0x9, 0x4, 0x52, 0x8, 0x7, 0x3, 0x80, 0x15db]}) r1 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000540)) 07:35:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff) 07:35:57 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)}, 0x3b) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x420c0) 07:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc803}}}, 0x0}, 0x90) 07:35:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x0, 0x10000, 0x80000000, 'syz1\x00', 0x7}, 0x0, [0x5, 0x1, 0xffffffffffffffff, 0x40, 0x8001, 0x800, 0x21, 0x7ff, 0x5, 0x7fffffff, 0x8, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xfff, 0x95e2, 0x7fff, 0x0, 0x1000, 0x8000, 0x6, 0x7, 0xffffffffffffff80, 0x1, 0x20, 0x1, 0x7, 0xc906, 0x7fffffffffffffff, 0x9, 0xff, 0x8000000000000000, 0x3f, 0xbd1, 0x9, 0x80, 0x2, 0x8, 0x800, 0x4, 0x61, 0x8, 0x8000000000000001, 0x3, 0x150, 0x0, 0x8, 0x20, 0xfffffffffffffffc, 0x80000, 0xbdd, 0x3, 0x40000000000000, 0x0, 0x22f4, 0xf62, 0x3ff, 0x9, 0x1, 0x20, 0x80000000, 0x57e, 0x80000001, 0x4, 0x6, 0x1ff, 0x3, 0x200, 0x2, 0x8, 0x2, 0x0, 0x3ff, 0x7ff, 0x2, 0xfff00000, 0x6, 0x7, 0x0, 0x7, 0xe1e, 0x100000000, 0x1, 0x10000, 0x5138, 0xc266, 0x80000001, 0xfffffffffffffff8, 0x2, 0x5, 0x101, 0x4, 0xffffffff, 0x7, 0x2f1, 0x4, 0x8000000000000001, 0x0, 0x8000, 0x0, 0x8, 0x80000000, 0x8, 0x4, 0xdbe9, 0x2, 0x9, 0x1ff, 0x7819, 0x4, 0x1ff, 0xb0, 0x8, 0xfffffffffffffffc, 0x1, 0x100000000, 0x5, 0x9, 0x4, 0x52, 0x8, 0x7, 0x3, 0x80, 0x15db]}) r1 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000540)) 07:35:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff) 07:35:57 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff) 07:35:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe003}}}, 0x0}, 0x90) 07:35:57 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)}, 0x3b) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000000c0), &(0x7f0000000180)=r1}, 0x20) (async) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200000}}}, 0x0}, 0x90) 07:35:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x0, 0x10000, 0x80000000, 'syz1\x00', 0x7}, 0x0, [0x5, 0x1, 0xffffffffffffffff, 0x40, 0x8001, 0x800, 0x21, 0x7ff, 0x5, 0x7fffffff, 0x8, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xfff, 0x95e2, 0x7fff, 0x0, 0x1000, 0x8000, 0x6, 0x7, 0xffffffffffffff80, 0x1, 0x20, 0x1, 0x7, 0xc906, 0x7fffffffffffffff, 0x9, 0xff, 0x8000000000000000, 0x3f, 0xbd1, 0x9, 0x80, 0x2, 0x8, 0x800, 0x4, 0x61, 0x8, 0x8000000000000001, 0x3, 0x150, 0x0, 0x8, 0x20, 0xfffffffffffffffc, 0x80000, 0xbdd, 0x3, 0x40000000000000, 0x0, 0x22f4, 0xf62, 0x3ff, 0x9, 0x1, 0x20, 0x80000000, 0x57e, 0x80000001, 0x4, 0x6, 0x1ff, 0x3, 0x200, 0x2, 0x8, 0x2, 0x0, 0x3ff, 0x7ff, 0x2, 0xfff00000, 0x6, 0x7, 0x0, 0x7, 0xe1e, 0x100000000, 0x1, 0x10000, 0x5138, 0xc266, 0x80000001, 0xfffffffffffffff8, 0x2, 0x5, 0x101, 0x4, 0xffffffff, 0x7, 0x2f1, 0x4, 0x8000000000000001, 0x0, 0x8000, 0x0, 0x8, 0x80000000, 0x8, 0x4, 0xdbe9, 0x2, 0x9, 0x1ff, 0x7819, 0x4, 0x1ff, 0xb0, 0x8, 0xfffffffffffffffc, 0x1, 0x100000000, 0x5, 0x9, 0x4, 0x52, 0x8, 0x7, 0x3, 0x80, 0x15db]}) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff) 07:35:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x236540) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x400) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000280)={{0x1, 0x1, 0x7fff, 0xe6, 'syz1\x00', 0x10200000}, 0x0, 0x20000000, 0xde, r2, 0x1, 0x9, 'syz0\x00', &(0x7f0000000240)=['\x00'], 0x1}) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x1, 0x0, 0x6, 0xf1c, 'syz0\x00', 0x206}, 0x1, 0x100, 0x1, r3, 0x6, 0x7, 'syz1\x00', &(0x7f0000000040)=['/dev/nbd#\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', '+\x00', '*\'-&[', ')!\x00'], 0x28}) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x87512ee093f9ef35) 07:35:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xffffffffffffffff) 07:35:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x0, 0x10000, 0x80000000, 'syz1\x00', 0x7}, 0x0, [0x5, 0x1, 0xffffffffffffffff, 0x40, 0x8001, 0x800, 0x21, 0x7ff, 0x5, 0x7fffffff, 0x8, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xfff, 0x95e2, 0x7fff, 0x0, 0x1000, 0x8000, 0x6, 0x7, 0xffffffffffffff80, 0x1, 0x20, 0x1, 0x7, 0xc906, 0x7fffffffffffffff, 0x9, 0xff, 0x8000000000000000, 0x3f, 0xbd1, 0x9, 0x80, 0x2, 0x8, 0x800, 0x4, 0x61, 0x8, 0x8000000000000001, 0x3, 0x150, 0x0, 0x8, 0x20, 0xfffffffffffffffc, 0x80000, 0xbdd, 0x3, 0x40000000000000, 0x0, 0x22f4, 0xf62, 0x3ff, 0x9, 0x1, 0x20, 0x80000000, 0x57e, 0x80000001, 0x4, 0x6, 0x1ff, 0x3, 0x200, 0x2, 0x8, 0x2, 0x0, 0x3ff, 0x7ff, 0x2, 0xfff00000, 0x6, 0x7, 0x0, 0x7, 0xe1e, 0x100000000, 0x1, 0x10000, 0x5138, 0xc266, 0x80000001, 0xfffffffffffffff8, 0x2, 0x5, 0x101, 0x4, 0xffffffff, 0x7, 0x2f1, 0x4, 0x8000000000000001, 0x0, 0x8000, 0x0, 0x8, 0x80000000, 0x8, 0x4, 0xdbe9, 0x2, 0x9, 0x1ff, 0x7819, 0x4, 0x1ff, 0xb0, 0x8, 0xfffffffffffffffc, 0x1, 0x100000000, 0x5, 0x9, 0x4, 0x52, 0x8, 0x7, 0x3, 0x80, 0x15db]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:57 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf0ff1f}}}, 0x0}, 0x90) 07:35:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x3, 0x236540) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x400) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000280)={{0x1, 0x1, 0x7fff, 0xe6, 'syz1\x00', 0x10200000}, 0x0, 0x20000000, 0xde, r2, 0x1, 0x9, 'syz0\x00', &(0x7f0000000240)=['\x00'], 0x1}) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x1, 0x0, 0x6, 0xf1c, 'syz0\x00', 0x206}, 0x1, 0x100, 0x1, r3, 0x6, 0x7, 'syz1\x00', &(0x7f0000000040)=['/dev/nbd#\x00', '/dev/nbd#\x00', '/dev/nbd#\x00', '+\x00', '*\'-&[', ')!\x00'], 0x28}) (async) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) (async) syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x87512ee093f9ef35) 07:35:57 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2203) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x3, 0x10000}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x77e9e0a6aa32ad53) 07:35:57 executing program 4: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}}}, 0x0}, 0x90) 07:35:57 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x41) 07:35:57 executing program 2: syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4081) 07:35:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2203) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000000)={0x3, 0x10000}) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x77e9e0a6aa32ad53) 07:35:57 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:35:57 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:57 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6044845}, 0x20000080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:35:57 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}}, 0x0}, 0x90) 07:35:57 executing program 3: syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4081) 07:35:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109201, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x12380) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000180)={0x9, 0x6, 0x8, 0x1}) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x6) 07:35:57 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3000000}}}, 0x0}, 0x90) 07:35:57 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x6044845}, 0x20000080) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:35:57 executing program 3: ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) [ 898.012258][ T28] kauditd_printk_skb: 73544 callbacks suppressed [ 898.012272][ T28] audit: type=1400 audit(5470557.980:1752177): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7157 comm="syz-executor.3" name="141" dev="nvme0n1p2" ino=1744 [ 898.019276][ T5786] audit: audit_backlog=66 > audit_backlog_limit=64 [ 898.019281][T20141] audit: audit_backlog=66 > audit_backlog_limit=64 [ 898.019295][T20141] audit: audit_lost=454232 audit_rate_limit=0 audit_backlog_limit=64 [ 898.023010][ T5771] audit: audit_backlog=66 > audit_backlog_limit=64 [ 898.025850][ T28] audit: type=1400 audit(5470557.980:1752257): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7157 comm="syz-executor.3" name="141" dev="nvme0n1p2" ino=1744 [ 898.028450][ T3068] audit: audit_backlog=66 > audit_backlog_limit=64 [ 898.032031][ T7157] audit: audit_backlog=66 > audit_backlog_limit=64 [ 898.034558][ T5771] audit: audit_lost=454233 audit_rate_limit=0 audit_backlog_limit=64 [ 898.035115][ T7157] audit: audit_lost=454234 audit_rate_limit=0 audit_backlog_limit=64 07:35:58 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x109201, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x12380) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000180)={0x9, 0x6, 0x8, 0x1}) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x6) 07:35:58 executing program 1: syslog(0xf, 0x0, 0xffffffffffffff88) 07:35:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000000}}}, 0x0}, 0x90) 07:35:58 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440000) (async) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x440000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) 07:35:58 executing program 3: syslog(0xf, 0x0, 0xffffffffffffff88) 07:35:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6040000}}}, 0x0}, 0x90) 07:35:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x600043) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) 07:35:58 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xb0b0b0b0}) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:58 executing program 0: syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x600043) (async) r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x600043) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000000)) 07:35:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}}}, 0x0}, 0x90) 07:35:58 executing program 1: syslog(0xf, 0x0, 0xffffffffffffff88) 07:35:58 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x2b2, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc000000}}}, 0x0}, 0x90) 07:35:58 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8044) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 07:35:58 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0xb0b0b0b0}) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) (async) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:58 executing program 3: syslog(0xf, 0x0, 0xffffffffffffff88) 07:35:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8044) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 07:35:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11000000}}}, 0x0}, 0x90) 07:35:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd4, 0x20, 0x101, 0x8000, 0x0, "74a0ec5e50495525"}) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd4, 0x20, 0x101, 0x8000, 0x0, "74a0ec5e50495525"}) (async) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:58 executing program 2: syslog(0x0, 0x0, 0xffffffffffffff88) 07:35:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xd4, 0x20, 0x101, 0x8000, 0x0, "74a0ec5e50495525"}) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x15000000}}}, 0x0}, 0x90) 07:35:58 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x140e, 0x200, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8044) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 07:35:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1fffefff}}}, 0x0}, 0x90) 07:35:58 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 4: syslog(0x0, 0x0, 0xffffffffffffff88) 07:35:58 executing program 1: syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) 07:35:58 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x509802, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:35:58 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0x237d361d) r1 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80100) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000001280)) 07:35:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 3: syslog(0x0, 0x0, 0xffffffffffffff88) 07:35:58 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ffff000}}}, 0x0}, 0x90) 07:35:58 executing program 4: syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x800) 07:35:58 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000002280)=""/4096) 07:35:58 executing program 2: syslog(0xf, 0x0, 0xffffffffffffff88) 07:35:58 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) (async) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0x237d361d) r1 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80100) (async, rerun: 64) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000001280)) (rerun: 64) 07:35:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}}}, 0x0}, 0x90) [ 899.042944][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:35:59 executing program 3: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20080) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x82002) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x1f) 07:35:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 07:35:59 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x480080, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0xed, &(0x7f0000000100)=""/237, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_open_dev$loop(&(0x7f0000000000), 0x43, 0x458180) 07:35:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x22000000}}}, 0x0}, 0x90) 07:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 07:35:59 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x480080, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0xed, &(0x7f0000000100)=""/237, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xe, 0x1000, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) (rerun: 64) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) syz_open_dev$loop(&(0x7f0000000000), 0x43, 0x458180) 07:35:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x39020000}}}, 0x0}, 0x90) 07:35:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x20080) (async, rerun: 32) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x82002) (async, rerun: 32) r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0xc002) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x1f) 07:35:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0) 07:35:59 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127d, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x234201) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x5451, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)={'geneve1\x00', 0x400}) 07:35:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x61c200) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:35:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}}}, 0x0}, 0x90) 07:35:59 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x2, 0x0, 0x0) 07:35:59 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 64) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') (rerun: 64) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127d, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x234201) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) (async) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async, rerun: 64) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (rerun: 64) ioctl$TUNGETDEVNETNS(r3, 0x5451, 0x0) (async) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000040)={'geneve1\x00', 0x400}) 07:35:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x61c200) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x61c200) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:35:59 executing program 