430907436d1d0d37778a4d6e83d3665748e9ad43f3860409f3d244b435623bc018ebb43451fe950c02207a2c7d16fc373bb5af1a6d91a4ed13a42646ba0993c036c8c9479f135a5c494b7fdd8838f4d82d846eda87f0f4baf6514f8116b8c543df77b6313c40e39c8bbe6f8c5e6e1b7c99f6cbd7e"}) 15:45:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 15:45:47 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:47 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000040)) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x2, 0x5, {0x3, 0x2, 0x915, 0x8}}) (async) connect$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8) 15:45:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x90, 0x11}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000380)={{r3}, r4, 0x6, @inherit={0x98, &(0x7f00000002c0)={0x0, 0xa, 0x73b, 0x3, {0x0, 0x6, 0x5, 0x80, 0x3}, [0x8, 0x9, 0x6, 0xa6, 0x8, 0x4f, 0x3, 0x3, 0x8000, 0xffffffffffffffff]}}, @name="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"}) 15:45:48 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000000c0)={'binder0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x581040, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000000c0)={'binder0\x00'}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) pipe2$watch_queue(&(0x7f0000000040), 0x80) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x581040, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) 15:45:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x33, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x20, 0x3, 0xf, 0x0, 0x80000001}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @jmp={0x5, 0x0, 0x7, 0x0, 0xb, 0x50, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x9, 0xb, 0x6, 0x80, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f00000000c0)=""/238, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x6, 0x8, 0x66f800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r2, 0xffffffffffffffff, 0x1f}, 0x10) (async) connect$bt_sco(r0, 0x0, 0x700) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xa6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x18, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x5f}, @alu={0x4, 0x0, 0x8, 0xb, 0xa, 0xfffffffffffffffe, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000580)='GPL\x00', 0x1, 0xe5, &(0x7f00000005c0)=""/229, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x6, 0x2, 0xdfc4dabb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r3, r1, r3]}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r4, r1, 0x22}, 0x10) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000480)={0x1, 0x10, 0xfa00, {&(0x7f00000003c0), r6}}, 0x18) (async) openat$cgroup_devices(r3, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) 15:45:48 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) (async) 15:45:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000040)={@nfc={0x27, 0x1, 0x0, 0x7}, {&(0x7f0000000240)=""/4096, 0x1000}}, 0xa0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001380), 0x20000, 0x0) ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x90, 0x11}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xe}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000380)={{r3}, r4, 0x6, @inherit={0x98, &(0x7f00000002c0)={0x0, 0xa, 0x73b, 0x3, {0x0, 0x6, 0x5, 0x80, 0x3}, [0x8, 0x9, 0x6, 0xa6, 0x8, 0x4f, 0x3, 0x3, 0x8000, 0xffffffffffffffff]}}, @name="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"}) 15:45:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) connect$bt_sco(r0, 0x0, 0x700) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="186900001000000000000000001000009500004000000000356d1a73a26c14225be07502507722cdb6411a37376121c1661df3922c5cf81c56eb8676a212181c27dbc64e0c74c8b6d63157e0865d1265a9f92d39058de811220000000000000000000000000054cb58bd63c1000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0xa3, &(0x7f00000001c0)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2]}, 0x80) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket$isdn(0x22, 0x3, 0x26) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000900)=""/4096, 0x1000}, &(0x7f00000003c0)}, 0x20) 15:45:48 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 15:45:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) 15:45:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x700) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="186900001000000000000000001000009500004000000000356d1a73a26c14225be07502507722cdb6411a37376121c1661df3922c5cf81c56eb8676a212181c27dbc64e0c74c8b6d63157e0865d1265a9f92d39058de811220000000000000000000000000054cb58bd63c1000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0xa3, &(0x7f00000001c0)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2]}, 0x80) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r4 = socket$isdn(0x22, 0x3, 0x26) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000900)=""/4096, 0x1000}, &(0x7f00000003c0)}, 0x20) 15:45:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) (async) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) 15:45:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000040)={@nfc={0x27, 0x1, 0x0, 0x7}, {&(0x7f0000000240)=""/4096, 0x1000}}, 0xa0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:48 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x0, 0xfffffd11, 0x7, 0x484, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="d1943000ffffffff2e218c801dbeac703d26bc08938be7a317dc2d8b641c5ea749dc36621c7a7386f82fe2ddbd35df68fa37151c185bb1ef9900c9bfc502192c2e43fdacf6fa3ff6658a403fa8627912b7cbd3210c645fe1bb3b4955fd5da05ed1b2ecc9"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x8000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r3, r4, 0xffffffffffffffff, 0x1]}, 0x80) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) connect$bt_sco(r0, 0x0, 0x0) 15:45:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) ioctl$SNDCTL_TMR_SOURCE(r0, 0xc0045406) 15:45:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000000)=""/204, &(0x7f0000000100)=0xcc) connect$bt_sco(r0, 0x0, 0x700) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="186900001000000000000000001000009500004000000000356d1a73a26c14225be07502507722cdb6411a37376121c1661df3922c5cf81c56eb8676a212181c27dbc64e0c74c8b6d63157e0865d1265a9f92d39058de811220000000000000000000000000054cb58bd63c1000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0xa3, &(0x7f00000001c0)=""/163, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xa, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2]}, 0x80) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = socket$isdn(0x22, 0x3, 0x26) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000900)=""/4096, 0x1000}, &(0x7f00000003c0)}, 0x20) 15:45:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000040)={@nfc={0x27, 0x1, 0x0, 0x7}, {&(0x7f0000000240)=""/4096, 0x1000}}, 0xa0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:48 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x0, 0xfffffd11, 0x7, 0x484, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="d1943000ffffffff2e218c801dbeac703d26bc08938be7a317dc2d8b641c5ea749dc36621c7a7386f82fe2ddbd35df68fa37151c185bb1ef9900c9bfc502192c2e43fdacf6fa3ff6658a403fa8627912b7cbd3210c645fe1bb3b4955fd5da05ed1b2ecc9"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x8000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r3, r4, 0xffffffffffffffff, 0x1]}, 0x80) (async) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) connect$bt_sco(r0, 0x0, 0x0) 15:45:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:48 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x3) 15:45:48 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:48 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:48 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x14, 0x0, 0xfffffd11, 0x7, 0x484, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x48) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="d1943000ffffffff2e218c801dbeac703d26bc08938be7a317dc2d8b641c5ea749dc36621c7a7386f82fe2ddbd35df68fa37151c185bb1ef9900c9bfc502192c2e43fdacf6fa3ff6658a403fa8627912b7cbd3210c645fe1bb3b4955fd5da05ed1b2ecc9"], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xe, 0x8000, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r3, r4, 0xffffffffffffffff, 0x1]}, 0x80) (async, rerun: 64) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000000)) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x3}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x3}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x3) (async) 15:45:48 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400001, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000000)) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 15:45:49 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:49 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)="631cf4836f710af57f2a2392f6684912ff771881d440806132f95f305e1913a595f3889e8a84b67bf49e033b2280589509f23498550330a4928f8e662d545561583a874da809ace26949a1840254f5f0c02d6b447335de4f9c1b8730ee1a62261ffc6029f4680b37207429f2e20bcd12a919efac1a3ee0385cab2e0420910dcabf9b652f63c3165691a2cad1ecbdd8b51feb107d05c036ff1b5f5d1d56", {0x9, 0x9, 0x31363553, 0x3, 0x7f, 0x1, 0x3}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r1}, r4, 0x6, @inherit={0x58, &(0x7f0000000280)={0x1, 0x2, 0x10001, 0x2, {0x0, 0x9, 0x6, 0x7, 0x2}, [0x5, 0x9]}}, @name="8de33e3e01c52e5850db8c893c4d3676d62853a0adbe967f302bbc555a1c28f67ddda522c4c152508e6305fc5ed87ada94ff36d3329d832a1955a5e2f33b93f6563c6dc1a394f560c37b87e403f780f42e5fe2c8ccdca1c9b540e43686d3bf5a60c60b6068d720ba4c9730928e6e6d261ffe1f918f1edccb8b90bdaec58f8c899773b6c120cec8ec5ee9a44146af213a8b5dccfea64b14570ec9dfde3847e4cf35325e0b05eb299f464343f2e7c1e09d7d9318c25da3d5b882dd409387d9170eb9bd20412b39d2dca923de84f055fe2b892e24e6d9e542cd0f92b96e34e09a2e93be936ff23df702d289e4a2cc7f0a0bb924e70eb8470de1944297e92d29f714ddff8be2fd5b68900dcbf35b96ece4a1c0636f08c09238bcb725132ef33f39c1ccc1a8151cf583fa381ce718658d63366f6c1ef7d7bdfdf5834d342763cc368619deb4aabc7cb60ed4b9efc6444878bbb27575886c74556090a9eb980c21737ad0e3a7811cfd702229063bc67f9e5a02e2cee229a8687fb1ae1bfbed25175879e5cd35db2813121249e2a20241f6feb46e549f8d5790f1f9564fee18d95ca119a31366d20b37d55299a419cb7845cce3f4370c33891298c01811841496d5bea217a47e646ea636f428f3414cccbe524b6b04b70aa9bae3eabd182673b658dedc7ebc81b31f312c3ebcb1b16e3dff322b0a349be60d3c59557d8cf9ddaffaea145c21fbb8f8b30ce67d55ed0172a4d43dd3962f9965d06d96273d26dbece34895381e920e91da0819a493bffd60450786e9a4ffa49a2b752b948e407ee74c25e1218ac1eb09b58bed9bf376a40c2f357b127bd8c34c8c9f86554280731da2cc