1: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:59 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x3, 0x0, 0x0) 07:35:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x49020000}}}, 0x0}, 0x90) 07:35:59 executing program 4: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x4000) (async) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:59 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28002) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:35:59 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x4, 0x0, 0x0) 07:35:59 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105200, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r1, 0x0, 0x4, &(0x7f0000000200)='%\xf5#\x00'}, 0x30) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, r1, 0x3, 0x5, 0x1}, 0x48) 07:35:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28002) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x28002) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async) 07:35:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x5) 07:35:59 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x5, 0x0, 0x0) 07:35:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x55010000}}}, 0x0}, 0x90) 07:35:59 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105200, 0x0) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r1, 0x0, 0x4, &(0x7f0000000200)='%\xf5#\x00'}, 0x30) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, r1, 0x3, 0x5, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x105200, 0x0) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x1, &(0x7f0000000180)='\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r1, 0x0, 0x4, &(0x7f0000000200)='%\xf5#\x00'}, 0x30) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, r1, 0x3, 0x5, 0x1}, 0x48) (async) 07:35:59 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x509802, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:35:59 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7d000000}}}, 0x0}, 0x90) 07:35:59 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x6, 0x0, 0x0) 07:35:59 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x47) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x8, 0x7f, 0xfffff124}]}) write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffff7, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffffce) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x101000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0xc810}, 0x1) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000240)=""/28, &(0x7f0000000280)=0x1c) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 07:35:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x4000000000000000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40400) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x100000000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x1, 0x0, 0x7fffffff, 0x33977d95}) 07:35:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x5) 07:35:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc8030000}}}, 0x0}, 0x90) 07:35:59 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe0030000}}}, 0x0}, 0x90) 07:35:59 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x7, 0x0, 0x0) 07:35:59 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x47) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x8, 0x7f, 0xfffff124}]}) write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffff7, 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffffce) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x101000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0xc810}, 0x1) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000240)=""/28, &(0x7f0000000280)=0x1c) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) (async) connect$bt_sco(r0, 0x0, 0x47) (async) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x8, 0x7f, 0xfffff124}]}) (async) write$cgroup_int(r0, &(0x7f0000000200)=0xfffffffffffffff7, 0x12) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffffce) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) socket$pptp(0x18, 0x1, 0x2) (async) connect$pptp(r1, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x101000) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0xc810}, 0x1) (async) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000240)=""/28, &(0x7f0000000280)=0x1c) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) (async) 07:35:59 executing program 0: syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x80) 07:35:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x4000000000000000) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40400) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x100000000) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000000c0)={0x1, 0x0, 0x7fffffff, 0x33977d95}) 07:36:00 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x8, 0x0, 0x0) 07:36:00 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x8003) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000280)=0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x3) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x140f, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x1c}}, 0x20000010) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40401}, 0x4c010) 07:36:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffefff1f}}}, 0x0}, 0x90) 07:36:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x7fffffffffffffff, 0xffffffffffffffff, 0x7f, 0x5}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x8, 0xfffffffffffffff7, 0x8, 0x1}) 07:36:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:00 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x4, 0x3}, 0x48) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff8, '\x00', 0x0, r1, 0x1, 0x2, 0x3}, 0x48) 07:36:00 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x9, 0x0, 0x0) 07:36:00 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x8003) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000280)=0x1) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x3) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x80100, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x140f, 0x2, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x1c}}, 0x20000010) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x140b, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40401}, 0x4c010) 07:36:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x2}}}, 0x0}, 0x90) 07:36:00 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x40, 0x4, 0x3}, 0x48) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffff8, '\x00', 0x0, r1, 0x1, 0x2, 0x3}, 0x48) 07:36:00 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:00 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000040)={0x7fffffffffffffff, 0xffffffffffffffff, 0x7f, 0x5}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x8, 0xfffffffffffffff7, 0x8, 0x1}) (async) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000000)={0x8, 0xfffffffffffffff7, 0x8, 0x1}) 07:36:00 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0xa, 0x0, 0x0) 07:36:00 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x3}}}, 0x0}, 0x90) 07:36:00 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/76) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x1a1840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x5, 0x5, 0xea, 'syz0\x00', 0x9}, 0x1, [0x8, 0x6, 0x6, 0x7fffffffffffffff, 0x8, 0x7fff, 0xbf8, 0x5, 0x4b, 0x4, 0x8, 0x4, 0x0, 0x6, 0x2, 0x1f, 0x8001, 0x20, 0x2, 0x3, 0xc3c, 0x1764, 0xfffffffffffffffd, 0xb4c8, 0x4, 0x8000000000000001, 0x0, 0x1, 0x0, 0x1ff, 0x2, 0x10001, 0x98, 0x0, 0x200080000000, 0x0, 0x6, 0xfffffffffffffffe, 0x8, 0x1b, 0x1, 0x7, 0x8, 0x10000000ff, 0x8, 0x8000000000000000, 0xfffffffffffffeff, 0x4, 0x20, 0x1f, 0x6, 0x65, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x8000000000000000, 0x3, 0x8, 0x80000000, 0x8d, 0x5, 0x5, 0x81, 0x2, 0x3, 0x0, 0x3, 0x80000000, 0x40b, 0x8, 0x0, 0x1, 0x5, 0x0, 0x6ea, 0x7c, 0x0, 0x0, 0x7, 0x1, 0x7fffffffffffffff, 0x8a4, 0x80000000, 0x0, 0x200, 0x714f, 0x4, 0x7, 0x200, 0x89, 0x9a, 0x7, 0xffffffffffffffff, 0x7d, 0x7ff, 0xffffffffffffba5f, 0x3, 0x8, 0x80000001, 0x22, 0x0, 0x4, 0x5, 0x1000, 0xae93, 0x7fffffff, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x430, 0x2, 0xffff, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x2, 0x1697, 0x400, 0x5, 0x8, 0x100000001, 0xfc72, 0x1, 0x9, 0x8, 0x9, 0x4017]}) 07:36:00 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x51) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x81, '\x00', 0x0, r1, 0x0, 0x0, 0x1}, 0x48) 07:36:00 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x80000001) 07:36:00 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0xb, 0x0, 0x0) 07:36:00 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/76) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5, 0x1a1840) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000000c0)={{0x1, 0x5, 0x5, 0xea, 'syz0\x00', 0x9}, 0x1, [0x8, 0x6, 0x6, 0x7fffffffffffffff, 0x8, 0x7fff, 0xbf8, 0x5, 0x4b, 0x4, 0x8, 0x4, 0x0, 0x6, 0x2, 0x1f, 0x8001, 0x20, 0x2, 0x3, 0xc3c, 0x1764, 0xfffffffffffffffd, 0xb4c8, 0x4, 0x8000000000000001, 0x0, 0x1, 0x0, 0x1ff, 0x2, 0x10001, 0x98, 0x0, 0x200080000000, 0x0, 0x6, 0xfffffffffffffffe, 0x8, 0x1b, 0x1, 0x7, 0x8, 0x10000000ff, 0x8, 0x8000000000000000, 0xfffffffffffffeff, 0x4, 0x20, 0x1f, 0x6, 0x65, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x8000000000000000, 0x3, 0x8, 0x80000000, 0x8d, 0x5, 0x5, 0x81, 0x2, 0x3, 0x0, 0x3, 0x80000000, 0x40b, 0x8, 0x0, 0x1, 0x5, 0x0, 0x6ea, 0x7c, 0x0, 0x0, 0x7, 0x1, 0x7fffffffffffffff, 0x8a4, 0x80000000, 0x0, 0x200, 0x714f, 0x4, 0x7, 0x200, 0x89, 0x9a, 0x7, 0xffffffffffffffff, 0x7d, 0x7ff, 0xffffffffffffba5f, 0x3, 0x8, 0x80000001, 0x22, 0x0, 0x4, 0x5, 0x1000, 0xae93, 0x7fffffff, 0x7, 0x8000, 0x3, 0x5, 0x6, 0x430, 0x2, 0xffff, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x2, 0x1697, 0x400, 0x5, 0x8, 0x100000001, 0xfc72, 0x1, 0x9, 0x8, 0x9, 0x4017]}) 07:36:00 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x4}}}, 0x0}, 0x90) 07:36:00 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0xc, 0x0, 0x0) 07:36:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) (async) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x40000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0x80000001) 07:36:00 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x51) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x81, '\x00', 0x0, r1, 0x0, 0x0, 0x1}, 0x48) 07:36:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x8}}}, 0x0}, 0x90) 07:36:00 executing program 4: sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)={0x1534, 0x15, 0x20, 0x70bd2d, 0x25dfdbff, {0x21, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "0d97b5531ef32accdeb8dc9c0e8db7342a123a063fba272e569a6b47320fcbee61772962140ecbc09c758cae881d3e4c229372996d6e12c1a8430e3eb59fb5c91f9467c17f05933857bd43ad2e25bb43b0e3c4f2cb64470f9220f5923a3a92391cd78c18331bf7acba70bc780e0a9c0e19dea8c8a38bab7e2cb169bf1f83d34469e80ecfd130ff5b3d9d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x63, 0x1, "b13daf54d1f4bcd368717b58eb244f95ad8ca527c93b0c30579ca80bf01217c0f5068f8df904be03e916bbfada044bb5eb1de04b997f192c790c62c5788f5694ea532a632d778b3c7ef010f8c1594aeeec871abe6f28a8d2350c0cf11e1ca0"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "63680e9ffd0dbe31594de4059bc2190ad4e252b5933168cb72de905d42a7edea99c2c43cbef6e8aa4e4e866e31076050265d0260620bf121e03cb6b6f219ed20dfb087b8f44d04d71229f0cb8d57843f48fac9840fbc1a5bbd1bcbd8aff87bf3d4bd67"}, @INET_DIAG_REQ_BYTECODE={0x15f, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "85c9ff815506d036d9836ae53e082f05361228550ffc46beeefead47bbd6367919b84e3e5e371856226fef03ea2f96db997569cf8ec961b2509cdf8c16eba4ad7abae82643112a53a92d32602d9d50bbb0553e72493da5e902aa67d80f1e78056ad3d01978cb93c5a4309d75c0186c2da91e0b0f24203b91b99bb8efa9dc8441a3901298939c402dbd50e19b99a998a4ac349e15b95b45f61f5194068c192c50f6a6415cf968802971123fc19ccc3a4d8120cc5d72ffd8208c145d2fbc6b6060b29f6bf310f223d1f7bfa3a5659327968615a687ccb335c681bf0ce5501935"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "560f38b167702e444b183227d54001441f141e69bcbb67eb1bcf84924d299ed254f27fad283ccdd9b306bf38cfb8eb096fc53f5e81559ff24bfa4e21d752aa4ec327aa21570d4d45c99568d3679d54da2051232b04c1a5971b97614d7705c61236b74c4b12601c4b0dd34ffbc94056584b717b7a072f93c2398f719cec0bf565622bc5c9b23120cd5c224f1793c39ca6d050d30e9ffa22857c33c7ebc5e9e3be1d9c2e6577020f06b4f2eb0ab2e94b4566a6c6c30c70e0c57afe2d1643e0a7a5f607688422dbc21c3b148498e527"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "0d7a71857a905e6ff86908ed752e738e30ab71f3994e68"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "c0dd3841b908029d53a304272c7a2d3a097bb48cbbc9387a6b073d3ddbb146c95701712f4ea7544c171d39f363caded62f8052a75516dda6849a8fd4216c6cd158f450ea1d559c8415ccd1130fc5fa05b5771bec36c6c978a8d536f69e192b8d70cf1767859d6b9dec1ff2e98fdc1e5f0af3b218e27aafa31f8ef601f72f56646c544c9afb042a49"}]}, 0x1534}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:00 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000040)=r0}, 0x20) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x40305839, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r0, 0x4}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r4}, 0x18) 07:36:00 executing program 3: sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001580)={0x1534, 0x15, 0x20, 0x70bd2d, 0x25dfdbff, {0x21, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "0d97b5531ef32accdeb8dc9c0e8db7342a123a063fba272e569a6b47320fcbee61772962140ecbc09c758cae881d3e4c229372996d6e12c1a8430e3eb59fb5c91f9467c17f05933857bd43ad2e25bb43b0e3c4f2cb64470f9220f5923a3a92391cd78c18331bf7acba70bc780e0a9c0e19dea8c8a38bab7e2cb169bf1f83d34469e80ecfd130ff5b3d9d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x63, 0x1, "b13daf54d1f4bcd368717b58eb244f95ad8ca527c93b0c30579ca80bf01217c0f5068f8df904be03e916bbfada044bb5eb1de04b997f192c790c62c5788f5694ea532a632d778b3c7ef010f8c1594aeeec871abe6f28a8d2350c0cf11e1ca0"}, @INET_DIAG_REQ_BYTECODE={0x67, 0x1, "63680e9ffd0dbe31594de4059bc2190ad4e252b5933168cb72de905d42a7edea99c2c43cbef6e8aa4e4e866e31076050265d0260620bf121e03cb6b6f219ed20dfb087b8f44d04d71229f0cb8d57843f48fac9840fbc1a5bbd1bcbd8aff87bf3d4bd67"}, @INET_DIAG_REQ_BYTECODE={0x15f, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "85c9ff815506d036d9836ae53e082f05361228550ffc46beeefead47bbd6367919b84e3e5e371856226fef03ea2f96db997569cf8ec961b2509cdf8c16eba4ad7abae82643112a53a92d32602d9d50bbb0553e72493da5e902aa67d80f1e78056ad3d01978cb93c5a4309d75c0186c2da91e0b0f24203b91b99bb8efa9dc8441a3901298939c402dbd50e19b99a998a4ac349e15b95b45f61f5194068c192c50f6a6415cf968802971123fc19ccc3a4d8120cc5d72ffd8208c145d2fbc6b6060b29f6bf310f223d1f7bfa3a5659327968615a687ccb335c681bf0ce5501935"}, @INET_DIAG_REQ_BYTECODE={0xd2, 0x1, "560f38b167702e444b183227d54001441f141e69bcbb67eb1bcf84924d299ed254f27fad283ccdd9b306bf38cfb8eb096fc53f5e81559ff24bfa4e21d752aa4ec327aa21570d4d45c99568d3679d54da2051232b04c1a5971b97614d7705c61236b74c4b12601c4b0dd34ffbc94056584b717b7a072f93c2398f719cec0bf565622bc5c9b23120cd5c224f1793c39ca6d050d30e9ffa22857c33c7ebc5e9e3be1d9c2e6577020f06b4f2eb0ab2e94b4566a6c6c30c70e0c57afe2d1643e0a7a5f607688422dbc21c3b148498e527"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "0d7a71857a905e6ff86908ed752e738e30ab71f3994e68"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "c0dd3841b908029d53a304272c7a2d3a097bb48cbbc9387a6b073d3ddbb146c95701712f4ea7544c171d39f363caded62f8052a75516dda6849a8fd4216c6cd158f450ea1d559c8415ccd1130fc5fa05b5771bec36c6c978a8d536f69e192b8d70cf1767859d6b9dec1ff2e98fdc1e5f0af3b218e27aafa31f8ef601f72f56646c544c9afb042a49"}]}, 