069ff1b3774d9acca53b1c3228e643984aa323845540b37da14ee55b96e2a794d7e087f1a6ebfbb80d15b4185ac59ff1ed791ba06879ac3e2c68efc4953dd4ed54f0dc1642214cf0b575dd33f1105950d07985dc33aeac008b937ddaa09f379f2daa0097740ba9cde45849a3138203fcdda136350d834a72c285e5a107db5848e9bf22c5d8d872a641d361596c23d7926a3a4abb27fe34883a079b90e9b622cf675d6940a0d237dba098c17fe19f8f9768a875e3585bce6c8ec4bde874da8ab38efaf4d75ad238ad17b906c11731eb0ed2c45d056cf4d4a717ac5d02f3ddfa749a447d14f2e1912d47b579310dfdf258de05099979331697202f32dca3cd0343127a9d5dd51eb41dac51499d165f02448c6a0ef97309865783cb4f4b26681f04650b4b38a14bc3adb6bd36fdc12345dd0444fe7ec863e9f03c5b49dc7b26fc260bcc2ec65de430ba12e658b608ddb68fa0c9666482b676ad805e60763f1383d420b42107f9311fcf2992ce44593ef93982fc8c293fdc8a5b7c005437c92adb7de1aad7125e20965dbba427e8e3feda0db63e5eaf1c68ca6bfc90c27a33c8c4f1367ea01cc65ed48622df2167082f8305c39f699cc9b36af7f4b11dd516b75d32af0c26d951ff92c29482050ab5322dd61f92b2fe8115b5226a2fdf7a78700fc78c8e4510259d201364c95dcc40f30f267ecfe063222e3be7abd4ae56e007e807b5ff00c1912d3ffc14761c344f48a14117a9a937c3a68c4a45ea77248afaa8987cabfc1d8b4e129ffb178a4cab6b6fa5ed090bf0d3ccc0ef4244feb4e50e4927ff8e05ea877eefd68c30d1ede8aa5b783886a4f112ea84b60f5566ccd3aba9bc2f917dddb11d831ce89d91895c82accd7743387647acaec01d0fee652601d3d11909ed32143b9598703118aefc691cc8f6fd4b3f8c0a5fc2c6ab68bd25b7eb2ffe9355a1d069587fe0dac4b48a8d18956bbb5ad3cb725f6019a0b9c1063fcfb0b0c336dea773804f503e55305819b33ad3e642345d9c7154487a240de60e7a169541578bd7f3bbf7f6cc894b9d50037901d7496c0f59265b1aff59478262c27783e70f8036590adb806c548ff6709f50b02ae2591d5f99cec1d25f910ed9fb303c0b80040afc53a3044bab8f5575097b5cdab168125ff62a4c581a7e2aa6e00aea6a1efed265f908a4bc760bb2d866272c09277f1e9e150f05be0d75bbecee6ef3d6e37a10c707310758f27d2cd6ef36273d8bf1e7387407e738e8b7f17c8611d9c27cd9c10b5a647e530daf896cdfd8151888b696fe2cd2f3ba0d94d5f98f279424c3a924bcc571a91f61719bdc478bf864f7d7584716d9de415104c80e6138498cc35404ea4189f2e8e41300ff7951ac3ced76ba32cefd4fa4751e5b339794e5aaf9a154f3fa2df87062070bc11b3155f3f073f3a25eb888b946bc13624139f8a2f40fcbe4df483a3b67627606688516ed84d933a051fe8d9d416a4753a24e5dd7043458b0222e50c6dd14c33baf1ac2ee0a0119c01fbdd3e3c524ff653d960aa1ebd60632725af3a9245a713acc5ed9cbce402d0d4ca4dd531356129bdf1b272dcab9ad5d9a298522f35cbd5d2d05179d0ea7209d124c1b7f7d7d77d46e6ce2235b173ff9d86f1f728594236122741be4b34fa682fa9da97c08f3bed293df661b02103485d4b802c5a8f53e3171c8ad3816d693a973d5c60feb351c4599761d7642a9f4db64fe766fcbad8774dbd87c82030a00b3ab5e98e14d0b15d4d0925b9a6f02b150cb3f2e6752728777fc8d9231ea86acb4b5c1d8612e88bef6f019c4aa94c1dc4c223f924c6dd14a2cf7adf55275bf822a44f9e9f4fd6da246b718494dcb2b4cb4f0a13de2ce9a84fa8e76359f0b61d1ca046ba874d4c3223e52455b1979e1f5d5b7168a5d2f637402df3f6d540dfa2f2c8e8d5a4df1a7bd33b15046e84b049a37e8cc1131e209c6b2ec8f460a86e818462c5cfce5b30135b98d6a1198a218a373411698c70fd2f38050ca46938c6d77352324c839f0af3a036b0dde39e385b49f8b9f591f88bacb24fac0e88e9a21ae4a95d9770f3b64e22da0659e91b3279d9bda7b2eb98d170b0c7cc0b4a96729e169e34c375f26bd2a0e85b59bf85cc5155b172ab2a691d677f4ace6abe4510500de22bffa3bfc286b179f91b255da0f4371255fe03ad2c9640582e97ebb82ec09f2260081e35135dfab654139b8a67aaac3b437e2cd07fe6d1b97645536c4865e1ab23f46b20129ce1b8f74202e406054ccf7fddb0a7bdf843d6fa8384b8c6d84548d3fcfd01a43c5b53cd7e16163d9de0f75c9c9c1af68ae25b9c83ecac17fa5ec367669539b295c690149664a3edf983b747c22d9f9773de5d44f581b9abbd8c23114fa5eeb0f3730165a6b326993a0ea9017ceed9362ea076245d8ac7a1093004468f26c769b55ab4021edb347487e49741bfb6a6bf9c11033b802ac38d3c4b0e7f5faab3704ec7a785ee40fc0a623bad802bebcf34a1e4c82a19a4e48024710f8c1a7ba994fa90bd41301adf5868bd4962584a3313a5adddf4ccac92b6db8b646ec6fcb70ef0ffd7ca05fc06577c86df19c704c91d8aabb84e2c43cc2a72d55224c182fd81cd23dadf3fec53875d6295ae0a7982489a1caa821a50bb5ec140a8dd05f09933ad574573452cd0d69baa693208c3da2646fbd6231295721e60423095ebdc72e52ae653e021609f60e34958e735838ed1f24eadf36e971ab10a99da61df1f69d1bb5902a2f69d2fd8f918fd8bb722ac15f12167084ae792c99bf2f77ea64bf9451959c58a82d23b115477ccd5599d5753c4d413a862b749c608eaba57000af6ca1b24f7a4450a4c5dc4605c780bd0a7d2a853c44bff2707d37dc47dea03baf6c2d4d8a5961da7dd4fca2d3af52e12f756574a3cbbda19ccea4d020ad0d34c0071368fa427ede7df0c908923174a6fce37cfb8bbe3049c6e946e0abb929fb9609bce62f701fda2002d8034580d5f3a90650117e2459d850cb3854f8e8551ca3c18fa0405b5b767f1af85e3a696d0b32d3f740585ed5f0d5ba165ce0a61404dd73810fd5fe9cead0d2cca9b85aeb2cc5c59c6d46c99439da8f5429e6d5d4255a62bb3bb35e00652ad200dca09b82286dd621592538637bf64081e31fcfa88c8c6d86154eed52e612530ba835f841ac142843764f649673efa356017ef237a935ffd2a64e8aa1d16a53349c0327c84af926a987869ed35feb609d9f781ac1dea819b55b9c97b0f15c041e216d5ead8dcf115635b0cf310d558d67fde73ba1bf57caca10b4c4b970e9e44dee443ba977a0b9c8249bb2442a1650b579f0882c1fdd00cff674e9a240096d0c00b9ad78e6efe1280869d00a6e222349e9fc0727908df8af5be5912507cdd6560cea1d6df84ede1b6d808d2624a2edd2aea426d8387b22e2f5bcf8bd95554c82834e7d166195b51d3c94b7c3d9ad780021cc05721a04e198d91b39c8597150667e83c77c6d4ae30385e4d4040c1a17e60a6971fa8cbba7ac96b1598b31895ffa27773f5be62ef0dd43788017a907f8572eb293b508db67d6a9b5527ba069fed7ec8ff14b6f965523bd868474137d7afcd1432119bfe715db39b1b607a55d7bf12d78338ceb9f082bcbcb20462a1ef5c34d9957c36d2220a7f28e58fd55bf6ad5e4ca3dd5763494180b4a3bef2d0c4a73f894b53c58e4426c189edf03e8f0f397ba407046369d07860c3b33dc13be414a53df59e928531c2eb262caab88431fc61c984ee95705f26c5227a233c2d571a677baf8522eff624616affe6ba3146bf665e019cdd51cf71d6db3ec41847f9b2d2e3d7779ad6a529c4dacb392e4db867b46a1a1f91b2155f317fe74111824a9a45e67d8e4202ed98444e13f4b832612752074d67c2c5fb3e704f4864960eb9fbcdace8c443959af00b242156ae77cd3a210899dbf7acd77d41d72498b5530be27bec16417a5d15190d61c87ea9ee57d579d6cc6498695086e00721532fee5de5f10fd20c01859261d7ab91d06587d299ef846da04d8956697f65724ccedf9156c53d601e60a75073b6696ec0d598141e677205cff357f8dc9f3b6713fef498d920fd5024fee50526322a4eb253817dc63b7b28ce7b939a952de8294d80115ab1cad583a0d4022d0022116e0131da7235feab26370f2e7c886e2c8f42982f4c9e5e6ee0c38aad6ecee9257552d4bf18b9ce6dcb65d688e935a051eb722b407256f774dc9318614d0b0d9a8247bdfee7ab68e7cd5d032ff4a4705d20764ee71f9c119474c0ff74f42a9a3fcb21c9ead6e230a57e5eddaee76ec946906ee18607cf56e15fbb8c45c6551f0573ba2fca5963caa863ed16189d5d774ab209305b5cb87c00e6752042d429f2059fd46bb5de006d6505906ee09366a95fad0c70e51d458508cfbe2df3f6c0f4c49d3c535ebd102fc4421707c5f99c4c1eb0a008ad47e132a98391ce64a5ac77ba9be169c6a3abb0a4262edeff67b1e2e43ea16432dda2afc0f75f90ad9e09ce0377fea976cea8fe7ea2db142d53adc4d5d060d20671a1cf49feebc543553e024c2ccdd19758b8425573443d6b25cf829c53369eb8d3cdf7b3fc5deb085bd45bdcfc93f65d4cd4208c6362037788023d77cdce6515195f17086cf03d0944660f6033dab7959675ea13314222cef6caf5c903e369b3ada9d6182d092582c8ac49848fceaca9edbc297100f17d919507c4f646954c6a64af5a4836a5f003b0e19b9b4f7a4b9172aecfb978b94b2b8154694a6a35e315b1abbd4639492609e09e8adaa65b844e2f3e5e2ed4c76b05613898296d428f5f3128fc4605cc742ceef70e048d6a9e5072b1c7ff0e1c0b2"}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) connect$bt_sco(r0, 0x0, 0x0) 15:45:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x3}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000080)=0x3) 15:45:49 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000200)={0x1f, @fixed}, 0x8) 15:45:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x18, 0x0, {0x9, @struct={0x1, 0x7}, 0x0, 0x5, 0x4, 0x10001, 0x7fffffffffffffff, 0xa9c7, 0x1, @struct={0x401, 0x7}, 0x9, 0xffff, [0x0, 0x3, 0x7fffffffffffffff, 0x0, 0xffff]}, {0xcdd, @struct={0x3, 0x2}, 0x0, 0x38, 0xfffffffffffffeff, 0x5, 0x5, 0x7, 0x21, @struct={0x7, 0x1d97}, 0x5, 0xdb, [0x1, 0x0, 0x8, 0x9, 0x8, 0x200]}, {0x8, @struct={0x7, 0x80000001}, 0x0, 0x7b9c, 0x5, 0x81, 0x3, 0x1, 0x2, @struct={0x1000, 0xd6c7}, 0x1, 0x4, [0xec, 0xffffffff, 0x7fff, 0x1, 0xffffffffffffffff, 0x3]}, {0x1ff, 0x1, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0x438, 0x1, [0x7ff, 0xfffffffffffffffe, 0x401, 0x1, 0x3], [0x8000000000000000, 0x40, 0x8, 0x9, 0x10000, 0x8de, 0x6d69, 0x54575ae4, 0x8, 0x0, 0x6, 0x100000001, 0x8, 0xfff, 0x800, 0x8001, 0x8, 0x1acc4000000, 0x7, 0x8000, 0x6, 0x0, 0xfffffffffffffffa, 0x3, 0x6, 0x5, 0x9, 0x0, 0x1, 0x8, 0x1, 0xffff, 0x1, 0x0, 0x8, 0x2800000000000000, 0x7, 0x2, 0x15, 0x4, 0x2, 0x8, 0x0, 0xcca, 0x6, 0x7ff, 0x2, 0x7ff, 0x5, 0xe363, 0x2, 0x5, 0x101, 0x6, 0x800, 0xfffffffffffffbff, 0x3, 0x6, 0x87, 0x9, 0x15, 0x0, 0xc4b0, 0x400, 0x0, 0x1, 0xfffffffffffffffc, 0x9f8, 0xe0, 0x7, 0x40, 0x1, 0xfffffffffffffff9, 0x200, 0x48, 0xc57, 0x8000, 0x8, 0x8, 0xffffffff, 0x9b, 0x2, 0x7c, 0x20400000000, 0x6, 0x5, 0x2c3, 0x80000000, 0xac25, 0x0, 0x1, 0x5, 0x2, 0x81, 0x9, 0x77, 0xffff, 0x8, 0xffffffff80000001, 0x1f, 0x80, 0x4, 0x5, 0x1, 0x400, 0x5, 0x9, 0x9, 0x1, 0x7, 0x7, 0x10000, 0x100000001, 0x8, 0x7, 0x6, 0x1, 0x8000000000000000, 0xf71, 0x80000000, 0x25a5]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) connect$bt_sco(r2, 0x0, 0x700) 15:45:49 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000040)='syzkaller\x00', 0xf64b, 0xd0, &(0x7f0000000240)=""/208, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xc, 0x401, 0x9}, 0x10, 0x94a4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 15:45:49 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000300)=""/205, 0xffffffffffffffd8) 15:45:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)="631cf4836f710af57f2a2392f6684912ff771881d440806132f95f305e1913a595f3889e8a84b67bf49e033b2280589509f23498550330a4928f8e662d545561583a874da809ace26949a1840254f5f0c02d6b447335de4f9c1b8730ee1a62261ffc6029f4680b37207429f2e20bcd12a919efac1a3ee0385cab2e0420910dcabf9b652f63c3165691a2cad1ecbdd8b51feb107d05c036ff1b5f5d1d56", {0x9, 0x9, 0x31363553, 0x3, 0x7f, 0x1, 0x3}}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r1}, r4, 0x6, @inherit={0x58, &(0x7f0000000280)={0x1, 0x2, 0x10001, 0x2, {0x0, 0x9, 0x6, 0x7, 0x2}, [0x5, 0x9]}}, @name="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"}) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) (async) connect$bt_sco(r0, 0x0, 0x0) 15:45:49 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000040)='syzkaller\x00', 0xf64b, 0xd0, &(0x7f0000000240)=""/208, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xc, 0x401, 0x9}, 0x10, 0x94a4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000040)='syzkaller\x00', 0xf64b, 0xd0, &(0x7f0000000240)=""/208, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xc, 0x401, 0x9}, 0x10, 0x94a4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) 15:45:49 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x6b) 15:45:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xdc, 0x6}) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0x19) 