0x1534}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:00 executing program 1: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x8, 0x2, 0x2}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x3d03f2073399f25e) 07:36:00 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0xd, 0x0, 0x0) 07:36:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0xc}}}, 0x0}, 0x90) 07:36:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x24900, 0x0) write$ppp(r0, &(0x7f0000000140)="19b786fd8c0c9bdb3d34049ade0459cdfeda393896e059bb9984cc", 0x1b) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f00000001c0)) ioctl$TUNGETDEVNETNS(r2, 0x4020940d, 0x0) write$capi20_data(r2, &(0x7f0000000180)={{0x10, 0x2, 0xff, 0x81, 0x81, 0xd1e}, 0xf, "bb3b7585e991cc04f447fc3e23410c"}, 0x21) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$capi20(r3, &(0x7f00000000c0)={0x10, 0x5742, 0x80, 0x80, 0xffff, 0x2}, 0x10) syz_open_dev$sndctrl(0x0, 0x1f749cc0, 0x200401) 07:36:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7fffffff) 07:36:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x11}}}, 0x0}, 0x90) 07:36:00 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0xe, 0x0, 0x0) 07:36:00 executing program 1: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x8, 0x2, 0x2}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x3d03f2073399f25e) 07:36:00 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x24900, 0x0) write$ppp(r0, &(0x7f0000000140)="19b786fd8c0c9bdb3d34049ade0459cdfeda393896e059bb9984cc", 0x1b) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x1c000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x2) (async) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f00000001c0)) ioctl$TUNGETDEVNETNS(r2, 0x4020940d, 0x0) (async) ioctl$TUNGETDEVNETNS(r2, 0x4020940d, 0x0) write$capi20_data(r2, &(0x7f0000000180)={{0x10, 0x2, 0xff, 0x81, 0x81, 0xd1e}, 0xf, "bb3b7585e991cc04f447fc3e23410c"}, 0x21) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) write$capi20(r3, &(0x7f00000000c0)={0x10, 0x5742, 0x80, 0x80, 0xffff, 0x2}, 0x10) syz_open_dev$sndctrl(0x0, 0x1f749cc0, 0x200401) 07:36:00 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0xf, 0x0, 0x0) 07:36:00 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x15}}}, 0x0}, 0x90) 07:36:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7fffffff) 07:36:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6002}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote}}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:00 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x9, 0x0, 0x1, 0x9, 'syz0\x00', 0x8001}, 0x1, [0xffffffffc5d96541, 0xfffffffffffffff7, 0x400, 0x8000, 0x14, 0x0, 0x100, 0x5, 0x4, 0x80000000, 0x8000000000000000, 0x9, 0x9, 0x47d, 0xacc8, 0x0, 0x100, 0x7f, 0x3, 0x4, 0x7, 0xf1, 0x4, 0x5, 0x100, 0x9, 0x8, 0x5, 0xffffffffffffff45, 0x8, 0xa9, 0x4, 0xff, 0x7, 0x800, 0xff, 0x46, 0xd9b, 0x7, 0xffff, 0x0, 0xe8, 0x80, 0x8, 0x9, 0x8, 0x19, 0x8000, 0x3a, 0x1, 0x1000000000000, 0x6aecaa4f, 0x46d, 0x42, 0x7fffffff, 0x7fffffffffffffff, 0x1, 0x10001, 0x7b9, 0x3, 0xfffffffffffffe00, 0x80000000, 0x7fffffff, 0x800000005, 0x8, 0x2, 0x5, 0x1, 0x4d1, 0x10000, 0x9, 0x0, 0x5, 0x7fff, 0xffffffff, 0x8, 0x7, 0xc36, 0x4, 0x8, 0x1ff, 0x686007e8, 0x1, 0x1, 0x6, 0x7, 0x6, 0x85, 0x8, 0x7, 0x200, 0x0, 0x4, 0x5, 0x2, 0x400, 0x400, 0x0, 0x0, 0x8001, 0x2, 0xff, 0x200, 0x70f1, 0x3, 0x7f, 0xfffffffffffffffc, 0xfd6, 0x1f, 0x9, 0x8, 0x5, 0x584, 0x7, 0x8, 0x4fbf, 0x101, 0x4, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0x100000000, 0x1ff, 0x2, 0x4, 0x3, 0x7]}) 07:36:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x22}}}, 0x0}, 0x90) 07:36:01 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x10, 0x0, 0x0) 07:36:01 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3f, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) r2 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ipi_raise\x00', r1}, 0x10) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000001280)) 07:36:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x6002}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote}}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:01 executing program 3: syz_open_dev$sndctrl(0x0, 0x2, 0x0) 07:36:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x7d}}}, 0x0}, 0x90) [ 901.121635][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:01 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x11, 0x0, 0x0) 07:36:01 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3f, '\x00', 0x0, r1, 0x3, 0x2, 0x2}, 0x48) syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ipi_raise\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='ipi_raise\x00', r1}, 0x10) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000001280)) 07:36:01 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x9, 0x0, 0x1, 0x9, 'syz0\x00', 0x8001}, 0x1, [0xffffffffc5d96541, 0xfffffffffffffff7, 0x400, 0x8000, 0x14, 0x0, 0x100, 0x5, 0x4, 0x80000000, 0x8000000000000000, 0x9, 0x9, 0x47d, 0xacc8, 0x0, 0x100, 0x7f, 0x3, 0x4, 0x7, 0xf1, 0x4, 0x5, 0x100, 0x9, 0x8, 0x5, 0xffffffffffffff45, 0x8, 0xa9, 0x4, 0xff, 0x7, 0x800, 0xff, 0x46, 0xd9b, 0x7, 0xffff, 0x0, 0xe8, 0x80, 0x8, 0x9, 0x8, 0x19, 0x8000, 0x3a, 0x1, 0x1000000000000, 0x6aecaa4f, 0x46d, 0x42, 0x7fffffff, 0x7fffffffffffffff, 0x1, 0x10001, 0x7b9, 0x3, 0xfffffffffffffe00, 0x80000000, 0x7fffffff, 0x800000005, 0x8, 0x2, 0x5, 0x1, 0x4d1, 0x10000, 0x9, 0x0, 0x5, 0x7fff, 0xffffffff, 0x8, 0x7, 0xc36, 0x4, 0x8, 0x1ff, 0x686007e8, 0x1, 0x1, 0x6, 0x7, 0x6, 0x85, 0x8, 0x7, 0x200, 0x0, 0x4, 0x5, 0x2, 0x400, 0x400, 0x0, 0x0, 0x8001, 0x2, 0xff, 0x200, 0x70f1, 0x3, 0x7f, 0xfffffffffffffffc, 0xfd6, 0x1f, 0x9, 0x8, 0x5, 0x584, 0x7, 0x8, 0x4fbf, 0x101, 0x4, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0x100000000, 0x1ff, 0x2, 0x4, 0x3, 0x7]}) 07:36:01 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:01 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x12, 0x0, 0x0) 07:36:01 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xb4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x48) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x2320, 0x13, 0x300, 0x70bd2d, 0x25dfdbfc, {0x5, 0x1, 0x0, 0x3f, {0x4e20, 0x4e23, [0x4, 0x9, 0x88c, 0x1], [0x3f, 0x7, 0x2, 0xffffffe0], 0x0, [0x1, 0x1]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "8f6c23ce3177dd1182247382b757826308b575b50a2d2c97aa6f783ec2fdb41182a4f9a0cd9fa1e9d72571edbdb902fe28c321848941541727c0d23fb4bc7f09bbbf9e497f10df642f037be8e2b4b4b0671ccfeffa5de7f5fe57f2de7a972fe8117c7f46ebb3cad1444a7166d95159f202a9c552788113c36fe283"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "bfa72da0e610fd09a98c6ab1c2cf03890f4f2fcd93c3579847b45cfd17437bdbeabbac8d1a3af4f29cfb86e567e293f8361aad113ca9904704457ec1bf655373706600177975e39f"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "5bcb9926e4b3fc777a07abad7b6dca358392e7db9028d3dca8291200a465de7b03461fe0c2ecffda8cee53992e348c596b5f093a26e8ec34ee237d9a2d67fd12b4d5294b7761270a42ff91"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "e83266e346f69998a2d4b056407f036bc15fffcf88e58fd329a94199ef127aee921e2cd196c2872cf31773cc665efb8d6d0c4588b80a61423d05879561b4eb360598c26c562600c0b7766d6211dfcebdf49c3a90a9d08f12f02771840ea9b0747b7fa98049226246d78eb78322b7487e5553d9b05fa7f2fb9acc858c6fd2ae8772731f915e539d44b4ce7d3f6d2ec2405f63"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "b4abc54f98b6fdc866089d1c4a47e65e1c9dd33cdd7803eb9af3d8a4368bfe09ced9dab4969775243022dca59bf633b4d62d14018782a11bb165be8302a18b472c8e2076b28f9ed765cc01f480d703d34943"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c4047bc20e39d36ea3da9afe37f9e3bd0c18ab96a16e0b3f710b1758d64fd12784981f18b0cbb5507ce865cb428484a88f16ceb62f0863d759694f023d9519fac6254506b0cdeb74d3b5031f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "04ce99fe220223885547d6efab2f14231edd73335c48b37ab70b55197c0b738ca7db06f8c5c6a2df393202bc2163f2116faf"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "90f37347859e69421502a8cdf4c2798a939e58f818a89a0a10b1ea0d872ef4338eb18e404157c786603390b5ff5d0e79de"}]}, 0x2320}, 0x1, 0x0, 0x0, 0x41}, 0x4000804) 07:36:01 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/87) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xfffffffc) 07:36:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101a00) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400000) 07:36:01 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/87) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/87) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xfffffffc) 07:36:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:01 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xb4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x48) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x2320, 0x13, 0x300, 0x70bd2d, 0x25dfdbfc, {0x5, 0x1, 0x0, 0x3f, {0x4e20, 0x4e23, [0x4, 0x9, 0x88c, 0x1], [0x3f, 0x7, 0x2, 0xffffffe0], 0x0, [0x1, 0x1]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "8f6c23ce3177dd1182247382b757826308b575b50a2d2c97aa6f783ec2fdb41182a4f9a0cd9fa1e9d72571edbdb902fe28c321848941541727c0d23fb4bc7f09bbbf9e497f10df642f037be8e2b4b4b0671ccfeffa5de7f5fe57f2de7a972fe8117c7f46ebb3cad1444a7166d95159f202a9c552788113c36fe283"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "bfa72da0e610fd09a98c6ab1c2cf03890f4f2fcd93c3579847b45cfd17437bdbeabbac8d1a3af4f29cfb86e567e293f8361aad113ca9904704457ec1bf655373706600177975e39f"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "5bcb9926e4b3fc777a07abad7b6dca358392e7db9028d3dca8291200a465de7b03461fe0c2ecffda8cee53992e348c596b5f093a26e8ec34ee237d9a2d67fd12b4d5294b7761270a42ff91"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "e83266e346f69998a2d4b056407f036bc15fffcf88e58fd329a94199ef127aee921e2cd196c2872cf31773cc665efb8d6d0c4588b80a61423d05879561b4eb360598c26c562600c0b7766d6211dfcebdf49c3a90a9d08f12f02771840ea9b0747b7fa98049226246d78eb78322b7487e5553d9b05fa7f2fb9acc858c6fd2ae8772731f915e539d44b4ce7d3f6d2ec2405f63"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "b4abc54f98b6fdc866089d1c4a47e65e1c9dd33cdd7803eb9af3d8a4368bfe09ced9dab4969775243022dca59bf633b4d62d14018782a11bb165be8302a18b472c8e2076b28f9ed765cc01f480d703d34943"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c4047bc20e39d36ea3da9afe37f9e3bd0c18ab96a16e0b3f710b1758d64fd12784981f18b0cbb5507ce865cb428484a88f16ceb62f0863d759694f023d9519fac6254506b0cdeb74d3b5031f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "04ce99fe220223885547d6efab2f14231edd73335c48b37ab70b55197c0b738ca7db06f8c5c6a2df393202bc2163f2116faf"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "90f37347859e69421502a8cdf4c2798a939e58f818a89a0a10b1ea0d872ef4338eb18e404157c786603390b5ff5d0e79de"}]}, 0x2320}, 0x1, 0x0, 0x0, 0x41}, 0x4000804) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0xb4, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x48) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x2320, 0x13, 0x300, 0x70bd2d, 0x25dfdbfc, {0x5, 0x1, 0x0, 0x3f, {0x4e20, 0x4e23, [0x4, 0x9, 0x88c, 0x1], [0x3f, 0x7, 0x2, 0xffffffe0], 0x0, [0x1, 0x1]}, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7f, 0x1, "8f6c23ce3177dd1182247382b757826308b575b50a2d2c97aa6f783ec2fdb41182a4f9a0cd9fa1e9d72571edbdb902fe28c321848941541727c0d23fb4bc7f09bbbf9e497f10df642f037be8e2b4b4b0671ccfeffa5de7f5fe57f2de7a972fe8117c7f46ebb3cad1444a7166d95159f202a9c552788113c36fe283"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "bfa72da0e610fd09a98c6ab1c2cf03890f4f2fcd93c3579847b45cfd17437bdbeabbac8d1a3af4f29cfb86e567e293f8361aad113ca9904704457ec1bf655373706600177975e39f"}, @INET_DIAG_REQ_BYTECODE={0x4f, 0x1, "5bcb9926e4b3fc777a07abad7b6dca358392e7db9028d3dca8291200a465de7b03461fe0c2ecffda8cee53992e348c596b5f093a26e8ec34ee237d9a2d67fd12b4d5294b7761270a42ff91"}, @INET_DIAG_REQ_BYTECODE={0x96, 0x1, "e83266e346f69998a2d4b056407f036bc15fffcf88e58fd329a94199ef127aee921e2cd196c2872cf31773cc665efb8d6d0c4588b80a61423d05879561b4eb360598c26c562600c0b7766d6211dfcebdf49c3a90a9d08f12f02771840ea9b0747b7fa98049226246d78eb78322b7487e5553d9b05fa7f2fb9acc858c6fd2ae8772731f915e539d44b4ce7d3f6d2ec2405f63"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "b4abc54f98b6fdc866089d1c4a47e65e1c9dd33cdd7803eb9af3d8a4368bfe09ced9dab4969775243022dca59bf633b4d62d14018782a11bb165be8302a18b472c8e2076b28f9ed765cc01f480d703d34943"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c4047bc20e39d36ea3da9afe37f9e3bd0c18ab96a16e0b3f710b1758d64fd12784981f18b0cbb5507ce865cb428484a88f16ceb62f0863d759694f023d9519fac6254506b0cdeb74d3b5031f"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "04ce99fe220223885547d6efab2f14231edd73335c48b37ab70b55197c0b738ca7db06f8c5c6a2df393202bc2163f2116faf"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "90f37347859e69421502a8cdf4c2798a939e58f818a89a0a10b1ea0d872ef4338eb18e404157c786603390b5ff5d0e79de"}]}, 0x2320}, 0x1, 0x0, 0x0, 0x41}, 0x4000804) (async) 07:36:01 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x13, 0x0, 0x0) 07:36:01 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() prlimit64(r1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x1, 0x2, 0x5, 0x400, 'syz1\x00', 0x8001}, 0x6, 0x400, 0x7, r1, 0x7, 0x8, 'syz1\x00', &(0x7f0000000000)=['4:%(-\x00', '&{t##,[)/!\x00', '\xa2{,\xd9,,!\x00', '{\x00', '\x00', '\\\x00', '[#&@}\xac\x9e.*[\x00'], 0x29}) 07:36:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x1) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101a00) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400000) 07:36:01 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000040)=r0}, 0x20) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x40305839, 0x0) (async) ioctl$TUNGETDEVNETNS(r3, 0x40305839, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r0, 0x4}, 0x48) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r0, 0x4}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r4}, 0x18) 07:36:01 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x14, 0x0, 0x0) 07:36:01 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() (async) r1 = getpid() prlimit64(r1, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x1, 0x2, 0x5, 0x400, 'syz1\x00', 0x8001}, 0x6, 0x400, 0x7, r1, 0x7, 0x8, 'syz1\x00', &(0x7f0000000000)=['4:%(-\x00', '&{t##,[)/!\x00', '\xa2{,\xd9,,!\x00', '{\x00', '\x00', '\\\x00', '[#&@}\xac\x9e.*[\x00'], 0x29}) 07:36:01 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:01 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 07:36:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x9) 07:36:01 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x15, 0x0, 0x0) 07:36:01 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 07:36:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x9) 07:36:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:01 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x17, 0x0, 0x0) 07:36:01 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:01 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x20000) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKBSZGET(r1, 0x80081270, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x140000000000001) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:01 executing program 3: r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20001041) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:01 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x18, 0x0, 0x0) 07:36:01 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:01 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:01 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:01 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x20000) r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80000) ioctl$BLKBSZGET(r1, 0x80081270, 0x0) (async) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x140000000000001) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:02 executing program 1: r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x20001041) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x15}}}, 0x0}, 0x90) 07:36:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:02 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x100) 07:36:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x22}}}, 0x0}, 0x90) 07:36:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:02 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x100) 07:36:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x7d}}}, 0x0}, 0x90) 07:36:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x7fffffffffffffff) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:02 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x1, 0x2}, 0x48) 07:36:02 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x155}}}, 0x0}, 0x90) 07:36:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x7fffffffffffffff) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:02 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x200000, 0x40) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1f, 0x5560, 0x1}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="01") bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0xfffffffffffffe2f) 07:36:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x239}}}, 0x0}, 0x90) 07:36:02 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x20) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x7) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0xbd9, 0x3, 0xffffffe0}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x9) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x7) 07:36:02 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x1, 0x2}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x5, 0x1, 0x2}, 0x48) 07:36:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x200000, 0x40) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1f, 0x5560, 0x1}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f00000000c0)="01") (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0xfffffffffffffe2f) 07:36:02 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x249}}}, 0x0}, 0x90) 07:36:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x20) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)=0x7) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) (async, rerun: 64) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000100)={0x4, 0xbd9, 0x3, 0xffffffe0}) (async, rerun: 64) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x9) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x7) 07:36:02 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x781000, 0x0) read$smackfs_logging(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r1, 0x1, 0x2, 0x3}, 0x48) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x400100, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xff, '\x00', 0x0, r3, 0x4, 0x4, 0x4}, 0x48) 07:36:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) 07:36:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:02 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x300}}}, 0x0}, 0x90) 07:36:02 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x101000) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x12200) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5452, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000000)) 07:36:02 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 07:36:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) 07:36:02 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x3c8}}}, 0x0}, 0x90) 07:36:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x101000) (async) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x12200) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5452, 0x0) (async) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000000)) 07:36:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x3e0}}}, 0x0}, 0x90) 07:36:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000180)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x145040, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0xffc00000000000, 0x18, 0xb}}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000140)=0x2) [ 903.021597][ T28] kauditd_printk_skb: 73589 callbacks suppressed [ 903.021613][ T28] audit: type=1400 audit(5470562.990:1794376): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20141 comm="syz-executor.2" name="syzkaller.ptuJlY" dev="nvme0n1p2" ino=1748 [ 903.023400][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 903.028314][ T28] audit: type=1400 audit(5470562.990:1794377): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20141 comm="syz-executor.2" name="syzkaller.ptuJlY" dev="nvme0n1p2" ino=1748 [ 903.028341][ T28] audit: type=1400 audit(5470562.990:1794378): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20141 comm="syz-executor.2" name="syzkaller.ptuJlY" dev="nvme0n1p2" ino=1748 [ 903.029904][ C0] audit: audit_lost=464811 audit_rate_limit=0 audit_backlog_limit=64 [ 903.041443][ T7617] audit: audit_backlog=65 > audit_backlog_limit=64 [ 903.042129][ C0] audit: backlog limit exceeded [ 903.042361][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 903.043987][ T7617] audit: audit_lost=464812 audit_rate_limit=0 audit_backlog_limit=64 [ 903.044952][ C0] audit: audit_lost=464813 audit_rate_limit=0 audit_backlog_limit=64 07:36:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x406}}}, 0x0}, 0x90) 07:36:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000180)) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x145040, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0xffc00000000000, 0x18, 0xb}}) (async) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000140)=0x2) 07:36:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) [ 903.201927][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:03 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 07:36:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x604}}}, 0x0}, 0x90) 07:36:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2ab913a5524479c9) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x781000, 0x0) read$smackfs_logging(r0, 0x0, 0x0) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getresuid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x4, '\x00', 0x0, r1, 0x1, 0x2, 0x3}, 0x48) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0), 0x400100, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xff, '\x00', 0x0, r3, 0x4, 0x4, 0x4}, 0x48) 07:36:03 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x48) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x104400) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r1}, 0x18) 07:36:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0xc00}}}, 0x0}, 0x90) 07:36:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x2ab913a5524479c9) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:03 executing program 0: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/185) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 07:36:03 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x48) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x104400) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r1}, 0x18) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r0}, 0x48) (async) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x104400) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async) 07:36:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x1100}}}, 0x0}, 0x90) 07:36:03 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0xfffffffffffffffe) r1 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 3: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/185) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 07:36:03 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x1500}}}, 0x0}, 0x90) 07:36:03 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xcfb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x1) 07:36:03 executing program 1: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/185) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 07:36:03 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x0) ioctl$I2C_RETRIES(r0, 0x701, 0xfffffffffffffffe) (async) r1 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x2000}}}, 0x0}, 0x90) 07:36:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:03 executing program 0: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/185) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (rerun: 32) r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) 07:36:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xcfb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x1) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xcfb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r1}, 0x18) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x1) (async) 07:36:03 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x280) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x2200}}}, 0x0}, 0x90) 07:36:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x38) 07:36:03 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x280) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 07:36:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x3902}}}, 0x0}, 0x90) 07:36:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x38) 07:36:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000001240), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000001280)) 07:36:03 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x4000}}}, 0x0}, 0x90) 07:36:03 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 07:36:03 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x4900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x5) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:36:03 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x19, 0x0, 0x0) 07:36:03 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x4902}}}, 0x0}, 0x90) 07:36:03 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x214800, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:03 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:04 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x4900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x5) (async, rerun: 64) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (rerun: 64) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:36:04 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x5501}}}, 0x0}, 0x90) 07:36:04 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x214800, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x214800, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:04 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:04 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x8000) r2 = inotify_init1(0x80800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:36:04 executing program 1: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) 07:36:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x1a, 0x0, 0x0) 07:36:04 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xc0045878, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0x8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x7d00}}}, 0x0}, 0x90) 07:36:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x48) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x8000) (async) r2 = inotify_init1(0x80800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:36:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0xc803}}}, 0x0}, 0x90) 07:36:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:04 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x1b, 0x0, 0x0) 07:36:04 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfd87) 07:36:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0xe003}}}, 0x0}, 0x90) 07:36:04 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x1c, 0x0, 0x0) 07:36:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:04 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfd87) 07:36:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xc0045878, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0x8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0xc0045878, 0x0) (async) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0x8) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) 07:36:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:04 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x280000, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x907490ecd7ef66d8, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000180)) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x100, '\x00', 0x0, r1, 0x5, 0x3, 0x2}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x309002, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 07:36:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:04 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x1d, 0x0, 0x0) 07:36:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x2}}}, 0x0}, 0x90) 07:36:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:04 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x1e, 0x0, 0x0) 07:36:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:04 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x3}}}, 0x0}, 0x90) 07:36:04 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x280000, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async, rerun: 64) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x907490ecd7ef66d8, 0x0) (async, rerun: 64) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000180)) (async) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x100, '\x00', 0x0, r1, 0x5, 0x3, 0x2}, 0x48) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x309002, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) 07:36:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:05 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x21, 0x0, 0x0) 07:36:05 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x80fb, 0x2}) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x452002, 0x0) write$capi20_data(r1, &(0x7f0000000100)={{0x10, 0xc9e, 0x41, 0x82, 0x5, 0x79175e63}, 0x5c, "c424c5c8f1e9957dad85c9cd515fed972d0a46e957568c82592f46fb0936c207eb83b65a9d74c33fec68f5c7b088ee32f165464fb42982aa714c707c24d0e2efadf1b1b8106c58eaa0c44cb44d18a3ed1d28f7d3415468180176d13e"}, 0x6e) 07:36:05 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x4}}}, 0x0}, 0x90) 07:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:05 executing program 0: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) 07:36:05 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x83) 07:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x8}}}, 0x0}, 0x90) 07:36:05 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x22, 0x0, 0x0) 07:36:05 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000080)={0x80fb, 0x2}) (async) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x452002, 0x0) write$capi20_data(r1, &(0x7f0000000100)={{0x10, 0xc9e, 0x41, 0x82, 0x5, 0x79175e63}, 0x5c, "c424c5c8f1e9957dad85c9cd515fed972d0a46e957568c82592f46fb0936c207eb83b65a9d74c33fec68f5c7b088ee32f165464fb42982aa714c707c24d0e2efadf1b1b8106c58eaa0c44cb44d18a3ed1d28f7d3415468180176d13e"}, 0x6e) 07:36:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:05 