15:45:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x18, 0x0, {0x9, @struct={0x1, 0x7}, 0x0, 0x5, 0x4, 0x10001, 0x7fffffffffffffff, 0xa9c7, 0x1, @struct={0x401, 0x7}, 0x9, 0xffff, [0x0, 0x3, 0x7fffffffffffffff, 0x0, 0xffff]}, {0xcdd, @struct={0x3, 0x2}, 0x0, 0x38, 0xfffffffffffffeff, 0x5, 0x5, 0x7, 0x21, @struct={0x7, 0x1d97}, 0x5, 0xdb, [0x1, 0x0, 0x8, 0x9, 0x8, 0x200]}, {0x8, @struct={0x7, 0x80000001}, 0x0, 0x7b9c, 0x5, 0x81, 0x3, 0x1, 0x2, @struct={0x1000, 0xd6c7}, 0x1, 0x4, [0xec, 0xffffffff, 0x7fff, 0x1, 0xffffffffffffffff, 0x3]}, {0x1ff, 0x1, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0x438, 0x1, [0x7ff, 0xfffffffffffffffe, 0x401, 0x1, 0x3], [0x8000000000000000, 0x40, 0x8, 0x9, 0x10000, 0x8de, 0x6d69, 0x54575ae4, 0x8, 0x0, 0x6, 0x100000001, 0x8, 0xfff, 0x800, 0x8001, 0x8, 0x1acc4000000, 0x7, 0x8000, 0x6, 0x0, 0xfffffffffffffffa, 0x3, 0x6, 0x5, 0x9, 0x0, 0x1, 0x8, 0x1, 0xffff, 0x1, 0x0, 0x8, 0x2800000000000000, 0x7, 0x2, 0x15, 0x4, 0x2, 0x8, 0x0, 0xcca, 0x6, 0x7ff, 0x2, 0x7ff, 0x5, 0xe363, 0x2, 0x5, 0x101, 0x6, 0x800, 0xfffffffffffffbff, 0x3, 0x6, 0x87, 0x9, 0x15, 0x0, 0xc4b0, 0x400, 0x0, 0x1, 0xfffffffffffffffc, 0x9f8, 0xe0, 0x7, 0x40, 0x1, 0xfffffffffffffff9, 0x200, 0x48, 0xc57, 0x8000, 0x8, 0x8, 0xffffffff, 0x9b, 0x2, 0x7c, 0x20400000000, 0x6, 0x5, 0x2c3, 0x80000000, 0xac25, 0x0, 0x1, 0x5, 0x2, 0x81, 0x9, 0x77, 0xffff, 0x8, 0xffffffff80000001, 0x1f, 0x80, 0x4, 0x5, 0x1, 0x400, 0x5, 0x9, 0x9, 0x1, 0x7, 0x7, 0x10000, 0x100000001, 0x8, 0x7, 0x6, 0x1, 0x8000000000000000, 0xf71, 0x80000000, 0x25a5]}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) connect$bt_sco(r2, 0x0, 0x700) 15:45:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 15:45:49 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) (async) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)="631cf4836f710af57f2a2392f6684912ff771881d440806132f95f305e1913a595f3889e8a84b67bf49e033b2280589509f23498550330a4928f8e662d545561583a874da809ace26949a1840254f5f0c02d6b447335de4f9c1b8730ee1a62261ffc6029f4680b37207429f2e20bcd12a919efac1a3ee0385cab2e0420910dcabf9b652f63c3165691a2cad1ecbdd8b51feb107d05c036ff1b5f5d1d56", {0x9, 0x9, 0x31363553, 0x3, 0x7f, 0x1, 0x3}}) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000900)={{r1}, r4, 0x6, @inherit={0x58, &(0x7f0000000280)={0x1, 0x2, 0x10001, 0x2, {0x0, 0x9, 0x6, 0x7, 0x2}, [0x5, 0x9]}}, @name="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"}) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async, rerun: 64) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000000)=""/46, &(0x7f0000000040)=0x2e) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x0) (rerun: 64) 15:45:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xdc, 0x6}) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0x19) 15:45:49 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5b4}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}]}, &(0x7f0000000040)='syzkaller\x00', 0xf64b, 0xd0, &(0x7f0000000240)=""/208, 0x41000, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xc, 0x401, 0x9}, 0x10, 0x94a4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) 15:45:49 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000001c0)={0x18, 0x0, {0x9, @struct={0x1, 0x7}, 0x0, 0x5, 0x4, 0x10001, 0x7fffffffffffffff, 0xa9c7, 0x1, @struct={0x401, 0x7}, 0x9, 0xffff, [0x0, 0x3, 0x7fffffffffffffff, 0x0, 0xffff]}, {0xcdd, @struct={0x3, 0x2}, 0x0, 0x38, 0xfffffffffffffeff, 0x5, 0x5, 0x7, 0x21, @struct={0x7, 0x1d97}, 0x5, 0xdb, [0x1, 0x0, 0x8, 0x9, 0x8, 0x200]}, {0x8, @struct={0x7, 0x80000001}, 0x0, 0x7b9c, 0x5, 0x81, 0x3, 0x1, 0x2, @struct={0x1000, 0xd6c7}, 0x1, 0x4, [0xec, 0xffffffff, 0x7fff, 0x1, 0xffffffffffffffff, 0x3]}, {0x1ff, 0x1, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0x438, 0x1, [0x7ff, 0xfffffffffffffffe, 0x401, 0x1, 0x3], [0x8000000000000000, 0x40, 0x8, 0x9, 0x10000, 0x8de, 0x6d69, 0x54575ae4, 0x8, 0x0, 0x6, 0x100000001, 0x8, 0xfff, 0x800, 0x8001, 0x8, 0x1acc4000000, 0x7, 0x8000, 0x6, 0x0, 0xfffffffffffffffa, 0x3, 0x6, 0x5, 0x9, 0x0, 0x1, 0x8, 0x1, 0xffff, 0x1, 0x0, 0x8, 0x2800000000000000, 0x7, 0x2, 0x15, 0x4, 0x2, 0x8, 0x0, 0xcca, 0x6, 0x7ff, 0x2, 0x7ff, 0x5, 0xe363, 0x2, 0x5, 0x101, 0x6, 0x800, 0xfffffffffffffbff, 0x3, 0x6, 0x87, 0x9, 0x15, 0x0, 0xc4b0, 0x400, 0x0, 0x1, 0xfffffffffffffffc, 0x9f8, 0xe0, 0x7, 0x40, 0x1, 0xfffffffffffffff9, 0x200, 0x48, 0xc57, 0x8000, 0x8, 0x8, 0xffffffff, 0x9b, 0x2, 0x7c, 0x20400000000, 0x6, 0x5, 0x2c3, 0x80000000, 0xac25, 0x0, 0x1, 0x5, 0x2, 0x81, 0x9, 0x77, 0xffff, 0x8, 0xffffffff80000001, 0x1f, 0x80, 0x4, 0x5, 0x1, 0x400, 0x5, 0x9, 0x9, 0x1, 0x7, 0x7, 0x10000, 0x100000001, 0x8, 0x7, 0x6, 0x1, 0x8000000000000000, 0xf71, 0x80000000, 0x25a5]}) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, 0x0) connect$bt_sco(r2, 0x0, 0x700) 15:45:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 15:45:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xdc, 0x6}) (async) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f00000000c0)=0x19) 15:45:49 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 15:45:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 15:45:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:50 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x6b) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @none}, 