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x23, 0x0, 0x0) 07:36:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0xc}}}, 0x0}, 0x90) [ 905.291971][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:05 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x157880, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x1, 0x2, 0xa}}) r2 = inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 07:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:05 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x10) 07:36:05 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x157880, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0x1, 0x2, 0xa}}) (async) r2 = inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 07:36:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 07:36:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x10001) 07:36:05 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffff7}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x90a5e000c122af6) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 07:36:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:05 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:05 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffff7}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x90a5e000c122af6) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffff7}, 0x8) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x90a5e000c122af6) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) 07:36:05 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x83) 07:36:05 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x90) 07:36:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:05 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:05 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:05 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 07:36:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:06 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 32) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 07:36:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) 07:36:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:06 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:06 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:06 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3f42891a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x88880, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0xffff, 0x1, 0x5, 0x10c0, r1, 0x7, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x48) ioctl$PPPIOCDISCONN(r2, 0x7439) 07:36:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x9000) 07:36:06 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3f42891a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x88880, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0xffff, 0x1, 0x5, 0x10c0, r1, 0x7, '\x00', 0x0, r2, 0x5, 0x3, 0x1}, 0x48) ioctl$PPPIOCDISCONN(r2, 0x7439) 07:36:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x15}}}, 0x0}, 0x90) 07:36:06 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x100000) 07:36:06 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5452, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x22}}}, 0x0}, 0x90) 07:36:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x7d}}}, 0x0}, 0x90) 07:36:06 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5452, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:06 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x90000000) 07:36:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x155}}}, 0x0}, 0x90) 07:36:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:06 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x103002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x314, '\x00', 0x0, r1, 0x3, 0x4, 0x2}, 0x48) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2080, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/pid_for_children\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) 07:36:06 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x239}}}, 0x0}, 0x90) 07:36:06 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffff7f) 07:36:06 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 07:36:06 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x103002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x314, '\x00', 0x0, r1, 0x3, 0x4, 0x2}, 0x48) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2080, 0x0) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/pid_for_children\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x103002, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x314, '\x00', 0x0, r1, 0x3, 0x4, 0x2}, 0x48) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2080, 0x0) (async) gettid() (async) syz_open_procfs$namespace(r2, &(0x7f00000001c0)='ns/pid_for_children\x00') (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) (async) 07:36:06 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x1000000000000) 07:36:06 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x249}}}, 0x0}, 0x90) 07:36:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 07:36:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:06 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffea) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3102, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x5a}, @call={0x85, 0x0, 0x0, 0x94}, @ldst={0x1, 0x3, 0x6, 0x2, 0x6, 0x18, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x6, 0x76, &(0x7f0000000080)=""/118, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x7, 0xc77}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r1, r2, 0x1, r3, 0x1], 0x0, 0x10, 0xa7}, 0x90) 07:36:06 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x300}}}, 0x0}, 0x90) 07:36:06 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 07:36:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x3c8}}}, 0x0}, 0x90) 07:36:07 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffea) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pS \x00'}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3102, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x48) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x5a}, @call={0x85, 0x0, 0x0, 0x94}, @ldst={0x1, 0x3, 0x6, 0x2, 0x6, 0x18, 0xfffffffffffffff0}], &(0x7f0000000040)='GPL\x00', 0x6, 0x76, &(0x7f0000000080)=""/118, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x7, 0xc77}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r0, r1, r2, 0x1, r3, 0x1], 0x0, 0x10, 0xa7}, 0x90) 07:36:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x3e0}}}, 0x0}, 0x90) 07:36:07 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)={'veth1_vlan\x00', 0x200}) 07:36:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x406}}}, 0x0}, 0x90) 07:36:07 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x10000000000000) 07:36:07 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)={'veth1_vlan\x00', 0x200}) 07:36:07 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x9000000000000000) 07:36:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x604}}}, 0x0}, 0x90) 07:36:07 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 907.361617][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:07 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffff7f00000000) 07:36:07 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xc00}}}, 0x0}, 0x90) 07:36:07 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 64) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) (rerun: 64) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x1100}}}, 0x0}, 0x90) 07:36:07 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:07 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x2101) 07:36:07 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:07 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x2101) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000000), 0x80, 0x2101) (async) 07:36:07 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x1500}}}, 0x0}, 0x90) 07:36:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x4, 0x8000) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x0, 0x3, 0x8, 0x7ff, 'syz1\x00', 0xfffffffe}, 0x6, 0x10, 0x1cb, r1, 0x6, 0x6, 'syz0\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '!\x93]$+-(\x00', '/dev/snd/controlC#\x00'], 0x67}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) 07:36:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x2000}}}, 0x0}, 0x90) [ 908.031699][ T28] kauditd_printk_skb: 62970 callbacks suppressed [ 908.031715][ T28] audit: type=1400 audit(5470568.000:1832532): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=20141 comm="syz-executor.2" name="1970" dev="nvme0n1p2" ino=1741 [ 908.038448][ T28] audit: type=1400 audit(5470568.000:1832533): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=20141 comm="syz-executor.2" name="binderfs" dev="nvme0n1p2" ino=1770 [ 908.039690][ T8075] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.044248][ T3054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.046049][ T8074] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.046866][ T3054] audit: audit_lost=473180 audit_rate_limit=0 audit_backlog_limit=64 [ 908.046895][ T3054] audit: backlog limit exceeded [ 908.046913][ T3054] audit: audit_backlog=65 > audit_backlog_limit=64 [ 908.048520][ T8074] audit: audit_lost=473181 audit_rate_limit=0 audit_backlog_limit=64 [ 908.050672][ T3054] audit: audit_lost=473182 audit_rate_limit=0 audit_backlog_limit=64 07:36:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:08 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfffffee9) 07:36:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x2200}}}, 0x0}, 0x90) 07:36:08 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x4, 0x8000) getpid() (async) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x0, 0x3, 0x8, 0x7ff, 'syz1\x00', 0xfffffffe}, 0x6, 0x10, 0x1cb, r1, 0x6, 0x6, 'syz0\x00', &(0x7f0000000080)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '!\x93]$+-(\x00', '/dev/snd/controlC#\x00'], 0x67}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) 07:36:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfffffee9) 07:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:08 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x3902}}}, 0x0}, 0x90) 07:36:08 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x10}, 0x18) 07:36:08 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 07:36:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x80fd, 0x3}) 07:36:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x4000}}}, 0x0}, 0x90) 07:36:08 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x10}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x10}, 0x18) (async) 07:36:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x4902}}}, 0x0}, 0x90) 07:36:08 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 07:36:08 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x80fd, 0x3}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8500, 0x0) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0x80fd, 0x3}) (async) 07:36:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x5501}}}, 0x0}, 0x90) 07:36:08 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 07:36:08 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000000) 07:36:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 07:36:08 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x551200, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000040)={0x29, 0x3}) 07:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x7d00}}}, 0x0}, 0x90) 07:36:08 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000000) 07:36:08 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 07:36:08 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x202000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4000000) 07:36:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xc803}}}, 0x0}, 0x90) 07:36:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00'}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x551200, 0x0) (async) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x6) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x18000, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000040)={0x29, 0x3}) 07:36:08 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x801c581f, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="2fbdb69cc0fabd181b661e08f47c84839343580b5000ffffffff18120000dee6272b751f5fbe0b74b83629a47e248e1176a4dd72c59fe4b3158f3713f02cb0260be45aa52971a2fd9eee683da2de43e54c757b9f404b388d1abab5cfc34b985f29115c929db0ad818368cf82f05612eaf4c4db448fba15a488e8e5f3bff05bd4182469ef269c749df8e698bf0430632e796147e1119a266f4d5ae6298fdf8ae312307398ef1e423fdb8bfded05f456eec7a6e69a92294a38cb3c8fe5721eaf6bf349b00aa905ec5e8af4147b214fce6eae56bbd3c3099a0de9a79a75fa8bc7542543a647d0d457976d48", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x3, 0x7fffffff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2, r3]}, 0x90) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x1) 07:36:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 07:36:08 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 07:36:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0xe003}}}, 0x0}, 0x90) 07:36:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) 07:36:08 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff85) 07:36:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) 07:36:08 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 07:36:08 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff85) 07:36:08 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) connect$bt_sco(r0, &(0x7f00000000c0), 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000080), 0x8) 07:36:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:08 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:08 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x81, 0x2, 'syz0\x00', 0x1}, 0x2, 0x4, 0x7, r1, 0x9, 0x1, 'syz0\x00', &(0x7f0000000000)=['{!\\}\xd4\x8d\x00', '{^\x00', ':\x00', './\x00', '\x00', '\\#@\x00', '\x00', '-+\'\xc9/,-)]!+\x00', ')]\x00'], 0x24}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) 07:36:08 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x801c581f, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x6, &(0x7f0000000400)=ANY=[@ANYBLOB="2fbdb69cc0fabd181b661e08f47c84839343580b5000ffffffff18120000dee6272b751f5fbe0b74b83629a47e248e1176a4dd72c59fe4b3158f3713f02cb0260be45aa52971a2fd9eee683da2de43e54c757b9f404b388d1abab5cfc34b985f29115c929db0ad818368cf82f05612eaf4c4db448fba15a488e8e5f3bff05bd4182469ef269c749df8e698bf0430632e796147e1119a266f4d5ae6298fdf8ae312307398ef1e423fdb8bfded05f456eec7a6e69a92294a38cb3c8fe5721eaf6bf349b00aa905ec5e8af4147b214fce6eae56bbd3c3099a0de9a79a75fa8bc7542543a647d0d457976d48", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000100)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x3, 0x7fffffff, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r2, r3]}, 0x90) (async, rerun: 32) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x1) 07:36:08 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff9a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x1, 0x1000, 0xa2, 0x220, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0001, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff010000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000d600300010000000850000005f000000bfdf9d50f0325040d7257a5891000000000000b7020000020000008500000085000000b70010000000000095000000000400006557851a76ed3b1aad6fe6b8c2a562fdbb50f0aeef67cb12b919ef40b6f9e2665dda8640f7e55159cd4fe794402d904748307cd09d8f4234d3d8c47dfa046c1da6b3019101ff8fb01402f5ac42ea8db92720b57e7467811221ec73fa2a35c887"], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x3, 0x9, 0x101}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[r0], &(0x7f0000000300)=[{0x5, 0x5, 0xa}, {0x1, 0x5, 0x9, 0x6}, {0x2, 0x1, 0x5}, {0x2, 0x3, 0xa, 0x7}, {0x0, 0x3, 0x6, 0x9}, {0x2, 0x2, 0xb, 0x9}, {0x5, 0x5, 0xe, 0x6}, {0x3, 0x4, 0xe}]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x5}, 0x48) 07:36:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:09 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) (async) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x81, 0x2, 'syz0\x00', 0x1}, 0x2, 0x4, 0x7, r1, 0x9, 0x1, 'syz0\x00', &(0x7f0000000000)=['{!\\}\xd4\x8d\x00', '{^\x00', ':\x00', './\x00', '\x00', '\\#@\x00', '\x00', '-+\'\xc9/,-)]!+\x00', ')]\x00'], 0x24}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:09 executing program 4: r0 = syz_open_dev$loop(0x0, 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 0: syz_open_dev$sndctrl(0x0, 0x3, 0x0) 07:36:09 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff9a) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x1, 0x1000, 0xa2, 0x220, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x4c0001, 0x0) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$cgroup_int(r2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff010000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000d600300010000000850000005f000000bfdf9d50f0325040d7257a5891000000000000b7020000020000008500000085000000b70010000000000095000000000400006557851a76ed3b1aad6fe6b8c2a562fdbb50f0aeef67cb12b919ef40b6f9e2665dda8640f7e55159cd4fe794402d904748307cd09d8f4234d3d8c47dfa046c1da6b3019101ff8fb01402f5ac42ea8db92720b57e7467811221ec73fa2a35c887"], &(0x7f0000000200)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000240)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x3, 0x9, 0x101}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[r0], &(0x7f0000000300)=[{0x5, 0x5, 0xa}, {0x1, 0x5, 0x9, 0x6}, {0x2, 0x1, 0x5}, {0x2, 0x3, 0xa, 0x7}, {0x0, 0x3, 0x6, 0x9}, {0x2, 0x2, 0xb, 0x9}, {0x5, 0x5, 0xe, 0x6}, {0x3, 0x4, 0xe}]}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x5, '\x00', 0x0, r1, 0x0, 0x5}, 0x48) 07:36:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:09 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:09 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x402041) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x6, 0x4, 0x3, '\x00', 0xff}, 0x6, 0x101, 0x2, 0x0, 0x5, 0x6, 'syz0\x00', &(0x7f0000000000)=['-\x00', ':-\x00', '3,\x00', '\xea\x00', '[#\x00'], 0xd}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000180)={{0x5, 0x4, 0x8, 0x4, 'syz1\x00', 0x1}, 0x0, [0xde3, 0x0, 0x0, 0xcf6d, 0x4382, 0x8, 0xfffffffffffffff7, 0x2, 0x400, 0x40000000000000, 0x8000, 0x7, 0x3, 0x5, 0x3, 0x90000000000000, 0x6, 0x8, 0x44, 0x9, 0x4, 0x3, 0x8, 0x101, 0x1000, 0x8000, 0x5b4ad583, 0x8, 0x0, 0x8000000000000000, 0x80000000, 0x7f, 0x1, 0x3, 0x2800000000000000, 0x9, 0x6, 0x3, 0x1, 0x629c, 0x7, 0x5, 0x7f, 0xef, 0xe1b00000000, 0x200, 0xffffffff, 0x4, 0x7, 0x6, 0x9, 0x8000, 0x44, 0x2, 0x152, 0x118, 0xa01, 0x3, 0x2, 0x0, 0x400, 0x2, 0x6, 0x1f, 0x3f2, 0x100000000, 0x0, 0x59fa, 0x8000, 0x2, 0x2, 0xffffffffffffffff, 0x4, 0x8, 0x100000, 0x1, 0x3502, 0x7ff, 0x0, 0x100000001, 0x10, 0x80000000, 0xb1, 0xa1d9, 0x6, 0x0, 0x5, 0x400000000000000, 0x0, 0x1f, 0x8, 0x100000001, 0x8001, 0x1f, 0x10000, 0x7, 0x80000000, 0x5, 0xffffffff, 0x0, 0x100, 0x5, 0x7f, 0x4, 0x586a, 0x71f3, 0xfffffffffffffffd, 0xf1d, 0xa73, 0x2, 0x8000000000000000, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x5, 0x1000, 0x7ff, 0xea5b, 0x8, 0x5, 0x7, 0x7ff, 0x0, 0x7fff, 0xac1, 0x5, 0x3f, 0x4, 0x3f]}) 07:36:09 executing program 2: r0 = syz_open_dev$loop(0x0, 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1a0, 0x1403, 0xecbaa8d9afd5ac70, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 07:36:09 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) 07:36:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:09 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x402041) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x6, 0x4, 0x3, '\x00', 0xff}, 0x6, 0x101, 0x2, 0x0, 0x5, 0x6, 'syz0\x00', &(0x7f0000000000)=['-\x00', ':-\x00', '3,\x00', '\xea\x00', '[#\x00'], 0xd}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x6, 0x4, 0x3, '\x00', 0xff}, 0x6, 0x101, 0x2, 0x0, 0x5, 0x6, 'syz0\x00', &(0x7f0000000000)=['-\x00', ':-\x00', '3,\x00', '\xea\x00', '[#\x00'], 0xd}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000180)={{0x5, 0x4, 0x8, 0x4, 'syz1\x00', 0x1}, 0x0, [0xde3, 0x0, 0x0, 0xcf6d, 0x4382, 0x8, 0xfffffffffffffff7, 0x2, 0x400, 0x40000000000000, 0x8000, 0x7, 0x3, 0x5, 0x3, 0x90000000000000, 0x6, 0x8, 0x44, 0x9, 0x4, 0x3, 0x8, 0x101, 0x1000, 0x8000, 0x5b4ad583, 0x8, 0x0, 0x8000000000000000, 0x80000000, 0x7f, 0x1, 0x3, 0x2800000000000000, 0x9, 0x6, 0x3, 0x1, 0x629c, 0x7, 0x5, 0x7f, 0xef, 0xe1b00000000, 0x200, 0xffffffff, 0x4, 0x7, 0x6, 0x9, 0x8000, 0x44, 0x2, 0x152, 0x118, 0xa01, 0x3, 0x2, 0x0, 0x400, 0x2, 0x6, 0x1f, 0x3f2, 0x100000000, 0x0, 0x59fa, 0x8000, 0x2, 0x2, 0xffffffffffffffff, 0x4, 0x8, 0x100000, 0x1, 0x3502, 0x7ff, 0x0, 0x100000001, 0x10, 0x80000000, 0xb1, 0xa1d9, 0x6, 0x0, 0x5, 0x400000000000000, 0x0, 0x1f, 0x8, 0x100000001, 0x8001, 0x1f, 0x10000, 0x7, 0x80000000, 0x5, 0xffffffff, 0x0, 0x100, 0x5, 0x7f, 0x4, 0x586a, 0x71f3, 0xfffffffffffffffd, 0xf1d, 0xa73, 0x2, 0x8000000000000000, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x5, 0x1000, 0x7ff, 0xea5b, 0x8, 0x5, 0x7, 0x7ff, 0x0, 0x7fff, 0xac1, 0x5, 0x3f, 0x4, 0x3f]}) 07:36:09 executing program 3: r0 = syz_open_dev$loop(0x0, 0x9, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1a0, 0x1403, 0xecbaa8d9afd5ac70, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_virt_wifi\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp0\x00'}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 07:36:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:09 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x8000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7b) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1403, 0x800, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 07:36:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:09 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xc020660b, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000017c0)="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") ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000000)) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="f4f71936375ac3fc37b6975b573cfb714775d226b2be94ffae3f3ddcb4d4ba46cc2489462aa97cd872ffb356fa4680b4d598c38ba3bd3a43888c9aa470e6c1fb4b023c983185b713f586ce302d22594650dc26cf152617d7ba490dbe9167818ed8ac2d8d851f1e0bae31ed5f1e869203468e237d7a877d14bc8d780a66eabc75636f582b274eaa0215a9a89a2e4fe485d46ebe76b1682a15819451441b4b1ceeb3d5f9a3c47445f2fe02d7df74570f8ab3286ba386a879dfe74a2d0fdbf0be4f61c800db") ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x8000) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7b) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1403, 0x800, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 07:36:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x15}}}, 0x0}, 0x90) 07:36:09 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xc020660b, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000017c0)="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") ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000000)) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="f4f71936375ac3fc37b6975b573cfb714775d226b2be94ffae3f3ddcb4d4ba46cc2489462aa97cd872ffb356fa4680b4d598c38ba3bd3a43888c9aa470e6c1fb4b023c983185b713f586ce302d22594650dc26cf152617d7ba490dbe9167818ed8ac2d8d851f1e0bae31ed5f1e869203468e237d7a877d14bc8d780a66eabc75636f582b274eaa0215a9a89a2e4fe485d46ebe76b1682a15819451441b4b1ceeb3d5f9a3c47445f2fe02d7df74570f8ab3286ba386a879dfe74a2d0fdbf0be4f61c800db") ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0xc020660b, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f00000017c0)="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") (async) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000000)) (async) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="f4f71936375ac3fc37b6975b573cfb714775d226b2be94ffae3f3ddcb4d4ba46cc2489462aa97cd872ffb356fa4680b4d598c38ba3bd3a43888c9aa470e6c1fb4b023c983185b713f586ce302d22594650dc26cf152617d7ba490dbe9167818ed8ac2d8d851f1e0bae31ed5f1e869203468e237d7a877d14bc8d780a66eabc75636f582b274eaa0215a9a89a2e4fe485d46ebe76b1682a15819451441b4b1ceeb3d5f9a3c47445f2fe02d7df74570f8ab3286ba386a879dfe74a2d0fdbf0be4f61c800db") (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) 07:36:09 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x108001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x3f) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="040000001823000000100000080000090000007f000000"]) 07:36:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x101000) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 909.441618][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:09 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x22}}}, 0x0}, 0x90) 07:36:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x0) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x7d}}}, 0x0}, 0x90) 07:36:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 07:36:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x0) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, 0x0, 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:09 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x155}}}, 0x0}, 0x90) 07:36:09 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x108001) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x3f) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="040000001823000000100000080000090000007f000000"]) syz_open_dev$sndctrl(0x0, 0x0, 0x108001) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x3f) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="040000001823000000100000080000090000007f000000"]) (async) 07:36:10 executing program 3: syz_open_dev$sndctrl(0x0, 0x4, 0x0) 07:36:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x0) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, 0x0, 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x239}}}, 0x0}, 0x90) 07:36:10 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:10 executing program 2: syz_open_dev$sndctrl(0x0, 0x6, 0x0) 07:36:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x0) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, 0x0, 0x80, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:10 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000500)=0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0xa, 0x0, 0x37d51758, 0x8, '\x00', 0xffffffc8}, 0x0, [0x2, 0xfffffffffffffeb8, 0x7ff, 0xffffffff, 0x9, 0x4, 0xffffffffffffbf67, 0x61, 0x4, 0x400000000, 0xbdb, 0x6, 0x200, 0x6a, 0x6, 0x20, 0x7fffffff, 0x2, 0x4, 0x1, 0x1, 0x1, 0xaae6, 0x5, 0x5, 0x8, 0x3, 0x400, 0x8, 0x1f, 0xffffffffffffffff, 0x4, 0x5, 0xc2, 0x3a6df33b, 0x1f, 0x10000, 0x1f, 0xd59, 0x7, 0x6, 0x4, 0x1, 0x4, 0x7, 0xffffffff, 0x7, 0x9, 0xcf, 0x8, 0x4, 0x6, 0x10000, 0xba1d, 0x75a, 0xb4, 0x9, 0x346916b4, 0x2, 0x7, 0x400, 0x4, 0x8, 0xfffffffffffffffb, 0xbd6, 0x9, 0x2, 0x6, 0x9, 0xa6e, 0x6, 0x3, 0x5, 0xfff, 0x2, 0x100, 0x0, 0xff3, 0xba, 0x2, 0x4, 0xffffffffffffffff, 0x4, 0x100, 0x80000000, 0x0, 0xfffffffffffffffa, 0x4, 0x1000, 0x1ad, 0xffffffffffffffff, 0x6, 0x401000000000, 0x401, 0x6, 0x1, 0x10001, 0x9, 0x6, 0x9, 0x7, 0x3, 0x20, 0xfffffffffffffffa, 0x100000000, 0x4, 0x20, 0xca, 0x40, 0x0, 0x6, 0x10000, 0x20, 0x3, 0x27, 0xf, 0xfffffffffffffff8, 0x1000, 0x9, 0x67, 0x10001, 0x200, 0xbb7, 0x0, 0x3, 0xe940, 0x9, 0x8000000000000000]}) 07:36:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x249}}}, 0x0}, 0x90) 07:36:10 executing program 0: syz_open_dev$sndctrl(0x0, 0x9, 0x0) 07:36:10 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x400) 07:36:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x0) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x91) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:10 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000500)=0x2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0xa, 0x0, 0x37d51758, 0x8, '\x00', 0xffffffc8}, 0x0, [0x2, 0xfffffffffffffeb8, 0x7ff, 0xffffffff, 0x9, 0x4, 0xffffffffffffbf67, 0x61, 0x4, 0x400000000, 0xbdb, 0x6, 0x200, 0x6a, 0x6, 0x20, 0x7fffffff, 0x2, 0x4, 0x1, 0x1, 0x1, 0xaae6, 0x5, 0x5, 0x8, 0x3, 0x400, 0x8, 0x1f, 0xffffffffffffffff, 0x4, 0x5, 0xc2, 0x3a6df33b, 0x1f, 0x10000, 0x1f, 0xd59, 0x7, 0x6, 0x4, 0x1, 0x4, 0x7, 0xffffffff, 0x7, 0x9, 0xcf, 0x8, 0x4, 0x6, 0x10000, 0xba1d, 0x75a, 0xb4, 0x9, 0x346916b4, 0x2, 0x7, 0x400, 0x4, 0x8, 0xfffffffffffffffb, 0xbd6, 0x9, 0x2, 0x6, 0x9, 0xa6e, 0x6, 0x3, 0x5, 0xfff, 0x2, 0x100, 0x0, 0xff3, 0xba, 0x2, 0x4, 0xffffffffffffffff, 0x4, 0x100, 0x80000000, 0x0, 0xfffffffffffffffa, 0x4, 0x1000, 0x1ad, 0xffffffffffffffff, 0x6, 0x401000000000, 0x401, 0x6, 0x1, 0x10001, 0x9, 0x6, 0x9, 0x7, 0x3, 0x20, 0xfffffffffffffffa, 0x100000000, 0x4, 0x20, 0xca, 0x40, 0x0, 0x6, 0x10000, 0x20, 0x3, 0x27, 0xf, 0xfffffffffffffff8, 0x1000, 0x9, 0x67, 0x10001, 0x200, 0xbb7, 0x0, 0x3, 0xe940, 0x9, 0x8000000000000000]}) 07:36:10 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x400) 07:36:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x300}}}, 0x0}, 0x90) 07:36:10 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/16) 07:36:10 executing program 2: syz_open_dev$sndctrl(0x0, 0xc, 0x0) 07:36:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x3c8}}}, 0x0}, 0x90) 07:36:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x0) r1 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:10 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/16) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/16) (async) 07:36:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x3e0}}}, 0x0}, 0x90) 07:36:10 executing program 4: syz_open_dev$sndctrl(0x0, 0x11, 0x0) 07:36:10 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() ptrace$setsig(0x4203, r1, 0x0, 0x0) prlimit64(r1, 0x6, &(0x7f0000000180)={0xca, 0x4}, &(0x7f00000001c0)) r2 = getpid() prlimit64(r2, 0x4, &(0x7f0000000200)={0x9907, 0x7d6}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x1, 0x2, 0xffff, 0x18a, 'syz0\x00', 0x5c75}, 0x2, 0x100, 0x8, r1, 0x6, 0xfff, 'syz1\x00', &(0x7f0000000240)=['\xad$&\x00', '&)[.(\x00', '^)/\x00', '!\xa4\x02!\xb2\x1b\xd3d\x01\x80\xf2\bz\x95\x10\x04\xca\xe6ls\x98\xe1\xfb\xecqP\xb1\x06b\x06\x18\b\xc4\x8ejtUU!\xa7|\x89\x8a\xb9\x94B\xf6\xaa\x8d\xd0\xb4u.\xa4\x8a]f\xa7+\xce\xc0\xdfAi\x0e\xf0\xbd\x1c\xdf\x04\x11\x96\xe2\xf7Z]\x18\xb0\'\x83\xe6O0\xad\xa2\xfb\xd3\x9a\xbfl)\xc0\xf4\xac\x17|\x90\xcf\x8e\v\xc7\x90`\xa8\xbac\xb8\xc1\x9e\xa1\xba\x9c\xdb7\xe06\x97+\x02\xe6\xe0r\x14+6\x13be\x95\xc3\xd0s\xb5\x87+\x1am\xb5\xfc0`\xb9.