0x6b) (async) 15:45:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x7ff, 0x1, [0x5, 0xffffffff849b410b, 0x100, 0x9, 0x1], [0x7fe, 0x1, 0x3ff, 0x9167, 0xc047, 0x61ba, 0x0, 0x2, 0x1, 0x3, 0xff, 0xecee, 0x5ad, 0x3, 0x8, 0x6, 0xffffffffffffffe1, 0x9, 0x7, 0x6, 0x8, 0x2, 0xe9, 0x1fd, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0xa, 0x6, 0x0, 0x2, 0x7, 0xa41, 0x200, 0x3f, 0x8001, 0x1, 0x7, 0xffffffffffffffe0, 0xbb83, 0x5, 0x6, 0x101, 0x0, 0x10001, 0x0, 0xb0b, 0x100000001, 0x0, 0x8, 0x8, 0x9, 0x4, 0x400, 0xffff, 0x8000000000000001, 0x9, 0x7, 0x1f, 0x6, 0x2, 0x2, 0xccf4, 0x4, 0xfffffffffffff001, 0x7, 0x0, 0x7f, 0x1, 0xfffffffffffff99d, 0x4, 0x7ff, 0x4, 0x1ff, 0x5, 0xebf, 0x1, 0x5, 0x8, 0x200, 0x4, 0x6, 0x3, 0x1ff, 0x800, 0x7, 0xad, 0x6, 0x9, 0xffffffffffff8a82, 0x8, 0xff, 0x2, 0x800, 0x0, 0x2, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x0, 0x7fff, 0x3, 0x7fffffff, 0x8, 0x226e40000, 0x8, 0xffffffffcd8b2b70, 0x2, 0x8000000000000000, 0x2, 0x4, 0x637, 0x9, 0x10001, 0xe20, 0x7, 0x444e]}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000840)=""/7, &(0x7f0000000880)=0x7) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x2, {0x0, @struct={0x6c, 0xae0}, 0x0, 0x2, 0x3, 0x401, 0x4, 0xfffffffffffffff8, 0x80, @struct={0x2, 0x7}, 0x1, 0xb58, [0x9, 0x0, 0x6, 0x800, 0x0, 0x95aa]}, {0xdd1, @struct={0xf9, 0x1}, 0x0, 0x6, 0x7c6, 0x7, 0x5, 0x6, 0x0, @struct={0xd5d, 0x4}, 0xbbc, 0x6, [0x2b26, 0x3, 0x5, 0x8, 0x101, 0x4]}, {0x4, @usage=0x3, r1, 0x7, 0x9, 0x10001, 0x7, 0x1, 0x10, @usage=0x8, 0x8001, 0x7fffffff, [0x0, 0x49, 0x2, 0x3, 0x1000]}, {0x8001, 0xc8e, 0x7fffffffffffffff}}) 15:45:50 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"41090260846a17e5d4f27e5dbe82c94c8731041883017da85fa66d0508ee", 0x9f, 0x1, 0x1, 0x4, 0x3, 0x1, 0x26b, 0x1, [0xffffeb66, 0x7, 0x0, 0xfff, 0x7ff, 0x2, 0x80000000, 0x53, 0x9, 0x8, 0x4, 0x1, 0xffffffb8, 0x2, 0x6, 0x9, 0x0, 0x3d, 0x7]}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 15:45:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$watch_queue(r0, 0x0, 0x0) 15:45:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) (async) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) (async) r1 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 15:45:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x7ff, 0x1, [0x5, 0xffffffff849b410b, 0x100, 0x9, 0x1], [0x7fe, 0x1, 0x3ff, 0x9167, 0xc047, 0x61ba, 0x0, 0x2, 0x1, 0x3, 0xff, 0xecee, 0x5ad, 0x3, 0x8, 0x6, 0xffffffffffffffe1, 0x9, 0x7, 0x6, 0x8, 0x2, 0xe9, 0x1fd, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0xa, 0x6, 0x0, 0x2, 0x7, 0xa41, 0x200, 0x3f, 0x8001, 0x1, 0x7, 0xffffffffffffffe0, 0xbb83, 0x5, 0x6, 0x101, 0x0, 0x10001, 0x0, 0xb0b, 0x100000001, 0x0, 0x8, 0x8, 0x9, 0x4, 0x400, 0xffff, 0x8000000000000001, 0x9, 0x7, 0x1f, 0x6, 0x2, 0x2, 0xccf4, 0x4, 0xfffffffffffff001, 0x7, 0x0, 0x7f, 0x1, 0xfffffffffffff99d, 0x4, 0x7ff, 0x4, 0x1ff, 0x5, 0xebf, 0x1, 0x5, 0x8, 0x200, 0x4, 0x6, 0x3, 0x1ff, 0x800, 0x7, 0xad, 0x6, 0x9, 0xffffffffffff8a82, 0x8, 0xff, 0x2, 0x800, 0x0, 0x2, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x0, 0x7fff, 0x3, 0x7fffffff, 0x8, 0x226e40000, 0x8, 0xffffffffcd8b2b70, 0x2, 0x8000000000000000, 0x2, 0x4, 0x637, 0x9, 0x10001, 0xe20, 0x7, 0x444e]}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000840)=""/7, &(0x7f0000000880)=0x7) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x2, {0x0, @struct={0x6c, 0xae0}, 0x0, 0x2, 0x3, 0x401, 0x4, 0xfffffffffffffff8, 0x80, @struct={0x2, 0x7}, 0x1, 0xb58, [0x9, 0x0, 0x6, 0x800, 0x0, 0x95aa]}, {0xdd1, @struct={0xf9, 0x1}, 0x0, 0x6, 0x7c6, 0x7, 0x5, 0x6, 0x0, @struct={0xd5d, 0x4}, 0xbbc, 0x6, [0x2b26, 0x3, 0x5, 0x8, 0x101, 0x4]}, {0x4, @usage=0x3, r1, 0x7, 0x9, 0x10001, 0x7, 0x1, 0x10, @usage=0x8, 0x8001, 0x7fffffff, [0x0, 0x49, 0x2, 0x3, 0x1000]}, {0x8001, 0xc8e, 0x7fffffffffffffff}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x7ff, 0x1, [0x5, 0xffffffff849b410b, 0x100, 0x9, 0x1], [0x7fe, 0x1, 0x3ff, 0x9167, 0xc047, 0x61ba, 0x0, 0x2, 0x1, 0x3, 0xff, 0xecee, 0x5ad, 0x3, 0x8, 0x6, 0xffffffffffffffe1, 0x9, 0x7, 0x6, 0x8, 0x2, 0xe9, 0x1fd, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0xa, 0x6, 0x0, 0x2, 0x7, 0xa41, 0x200, 0x3f, 0x8001, 0x1, 0x7, 0xffffffffffffffe0, 0xbb83, 0x5, 0x6, 0x101, 0x0, 0x10001, 0x0, 0xb0b, 0x100000001, 0x0, 0x8, 0x8, 0x9, 0x4, 0x400, 0xffff, 0x8000000000000001, 0x9, 0x7, 0x1f, 0x6, 0x2, 0x2, 0xccf4, 0x4, 0xfffffffffffff001, 0x7, 0x0, 0x7f, 0x1, 0xfffffffffffff99d, 0x4, 0x7ff, 0x4, 0x1ff, 0x5, 0xebf, 0x1, 0x5, 0x8, 0x200, 0x4, 0x6, 0x3, 0x1ff, 0x800, 0x7, 0xad, 0x6, 0x9, 0xffffffffffff8a82, 0x8, 0xff, 0x2, 0x800, 0x0, 0x2, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x0, 0x7fff, 0x3, 0x7fffffff, 0x8, 0x226e40000, 0x8, 0xffffffffcd8b2b70, 0x2, 0x8000000000000000, 0x2, 0x4, 0x637, 0x9, 0x10001, 0xe20, 0x7, 0x444e]}) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000840)=""/7, &(0x7f0000000880)=0x7) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x2, {0x0, @struct={0x6c, 0xae0}, 0x0, 0x2, 0x3, 0x401, 0x4, 0xfffffffffffffff8, 0x80, @struct={0x2, 0x7}, 0x1, 0xb58, [0x9, 0x0, 0x6, 0x800, 0x0, 0x95aa]}, {0xdd1, @struct={0xf9, 0x1}, 0x0, 0x6, 0x7c6, 0x7, 0x5, 0x6, 0x0, @struct={0xd5d, 0x4}, 0xbbc, 0x6, [0x2b26, 0x3, 0x5, 0x8, 0x101, 0x4]}, {0x4, @usage=0x3, r1, 0x7, 0x9, 