\xeb[dn\r\xbc\xe0u\x06\xa8\x1f\xe1\b\x00\xd8\x95\x7f\xa9\xea9j\x8e\vs\xe7\x9ai\x06\xb0\xc0\xea\xcd\x1c\xf3\xce\xbdJ\x10\xcc audit_backlog_limit=64 [ 913.285105][T25601] audit: audit_lost=478104 audit_rate_limit=0 audit_backlog_limit=64 [ 913.285132][ T5771] audit: audit_backlog=65 > audit_backlog_limit=64 [ 913.287161][T25601] audit: backlog limit exceeded [ 913.287268][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 913.287282][ C0] audit: audit_lost=478105 audit_rate_limit=0 audit_backlog_limit=64 [ 913.287293][ C0] audit: backlog limit exceeded [ 913.287351][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 913.287361][ C0] audit: audit_lost=478106 audit_rate_limit=0 audit_backlog_limit=64 07:36:13 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0xc6a76f54fb7caff3}, 0xfffffffffffffef6) 07:36:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x20000000}}}, 0x0}, 0x90) 07:36:13 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xa0) 07:36:13 executing program 3: syz_open_dev$sndctrl(0x0, 0x1fffefff, 0x0) 07:36:13 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async, rerun: 64) r1 = getpid() (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x2, 0x0, 0x2, 0x0, 'syz1\x00', 0x400}, 0x1, 0x100, 0x7, r1, 0x8, 0x2, 'syz1\x00', &(0x7f0000000000)=['))\'#^[#\x00', '%:\x00', '-\x00', '\x00', '\x00', '\x00', '\x00', '\x00'], 0x12}) 07:36:13 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0xc6a76f54fb7caff3}, 0xfffffffffffffef6) 07:36:13 executing program 2: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) read$smackfs_logging(r0, &(0x7f0000000300), 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x200c0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000140)={{0x6, 0x0, 0x42, 0x6, 'syz0\x00', 0xe9}, 0x5, 0x200, 0x5, 0xffffffffffffffff, 0x6, 0x0, 'syz0\x00', &(0x7f0000000100)=[']}:\x00', '/sys/fs/smackfs/logging\x00', ',})-#*\x00', '/sys\xdc\xe7\x93/fs/\x80mackfs/,ogg|', '\x00', '\x00'], 0x3d}) 07:36:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x22000000}}}, 0x0}, 0x90) 07:36:13 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:13 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xa0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xa0) (async) 07:36:13 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001214080026d47000ffdbdf250800010000000000080003000400000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x408000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:13 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x280880) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x5, 0x4, 0x5, 0x40, 'syz0\x00', 0x4}, 0x4, 0x20000000, 0x157449a0, r1, 0x7, 0x80000001, 'syz0\x00', &(0x7f0000000500)=['$*\x00', '&\xd6\\\\$$-#}E-\x00', '\xaf6\xa1~yO\xa9\xd5=\xd7\x99:()YV^;\xd1`\xc5\xcf\xd6\xd8\x96\x0f\xea\x8d\x977h\xa3~Gh4F\xbf\x14q\x98\xa5\xd7\x18S\x8c\xf1\x8d\xc5\xb5\'\xba\x8a:&72\x9a\xcdf\x01\xa5\xebXyS\x06\x1bpY\n\xdb\x00.\xa4PQ\xb6\vx\xb3\xc6\xa3\xd7o\xb6\xd8oBz\xf7\xacc3\x1b\xaf \x18\xd9\xec\x82\xe8\xca\xb3^\xcc\f\x8a\x01\xc1\xba\xda\xc2\xf5\xe7\x81Q\xa7\'\xb6\xef-\xcav=K', '\x18\x16\xa3q\xd5\xd7\x87\x1f\xa1\xbc\xc0\xb6x\x975\x84d)H\x00\xbe`e\xde`\xb6d\xa64\xe8\xb2\xfb\xae\x96P\xff\x80{\xf0\xd7\xbc\x7f\xc1Y\xc7\xe10A\x80OV\xd1m\x87}\x85Tz\x8e}rw\t \xa6\xcd\xf4\x92\xa0w\x97\xc8\xc8\x84 \xe4w\xf4ZR\xb7\x9f\xb8\xd7\x0e\xc3\xa0\x9aByjE\xa0:\x04v\xd3TQ;V)\xba\xe87:\x83-\x18jcL\x92\x9a\xc9\xbbz| \xfa8\xbfM]\x13Z\xcb\x86\xef\x95\xd3\x8c7\x947\xe1Y\x02\x06i\xff\tW\xe8G0\xba\x7f\xc2\x12\xeez\x82\x92b\x96\x82Z\xd5\x90\x19\xd8\xaeP6~', '\x00', '-4\x00\x00\x00\x00\x8f\xdf\xfc\xb4\x8a\x1fu*\xba@\x00\xe2W\xcb\x81d:\xd39\xe7\x8aZ~\x84\xf6\x93\xec(\x86\n\x1d\xd7\xd9(\x10\x89=\xe5T\xa3Q7\xd8i\xb2N\x8dl\\\x8e\x86\xfc\x7f\x8b\x91\xf0\x8f\x9bs\xd8\xfb\xed\x8e\xfd\xc6\xa3\xef\x96|hZ\x86\xd9\xb0\xd9\xa5\x8c\x80v\xbb\xa3l8\x1c\xd0\xdf\xcfE*8\xd5#\xf5\x05t\x02\x04\x06\x84^<\aqZ\xeep\xb1\x82\x1f<\xc4\x8e\x1a\xc9G\n\xa1\xf9\xcb\xb9\xd0\xf3\xe6{+\xba\x8e]\xb5q\x94\xa47\xb1\xb6\xf4\x0f\xb0\xe0\xa1\xac7\xff5\xc1*\xd5p\x97\xce\x85\xbf\x94\a6\rPt\x19\x98\xc0L\xc7}\xc9\xba,\xa2\x87>/\xef\xb0}\xb1\x9ca\xa2;\xba+\xb3\xa6A\'\xe8\x11\x18\xc8\xedi\xffh\xe7\x9c\xbb\x1eC\x9d\xc9\x13\xb2\xe3\xe1LHm\x19\x9e\xc1e\xd9\x0f\xcbW\xea\xa7\xaf2\b\'\x17\x1f2\xa8D\x9e2\xd0', ')\\%\'-#%:{\x00'], 0x229}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/192) 07:36:13 executing program 0: syz_open_dev$sndctrl(0x0, 0x1ffff000, 0x0) 07:36:13 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001214080026d47000ffdbdf250800010000000000080003000400000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x408000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:13 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001214080026d47000ffdbdf250800010000000000080003000400000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x408000) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001214080026d47000ffdbdf250800010000000000080003000400000008004f0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x80c5}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x408000) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) 07:36:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x39020000}}}, 0x0}, 0x90) 07:36:13 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfffffffffffffec5) 07:36:13 executing program 0: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) read$smackfs_logging(r0, &(0x7f0000000300), 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) 07:36:13 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x280880) (async) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x5, 0x4, 0x5, 0x40, 'syz0\x00', 0x4}, 0x4, 0x20000000, 0x157449a0, r1, 0x7, 0x80000001, 'syz0\x00', &(0x7f0000000500)=['$*\x00', '&\xd6\\\\$$-#}E-\x00', '\xaf6\xa1~yO\xa9\xd5=\xd7\x99:()YV^;\xd1`\xc5\xcf\xd6\xd8\x96\x0f\xea\x8d\x977h\xa3~Gh4F\xbf\x14q\x98\xa5\xd7\x18S\x8c\xf1\x8d\xc5\xb5\'\xba\x8a:&72\x9a\xcdf\x01\xa5\xebXyS\x06\x1bpY\n\xdb\x00.\xa4PQ\xb6\vx\xb3\xc6\xa3\xd7o\xb6\xd8oBz\xf7\xacc3\x1b\xaf \x18\xd9\xec\x82\xe8\xca\xb3^\xcc\f\x8a\x01\xc1\xba\xda\xc2\xf5\xe7\x81Q\xa7\'\xb6\xef-\xcav=K', '\x18\x16\xa3q\xd5\xd7\x87\x1f\xa1\xbc\xc0\xb6x\x975\x84d)H\x00\xbe`e\xde`\xb6d\xa64\xe8\xb2\xfb\xae\x96P\xff\x80{\xf0\xd7\xbc\x7f\xc1Y\xc7\xe10A\x80OV\xd1m\x87}\x85Tz\x8e}rw\t \xa6\xcd\xf4\x92\xa0w\x97\xc8\xc8\x84 \xe4w\xf4ZR\xb7\x9f\xb8\xd7\x0e\xc3\xa0\x9aByjE\xa0:\x04v\xd3TQ;V)\xba\xe87:\x83-\x18jcL\x92\x9a\xc9\xbbz| \xfa8\xbfM]\x13Z\xcb\x86\xef\x95\xd3\x8c7\x947\xe1Y\x02\x06i\xff\tW\xe8G0\xba\x7f\xc2\x12\xeez\x82\x92b\x96\x82Z\xd5\x90\x19\xd8\xaeP6~', '\x00', '-4\x00\x00\x00\x00\x8f\xdf\xfc\xb4\x8a\x1fu*\xba@\x00\xe2W\xcb\x81d:\xd39\xe7\x8aZ~\x84\xf6\x93\xec(\x86\n\x1d\xd7\xd9(\x10\x89=\xe5T\xa3Q7\xd8i\xb2N\x8dl\\\x8e\x86\xfc\x7f\x8b\x91\xf0\x8f\x9bs\xd8\xfb\xed\x8e\xfd\xc6\xa3\xef\x96|hZ\x86\xd9\xb0\xd9\xa5\x8c\x80v\xbb\xa3l8\x1c\xd0\xdf\xcfE*8\xd5#\xf5\x05t\x02\x04\x06\x84^<\aqZ\xeep\xb1\x82\x1f<\xc4\x8e\x1a\xc9G\n\xa1\xf9\xcb\xb9\xd0\xf3\xe6{+\xba\x8e]\xb5q\x94\xa47\xb1\xb6\xf4\x0f\xb0\xe0\xa1\xac7\xff5\xc1*\xd5p\x97\xce\x85\xbf\x94\a6\rPt\x19\x98\xc0L\xc7}\xc9\xba,\xa2\x87>/\xef\xb0}\xb1\x9ca\xa2;\xba+\xb3\xa6A\'\xe8\x11\x18\xc8\xedi\xffh\xe7\x9c\xbb\x1eC\x9d\xc9\x13\xb2\xe3\xe1LHm\x19\x9e\xc1e\xd9\x0f\xcbW\xea\xa7\xaf2\b\'\x17\x1f2\xa8D\x9e2\xd0', ')\\%\'-#%:{\x00'], 0x229}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/192) [ 913.601871][ T5744] Bluetooth: hci4: command 0x0405 tx timeout 07:36:13 executing program 4: syz_open_dev$sndctrl(0x0, 0x20000000, 0x0) 07:36:13 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x40000000}}}, 0x0}, 0x90) 07:36:13 executing program 2: syz_open_dev$sndctrl(0x0, 0x40000000, 0x0) 07:36:13 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfffffffffffffec5) 07:36:13 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000540), 0x72000, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r1, &(0x7f00000000c0), 0x18) read$smackfs_logging(r1, &(0x7f0000000bc0), 0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000b40)=0x7) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000ac0), 0xa0800, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000c00)=0x1) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000b00)=0xab) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000b80)=0x1) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000580)) r3 = syz_open_dev$sndctrl(0x0, 0x3f, 0xd2300) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000005c0)={{0x1, 0x4, 0x80fa, 0x6b, 'syz1\x00', 0x4}, 0x1, [0x3, 0x6, 0x8000, 0x9d, 0x0, 0x9, 0x65, 0x1, 0x2, 0x3ff, 0x3, 0x4, 0x8e6, 0x0, 0x7, 0x1000000000, 0xa47, 0x0, 0x6, 0x100000000, 0x8001, 0x4, 0x1, 0x80000000, 0x9a, 0x1f, 0x40, 0xdd, 0x81, 0xd4fe, 0x7fffffffffffffff, 0x6, 0x3, 0x101, 0x10001, 0xb98581, 0xc6, 0x4, 0x4, 0x0, 0x8001, 0x4, 0x1, 0x2, 0x5, 0xb899, 0x5, 0x6, 0x6, 0xe7, 0x8000000000000001, 0x7fffffff, 0x8b, 0x9e, 0x7c, 0xef, 0xa3d, 0x6, 0x1f, 0x10001, 0xffffffff, 0x4, 0x1, 0x3de, 0x8, 0x5, 0xfe, 0x0, 0x8, 0x2, 0x9, 0x4, 0x3, 0x8, 0x100, 0x67, 0x6, 0x3, 0x2, 0x7, 0x80, 0xa2fd, 0x0, 0x7f, 0x1000, 0x1, 0x0, 0x9, 0x4, 0x80000000, 0x8, 0x1, 0x4, 0x1, 0xc, 0x100, 0x7fff, 0x4, 0x7, 0x37, 0x1, 0x7c3, 0xfffffffffffffffd, 0x4, 0x81, 0xffffffff00000000, 0x9, 0x1, 0x11943ae9, 0x6, 0x2, 0x800, 0x4, 0xffffffffffffca00, 0x0, 0x7, 0x0, 0x3, 0x7fff, 0x7ff, 0xeb, 0x3, 0x8, 0x4, 0x6, 0x8, 0x7, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x71f, 'syz1\x00', 0x3}, 0x1, [0x2, 0x2, 0x5, 0x4, 0xffffffffffffffef, 0x3, 0x100000000, 0x400, 0x3, 0xffffffffffff893a, 0xffffffff, 0x7ff, 0x8, 0x81, 0x3, 0x1, 0x5, 0xffffffffffffffff, 0xd28, 0x7e1c, 0x81, 0xffffffff, 0xffff, 0x6, 0xfffffffffffffff9, 0x3, 0x200, 0x1, 0x7, 0x9, 0x7fff, 0x5, 0x5443, 0xfffffffffffffff9, 0x2, 0xa9000000, 0x5, 0x5, 0x5, 0x81, 0x4b9a, 0x4, 0x8, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x8, 0x3, 0x1ff, 0x5567, 0x1, 0x5, 0x81, 0x7ff, 0x6e, 0x3ff, 0x7, 0x5, 0x4, 0x9, 0x0, 0x4, 0xdfb, 0x5, 0x6, 0x5, 0x10001, 0x3, 0x3, 0x9, 0x7fe1, 0x6, 0xfd4, 0x3f, 0x3f, 0xfe4, 0x2, 0x5, 0x8, 0xffff, 0x750, 0x9, 0x9, 0x1, 0x401, 0xff, 0xffffffffffff8b0d, 0x0, 0x1ff, 0x7fffffffffffffff, 0x4, 0x1, 0x0, 0x100000001, 0x7fffffff, 0x1, 0x6, 0x401, 0x0, 0x10001, 0x110bd029, 0x8437, 0xffff, 0x8, 0x5, 0x10001, 0x2, 0x9, 0x8, 0x4, 0x6, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x100000000, 0x7fff, 0x0, 0x4, 0x9, 0x5, 0x6, 0x1, 0x8, 0x97cc, 0x40, 0x80]}) 07:36:13 executing program 2: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) read$smackfs_logging(r0, &(0x7f0000000300), 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000002c0)) 07:36:13 executing program 4: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) read$smackfs_logging(r0, &(0x7f0000000300), 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) 07:36:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x49020000}}}, 0x0}, 0x90) 07:36:13 executing program 2: syz_open_dev$sndctrl(0x0, 0x7f000000, 0x0) 07:36:13 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfd11) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xc0045878, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r0, 0x9, 0x405, 0x4}, 0x48) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x40305828, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7cb5, '\x00', 0x0, r3, 0x3, 0x3, 0x2}, 0x48) 07:36:13 executing program 0: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) read$smackfs_logging(r0, &(0x7f0000000300), 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000002c0)) 07:36:13 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000540), 0x72000, 0x0) (async, rerun: 32) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (rerun: 32) read$smackfs_logging(r1, &(0x7f00000000c0), 0x18) (async) read$smackfs_logging(r1, &(0x7f0000000bc0), 0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000b40)=0x7) r2 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000ac0), 0xa0800, 0x0) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000c00)=0x1) (async) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000b00)=0xab) (async, rerun: 32) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000b80)=0x1) (async, rerun: 32) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000580)) r3 = syz_open_dev$sndctrl(0x0, 0x3f, 0xd2300) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000005c0)={{0x1, 0x4, 0x80fa, 0x6b, 'syz1\x00', 0x4}, 0x1, [0x3, 0x6, 0x8000, 0x9d, 0x0, 0x9, 0x65, 0x1, 0x2, 0x3ff, 0x3, 0x4, 0x8e6, 0x0, 0x7, 0x1000000000, 0xa47, 0x0, 0x6, 0x100000000, 0x8001, 0x4, 0x1, 0x80000000, 0x9a, 0x1f, 0x40, 0xdd, 0x81, 0xd4fe, 0x7fffffffffffffff, 0x6, 0x3, 0x101, 0x10001, 0xb98581, 0xc6, 0x4, 0x4, 0x0, 0x8001, 0x4, 0x1, 0x2, 0x5, 0xb899, 0x5, 0x6, 0x6, 0xe7, 0x8000000000000001, 0x7fffffff, 0x8b, 0x9e, 0x7c, 0xef, 0xa3d, 0x6, 0x1f, 0x10001, 0xffffffff, 0x4, 0x1, 0x3de, 0x8, 0x5, 0xfe, 0x0, 0x8, 0x2, 0x9, 0x4, 0x3, 0x8, 0x100, 0x67, 0x6, 0x3, 0x2, 0x7, 0x80, 0xa2fd, 0x0, 0x7f, 0x1000, 0x1, 0x0, 0x9, 0x4, 0x80000000, 0x8, 0x1, 0x4, 0x1, 0xc, 0x100, 0x7fff, 0x4, 0x7, 0x37, 0x1, 0x7c3, 0xfffffffffffffffd, 0x4, 0x81, 0xffffffff00000000, 0x9, 0x1, 0x11943ae9, 0x6, 0x2, 0x800, 0x4, 0xffffffffffffca00, 0x0, 0x7, 0x0, 0x3, 0x7fff, 0x7ff, 0xeb, 0x3, 0x8, 0x4, 0x6, 0x8, 0x7, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x3, 0x4, 0x71f, 'syz1\x00', 0x3}, 0x1, [0x2, 0x2, 0x5, 0x4, 0xffffffffffffffef, 0x3, 0x100000000, 0x400, 0x3, 0xffffffffffff893a, 0xffffffff, 0x7ff, 0x8, 0x81, 0x3, 0x1, 0x5, 0xffffffffffffffff, 0xd28, 0x7e1c, 0x81, 0xffffffff, 0xffff, 0x6, 0xfffffffffffffff9, 0x3, 0x200, 0x1, 0x7, 0x9, 0x7fff, 0x5, 0x5443, 0xfffffffffffffff9, 0x2, 0xa9000000, 0x5, 0x5, 0x5, 0x81, 0x4b9a, 0x4, 0x8, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x8, 0x3, 0x1ff, 0x5567, 0x1, 0x5, 0x81, 0x7ff, 0x6e, 0x3ff, 0x7, 0x5, 0x4, 0x9, 0x0, 0x4, 0xdfb, 0x5, 0x6, 0x5, 0x10001, 0x3, 0x3, 0x9, 0x7fe1, 0x6, 0xfd4, 0x3f, 0x3f, 0xfe4, 0x2, 0x5, 0x8, 0xffff, 0x750, 0x9, 0x9, 0x1, 0x401, 0xff, 0xffffffffffff8b0d, 0x0, 0x1ff, 0x7fffffffffffffff, 0x4, 0x1, 0x0, 0x100000001, 0x7fffffff, 0x1, 0x6, 0x401, 0x0, 0x10001, 0x110bd029, 0x8437, 0xffff, 0x8, 0x5, 0x10001, 0x2, 0x9, 0x8, 0x4, 0x6, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x100000000, 0x7fff, 0x0, 0x4, 0x9, 0x5, 0x6, 0x1, 0x8, 0x97cc, 0x40, 0x80]}) 07:36:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x55010000}}}, 0x0}, 0x90) 07:36:13 executing program 2: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) read$smackfs_logging(r0, &(0x7f0000000300), 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000002c0)) 07:36:13 executing program 4: syz_open_dev$sndctrl(0x0, 0xffefff1f, 0x0) 07:36:13 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfd11) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xc0045878, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r0, 0x9, 0x405, 0x4}, 0x48) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x40305828, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7cb5, '\x00', 0x0, r3, 0x3, 0x3, 0x2}, 0x48) 07:36:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x7d000000}}}, 0x0}, 0x90) 07:36:13 executing program 4: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) syz_open_dev$sndctrl(0x0, 0x0, 0x414200) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) 07:36:13 executing program 0: syz_open_dev$sndctrl(0x0, 0x2000000000, 0x0) 07:36:13 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x40305828, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x8, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x7, r1, 0xbbbbbbbb}) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2400, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 07:36:13 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x9700) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x101a00) gettid() ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x1, 0xc, [0x1ff, 0x3, 0x3]}) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/153) ptrace$setsig(0x4203, r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x8, 0x1, 0x3, 0x7ff, 'syz1\x00', 0x9}, 0x6, 0x3, 0x9, r2, 0x0, 0x2, 'syz0\x00', &(0x7f00000002c0)}) 07:36:13 executing program 2: syz_open_dev$sndctrl(0x0, 