0x10001, 0x7, 0x1, 0x10, @usage=0x8, 0x8001, 0x7fffffff, [0x0, 0x49, 0x2, 0x3, 0x1000]}, {0x8001, 0xc8e, 0x7fffffffffffffff}}) (async) 15:45:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) r1 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 15:45:50 executing program 3: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"41090260846a17e5d4f27e5dbe82c94c8731041883017da85fa66d0508ee", 0x9f, 0x1, 0x1, 0x4, 0x3, 0x1, 0x26b, 0x1, [0xffffeb66, 0x7, 0x0, 0xfff, 0x7ff, 0x2, 0x80000000, 0x53, 0x9, 0x8, 0x4, 0x1, 0xffffffb8, 0x2, 0x6, 0x9, 0x0, 0x3d, 0x7]}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) (async) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"41090260846a17e5d4f27e5dbe82c94c8731041883017da85fa66d0508ee", 0x9f, 0x1, 0x1, 0x4, 0x3, 0x1, 0x26b, 0x1, [0xffffeb66, 0x7, 0x0, 0xfff, 0x7ff, 0x2, 0x80000000, 0x53, 0x9, 0x8, 0x4, 0x1, 0xffffffb8, 0x2, 0x6, 0x9, 0x0, 0x3d, 0x7]}) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) (async) 15:45:50 executing program 1: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000200)={0x1f, @fixed}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000000)={"41090260846a17e5d4f27e5dbe82c94c8731041883017da85fa66d0508ee", 0x9f, 0x1, 0x1, 0x4, 0x3, 0x1, 0x26b, 0x1, [0xffffeb66, 0x7, 0x0, 0xfff, 0x7ff, 0x2, 0x80000000, 0x53, 0x9, 0x8, 0x4, 0x1, 0xffffffb8, 0x2, 0x6, 0x9, 0x0, 0x3d, 0x7]}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 15:45:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)) 15:45:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x7ff, 0x1, [0x5, 0xffffffff849b410b, 0x100, 0x9, 0x1], [0x7fe, 0x1, 0x3ff, 0x9167, 0xc047, 0x61ba, 0x0, 0x2, 0x1, 0x3, 0xff, 0xecee, 0x5ad, 0x3, 0x8, 0x6, 0xffffffffffffffe1, 0x9, 0x7, 0x6, 0x8, 0x2, 0xe9, 0x1fd, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0xa, 0x6, 0x0, 0x2, 0x7, 0xa41, 0x200, 0x3f, 0x8001, 0x1, 0x7, 0xffffffffffffffe0, 0xbb83, 0x5, 0x6, 0x101, 0x0, 0x10001, 0x0, 0xb0b, 0x100000001, 0x0, 0x8, 0x8, 0x9, 0x4, 0x400, 0xffff, 0x8000000000000001, 0x9, 0x7, 0x1f, 0x6, 0x2, 0x2, 0xccf4, 0x4, 0xfffffffffffff001, 0x7, 0x0, 0x7f, 0x1, 0xfffffffffffff99d, 0x4, 0x7ff, 0x4, 0x1ff, 0x5, 0xebf, 0x1, 0x5, 0x8, 0x200, 0x4, 0x6, 0x3, 0x1ff, 0x800, 0x7, 0xad, 0x6, 0x9, 0xffffffffffff8a82, 0x8, 0xff, 0x2, 0x800, 0x0, 0x2, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x0, 0x7fff, 0x3, 0x7fffffff, 0x8, 0x226e40000, 0x8, 0xffffffffcd8b2b70, 0x2, 0x8000000000000000, 0x2, 0x4, 0x637, 0x9, 0x10001, 0xe20, 0x7, 0x444e]}) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000840)=""/7, &(0x7f0000000880)=0x7) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x2, {0x0, @struct={0x6c, 0xae0}, 0x0, 0x2, 0x3, 0x401, 0x4, 0xfffffffffffffff8, 0x80, @struct={0x2, 0x7}, 0x1, 0xb58, [0x9, 0x0, 0x6, 0x800, 0x0, 0x95aa]}, {0xdd1, @struct={0xf9, 0x1}, 0x0, 0x6, 0x7c6, 0x7, 0x5, 0x6, 0x0, @struct={0xd5d, 0x4}, 0xbbc, 0x6, [0x2b26, 0x3, 0x5, 0x8, 0x101, 0x4]}, {0x4, @usage=0x3, r1, 0x7, 0x9, 0x10001, 0x7, 0x1, 0x10, @usage=0x8, 0x8001, 0x7fffffff, [0x0, 0x49, 0x2, 0x3, 0x1000]}, {0x8001, 0xc8e, 0x7fffffffffffffff}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000000)={0x0, 0x7ff, 0x1, [0x5, 0xffffffff849b410b, 0x100, 0x9, 0x1], [0x7fe, 0x1, 0x3ff, 0x9167, 0xc047, 0x61ba, 0x0, 0x2, 0x1, 0x3, 0xff, 0xecee, 0x5ad, 0x3, 0x8, 0x6, 0xffffffffffffffe1, 0x9, 0x7, 0x6, 0x8, 0x2, 0xe9, 0x1fd, 0x2, 0xfffffffffffffffa, 0x2, 0x7, 0xa, 0x6, 0x0, 0x2, 0x7, 0xa41, 0x200, 0x3f, 0x8001, 0x1, 0x7, 0xffffffffffffffe0, 0xbb83, 0x5, 0x6, 0x101, 0x0, 0x10001, 0x0, 0xb0b, 0x100000001, 0x0, 0x8, 0x8, 0x9, 0x4, 0x400, 0xffff, 0x8000000000000001, 0x9, 0x7, 0x1f, 0x6, 0x2, 0x2, 0xccf4, 0x4, 0xfffffffffffff001, 0x7, 0x0, 0x7f, 0x1, 0xfffffffffffff99d, 0x4, 0x7ff, 0x4, 0x1ff, 0x5, 0xebf, 0x1, 0x5, 0x8, 0x200, 0x4, 0x6, 0x3, 0x1ff, 0x800, 0x7, 0xad, 0x6, 0x9, 0xffffffffffff8a82, 0x8, 0xff, 0x2, 0x800, 0x0, 0x2, 0x6, 0x6, 0x8, 0x80000001, 0x6, 0x0, 0x7fff, 0x3, 0x7fffffff, 0x8, 0x226e40000, 0x8, 0xffffffffcd8b2b70, 0x2, 0x8000000000000000, 0x2, 0x4, 0x637, 0x9, 0x10001, 0xe20, 0x7, 0x444e]}) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000840)=""/7, &(0x7f0000000880)=0x7) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x2, {0x0, @struct={0x6c, 0xae0}, 0x0, 0x2, 0x3, 0x401, 0x4, 0xfffffffffffffff8, 0x80, @struct={0x2, 0x7}, 0x1, 0xb58, [0x9, 0x0, 0x6, 0x800, 0x0, 0x95aa]}, {0xdd1, @struct={0xf9, 0x1}, 0x0, 0x6, 0x7c6, 0x7, 0x5, 0x6, 0x0, @struct={0xd5d, 0x4}, 0xbbc, 0x6, [0x2b26, 0x3, 0x5, 0x8, 0x101, 0x4]}, {0x4, @usage=0x3, r1, 0x7, 0x9, 0x10001, 0x7, 0x1, 0x10, @usage=0x8, 0x8001, 0x7fffffff, [0x0, 0x49, 0x2, 0x3, 0x1000]}, {0x8001, 0xc8e, 0x7fffffffffffffff}}) (async) 15:45:50 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) [ 536.618421] ================================================================== [ 536.625814] BUG: KASAN: use-after-free in __lock_acquire+0x2cb4/0x3ff0 [ 536.632474] Read of size 8 at addr ffff88809f46c520 by task kworker/0:1/26734 [ 536.639727] [ 536.641338] CPU: 0 PID: 26734 Comm: kworker/0:1 Not tainted 4.19.211-syzkaller #0 [ 536.648947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.658290] Workqueue: events sco_sock_timeout [ 536.662849] Call Trace: [ 536.665423] dump_stack+0x1fc/0x2ef [ 536.669045] print_address_description.cold+0x54/0x219 [ 536.674325] kasan_report_error.cold+0x8a/0x1b9 [ 536.679076] ? __lock_acquire+0x2cb4/0x3ff0 [ 536.683494] __asan_report_load8_noabort+0x88/0x90 [ 536.688426] ? __lock_acquire+0x2cb4/0x3ff0 [ 536.692862] __lock_acquire+0x2cb4/0x3ff0 [ 536.697000] ? mark_held_locks+0xf0/0xf0 [ 536.701042] ? mark_held_locks+0xf0/0xf0 [ 536.705085] ? lock_acquire+0x170/0x3c0 [ 536.709042] ? trace_hardirqs_off+0x64/0x200 [ 536.713436] ? sco_sock_timeout+0x5d/0x1b0 [ 536.717655] lock_acquire+0x170/0x3c0 [ 536.721441] ? sco_sock_timeout+0x7b/0x1b0 [ 536.725677] _raw_spin_lock+0x2a/0x40 [ 536.729455] ? sco_sock_timeout+0x7b/0x1b0 [ 536.733674] sco_sock_timeout+0x7b/0x1b0 [ 536.737716] process_one_work+0x864/0x1570 [ 536.741931] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 536.746600] worker_thread+0x64c/0x1130 [ 536.750563] ? __kthread_parkme+0x133/0x1e0 [ 536.754866] ? process_one_work+0x1570/0x1570 [ 536.759344] kthread+0x33f/0x460 [ 536.762701] ? kthread_park+0x180/0x180 [ 536.766655] ret_from_fork+0x24/0x30 [ 536.770349] [ 536.771954] Allocated by task 29268: [ 536.775686] __kmalloc+0x15a/0x3c0 [ 536.779210] sk_prot_alloc+0x1e2/0x2d0 [ 536.783074] sk_alloc+0x36/0xec0 [ 536.786420] sco_sock_alloc.constprop.0+0x31/0x200 [ 536.791326] sco_sock_create+0xd5/0x180 [ 536.795280] bt_sock_create+0x154/0x2a0 [ 536.799231] __sock_create+0x3d8/0x740 [ 536.803112] __sys_socket+0xef/0x200 [ 536.806806] __x64_sys_socket+0x6f/0xb0 [ 536.810759] do_syscall_64+0xf9/0x620 [ 536.814541] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.819706] [ 536.821325] Freed by task 29268: [ 536.824691] kfree+0xcc/0x210 [ 536.827775] __sk_destruct+0x684/0x8a0 [ 536.831644] __sk_free+0x165/0x3b0 [ 536.835162] sk_free+0x3b/0x50 [ 536.838345] sco_sock_kill.part.0+0xaa/0xc0 [ 536.842654] sco_sock_release+0x1a2/0x330 [ 536.846781] __sock_release+0xcd/0x2a0 [ 536.850646] sock_close+0x15/0x20 [ 536.854080] __fput+0x2ce/0x890 [ 536.857339] task_work_run+0x148/0x1c0 [ 536.861233] do_exit+0xbf3/0x2be0 [ 536.864781] do_group_exit+0x125/0x310 [ 536.868746] get_signal+0x3f2/0x1f70 [ 536.872530] do_signal+0x8f/0x1670 [ 536.876143] exit_to_usermode_loop+0x204/0x2a0 [ 536.880706] do_syscall_64+0x538/0x620 [ 536.884583] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 536.889753] [ 536.891361] The buggy address belongs to the object at ffff88809f46c480 [ 536.891361] which belongs to the cache kmalloc-2048 of size 2048 [ 536.904171] The buggy address is located 160 bytes inside of [ 536.904171] 2048-byte region [ffff88809f46c480, ffff88809f46cc80) [ 536.916122] The buggy address belongs to the page: [ 536.921032] page:ffffea00027d1b00 count:1 mapcount:0 mapping:ffff88813bff0c40 index:0x0 compound_mapcount: 0 [ 536.931070] flags: 0xfff00000008100(slab|head) [ 536.935749] raw: 00fff00000008100 ffffea0002a29e88 ffffea00024b9d08 ffff88813bff0c40 [ 536.943615] raw: 0000000000000000 ffff88809f46c480 0000000100000003 0000000000000000 [ 536.951527] page dumped because: kasan: bad access detected [ 536.957219] [ 536.958827] Memory state around the buggy address: [ 536.963739] ffff88809f46c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 536.971082] ffff88809f46c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.978423] >ffff88809f46c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.985782] ^ [ 536.990172] ffff88809f46c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 536.997511] ffff88809f46c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 537.004851] ================================================================== [ 537.012187] Disabling lock debugging due to kernel taint [ 537.017655] Kernel panic - not syncing: panic_on_warn set ... [ 537.017655] [ 537.025010] CPU: 0 PID: 26734 Comm: kworker/0:1 Tainted: G B 4.19.211-syzkaller #0 [ 537.033996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 537.043515] Workqueue: events sco_sock_timeout [ 537.048084] Call Trace: [ 537.050662] dump_stack+0x1fc/0x2ef [ 537.054360] panic+0x26a/0x50e [ 537.057537] ? __warn_printk+0xf3/0xf3 [ 537.061411] ? lock_downgrade+0x720/0x720 [ 537.065544] ? print_shadow_for_address+0xb8/0x114 [ 537.070482] ? trace_hardirqs_off+0x64/0x200 [ 537.074879] kasan_end_report+0x43/0x49 [ 537.078928] kasan_report_error.cold+0xa7/0x1b9 [ 537.083580] ? __lock_acquire+0x2cb4/0x3ff0 [ 537.087938] __asan_report_load8_noabort+0x88/0x90 [ 537.092866] ? __lock_acquire+0x2cb4/0x3ff0 [ 537.097174] __lock_acquire+0x2cb4/0x3ff0 [ 537.101313] ? mark_held_locks+0xf0/0xf0 [ 537.105383] ? mark_held_locks+0xf0/0xf0 [ 537.109529] ? lock_acquire+0x170/0x3c0 [ 537.113496] ? trace_hardirqs_off+0x64/0x200 [ 537.117891] ? sco_sock_timeout+0x5d/0x1b0 [ 537.122146] lock_acquire+0x170/0x3c0 [ 537.125932] ? sco_sock_timeout+0x7b/0x1b0 [ 537.130157] _raw_spin_lock+0x2a/0x40 [ 537.133939] ? sco_sock_timeout+0x7b/0x1b0 [ 537.138159] sco_sock_timeout+0x7b/0x1b0 [ 537.142226] process_one_work+0x864/0x1570 [ 537.146447] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 537.151190] worker_thread+0x64c/0x1130 [ 537.155152] ? __kthread_parkme+0x133/0x1e0 [ 537.159458] ? process_one_work+0x1570/0x1570 [ 537.164025] kthread+0x33f/0x460 [ 537.167376] ? kthread_park+0x180/0x180 [ 537.171331] ret_from_fork+0x24/0x30 [ 537.175183] Kernel Offset: disabled [ 537.178791] Rebooting in 86400 seconds..