0xffffa71fffff, 0x0) 07:36:13 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xc8030000}}}, 0x0}, 0x90) 07:36:13 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x40305828, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x8, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x7, r1, 0xbbbbbbbb}) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2400, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x40305828, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x8, 0x6, 0x2}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x7, r1, 0xbbbbbbbb}) (async) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2400, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x2) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) (async) 07:36:13 executing program 2: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000340), 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 1: syz_open_dev$sndctrl(0x0, 0xffffa71fffff, 0x0) 07:36:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xe0030000}}}, 0x0}, 0x90) 07:36:14 executing program 0: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x2, 0x9700) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x101a00) gettid() (async) gettid() ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x1, 0xc, [0x1ff, 0x3, 0x3]}) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/153) ptrace$setsig(0x4203, r2, 0x0, 0x0) (async) ptrace$setsig(0x4203, r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x8, 0x1, 0x3, 0x7ff, 'syz1\x00', 0x9}, 0x6, 0x3, 0x9, r2, 0x0, 0x2, 'syz0\x00', &(0x7f00000002c0)}) 07:36:14 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 07:36:14 executing program 1: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) r1 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 2: syz_open_dev$sndctrl(0x0, 0xffffa7c55a0c, 0x0) 07:36:14 executing program 3: openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xffefff1f}}}, 0x0}, 0x90) 07:36:14 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x8000000000000000, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x7, 0xc, [0x9348, 0x81, 0x1f]}) 07:36:14 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 07:36:14 executing program 1: syz_open_dev$sndctrl(0x0, 0x1000000000000, 0x0) 07:36:14 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:14 executing program 2: syz_open_dev$sndctrl(0x0, 0x20000000000000, 0x0) 07:36:14 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x20, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0xc800) 07:36:14 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x8000000000000000, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x7, 0xc, [0x9348, 0x81, 0x1f]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x7, 0xc, [0x9348, 0x81, 0x1f]}) 07:36:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x2}}}, 0x0}, 0x90) 07:36:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 4: syz_open_dev$sndctrl(0x0, 0x40000000000000, 0x0) 07:36:14 executing program 3: syz_open_dev$sndctrl(0x0, 0x8, 0x204000) 07:36:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x3}}}, 0x0}, 0x90) 07:36:14 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1403, 0x20, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0xc800) 07:36:14 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x40305839, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) syz_open_dev$sndctrl(0x0, 0xff, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0198ad8ff676c9cf38106e0b0696200007001fb6e5bef0f236d1072f00e923f68ece001b50cd1e72229485ea195d4093b244f9a735235245b8bb1d7f679fea45dec77d224ac989c90ca490ddf5f725a4b74ac32361c3624c00a24e0d0fa4f7ce25"]) 07:36:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x4}}}, 0x0}, 0x90) 07:36:14 executing program 2: syz_open_dev$sndctrl(0x0, 0xf0ff1f00000000, 0x0) 07:36:14 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/uts\x00') r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x8021, 0x3}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1405, 0x10, 0x70bd28, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004041}, 0x850) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044045) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:36:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x6}}}, 0x0}, 0x90) 07:36:14 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x40305839, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) syz_open_dev$sndctrl(0x0, 0xff, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0198ad8ff676c9cf38106e0b0696200007001fb6e5bef0f236d1072f00e923f68ece001b50cd1e72229485ea195d4093b244f9a735235245b8bb1d7f679fea45dec77d224ac989c90ca490ddf5f725a4b74ac32361c3624c00a24e0d0fa4f7ce25"]) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x40305839, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000140)={r2, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) (async) syz_open_dev$sndctrl(0x0, 0xff, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="0198ad8ff676c9cf38106e0b0696200007001fb6e5bef0f236d1072f00e923f68ece001b50cd1e72229485ea195d4093b244f9a735235245b8bb1d7f679fea45dec77d224ac989c90ca490ddf5f725a4b74ac32361c3624c00a24e0d0fa4f7ce25"]) (async) 07:36:14 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x7}}}, 0x0}, 0x90) 07:36:14 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/uts\x00') r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x8021, 0x3}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1405, 0x10, 0x70bd28, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004041}, 0x850) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044045) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) gettid() (async) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/uts\x00') (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) (async) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000040)={0x8021, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1405, 0x10, 0x70bd28, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004041}, 0x850) (async) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x1402, 0x8, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044045) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 07:36:14 executing program 4: syz_open_dev$sndctrl(0x0, 0x100000000000000, 0x0) 07:36:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000002c0)) 07:36:14 executing program 4: syz_open_dev$sndctrl(0x0, 0x8, 0x204000) 07:36:14 executing program 0: syz_open_dev$sndctrl(0x0, 0x200000000000000, 0x0) 07:36:14 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x8453, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x88, 0x0, 0xffffffffffffffff, 0x1ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x48) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000b80), 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0xd, &(0x7f0000000a00)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @jmp={0x5, 0x0, 0x8, 0x8, 0x3, 0x20, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x101}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0xa, 0x1, 0x80, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}], &(0x7f0000000a80)='syzkaller\x00', 0x101, 0xaf, &(0x7f0000000ac0)=""/175, 0x41000, 0x24, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xe, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r0, r1, r6], &(0x7f0000000c80)=[{0x3, 0x4, 0x9, 0x8}, {0x2, 0x1, 0x2}, {0x0, 0x2, 0x10, 0xc}], 0x10, 0xfff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7fff, 0xc2, &(0x7f0000000480)=""/194, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x9, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r0, r0, r0, r1, r5, r1, r1, r6, r7], &(0x7f0000000800)=[{0x2, 0x2, 0xf, 0x4}, {0x1, 0x5, 0x6, 0x9}, {0x1, 0x4, 0xe}, {0x2, 0x5, 0x0, 0x1}, {0x1, 0x9, 0x10, 0xb}, {0xf5b7, 0x4, 0x7, 0x3}, {0x2, 0x5, 0x3, 0xa}, {0x5, 0x2, 0x2, 0x5}, {0x2, 0x4, 0x1, 0xa}, {0x1, 0x1, 0x5}], 0x10, 0x1}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x100}}, 0x20000040) 07:36:14 executing program 3: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:15 executing program 2: syz_open_dev$sndctrl(0x0, 0x200000000000000, 0x0) 07:36:15 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000002c0)) 07:36:15 executing program 3: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:15 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000002c0)) 07:36:15 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x8453, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)}, 0x20) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x88, 0x0, 0xffffffffffffffff, 0x1ee, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x48) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000b80), 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0xd, &(0x7f0000000a00)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @jmp={0x5, 0x0, 0x8, 0x8, 0x3, 0x20, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x101}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x2, 0xa, 0x1, 0x80, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}], &(0x7f0000000a80)='syzkaller\x00', 0x101, 0xaf, &(0x7f0000000ac0)=""/175, 0x41000, 0x24, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000bc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xe, 0xffffffff, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r0, r1, r6], &(0x7f0000000c80)=[{0x3, 0x4, 0x9, 0x8}, {0x2, 0x1, 0x2}, {0x0, 0x2, 0x10, 0xc}], 0x10, 0xfff}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x1a, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7fff, 0xc2, &(0x7f0000000480)=""/194, 0x40f00, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x9, 0x1}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000007c0)=[r0, r0, r0, r1, r5, r1, r1, r6, r7], &(0x7f0000000800)=[{0x2, 0x2, 0xf, 0x4}, {0x1, 0x5, 0x6, 0x9}, {0x1, 0x4, 0xe}, {0x2, 0x5, 0x0, 0x1}, {0x1, 0x9, 0x10, 0xb}, {0xf5b7, 0x4, 0x7, 0x3}, {0x2, 0x5, 0x3, 0xa}, {0x5, 0x2, 0x2, 0x5}, {0x2, 0x4, 0x1, 0xa}, {0x1, 0x1, 0x5}], 0x10, 0x1}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r2], 0x100}}, 0x20000040) 07:36:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:15 executing program 3: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) (async) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) (async) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:15 executing program 4: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:15 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:15 executing program 0: syz_open_dev$sndctrl(0x0, 0x8, 0x1835c4) 07:36:15 executing program 4: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:15 executing program 1: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:15 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000002c0)) 07:36:15 executing program 0: r0 = shmget(0x0, 0x1000, 0x280, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x1) 07:36:15 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000880)={'veth1_to_bridge\x00'}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r1, 0x0, 0x47) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x3, 0x5, 0x5}, 0x48) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) 07:36:15 executing program 3: syz_open_dev$sndctrl(0x0, 0x8, 0x1835c4) 07:36:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x6}}}, 0x0}, 0x90) 07:36:15 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x18}, 0x18) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:15 executing program 4: r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x401, &(0x7f0000000000)={0x30, 0x100, 0x1dd}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_open_dev$sndctrl(0x0, 0x0, 0x10002) 07:36:15 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000880)={'veth1_to_bridge\x00'}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r1, 0x0, 0x47) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x3, 0x5, 0x5}, 0x48) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) (async) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000880)={'veth1_to_bridge\x00'}) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) (async) connect$bt_sco(r1, 0x0, 0x47) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x3, 0x5, 0x5}, 0x48) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) (async) 07:36:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x7}}}, 0x0}, 0x90) 07:36:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) [ 915.681863][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:15 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) 07:36:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:15 executing program 0: r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x401, &(0x7f0000000000)={0x30, 0x100, 0x1dd}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_open_dev$sndctrl(0x0, 0x0, 0x10002) 07:36:15 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:15 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) 07:36:15 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x9}}}, 0x0}, 0x90) 07:36:15 executing program 1: r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r0, 0x401, &(0x7f0000000000)={0x30, 0x100, 0x1dd}) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_open_dev$sndctrl(0x0, 0x0, 0x10002) getpid() (async) prlimit64(r0, 0x0, 0x0, 0x0) (async) ptrace$setsig(0x4203, r0, 0x401, &(0x7f0000000000)={0x30, 0x100, 0x1dd}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async) syz_open_dev$sndctrl(0x0, 0x0, 0x10002) (async) 07:36:15 executing program 3: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e) (async) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010101}}, 0x1e) (async, rerun: 64) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) (rerun: 64) 07:36:15 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x48) 07:36:15 executing program 0: syz_open_dev$sndctrl(0x0, 0x300000000000000, 0x0) 07:36:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0xa}}}, 0x0}, 0x90) 07:36:15 executing program 2: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) 07:36:15 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x48) 07:36:15 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 07:36:15 executing program 1: syz_open_dev$sndctrl(0x0, 0x400000000000000, 0x0) 07:36:15 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x2, 0x1, 0xfff, 0x9, 'syz0\x00', 0x1}, 0x2, 0x10, 0x80000000, r1, 0x2, 0x8, 'syz0\x00', &(0x7f0000000000)=['#,\x00', '\\\x00'], 0x5}) 07:36:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0xb}}}, 0x0}, 0x90) 07:36:15 executing program 1: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) 07:36:16 executing program 2: syz_open_dev$sndctrl(0x0, 0x600000000000000, 0x0) 07:36:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:16 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x1, 0x5, 0x2}, 0x48) 07:36:16 executing program 4: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) 07:36:16 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x2, 0x1, 0xfff, 0x9, 'syz0\x00', 0x1}, 0x2, 0x10, 0x80000000, r1, 0x2, 0x8, 'syz0\x00', &(0x7f0000000000)=['#,\x00', '\\\x00'], 0x5}) 07:36:16 executing program 4: syz_open_dev$sndctrl(0x0, 0x604000000000000, 0x0) 07:36:16 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:16 executing program 3: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x2b1f17a220ea296d) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x494c7409c9802427}, 0x2000c040) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x6100389) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0xfffe}]}) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x808, '\x00', 0x0, r2, 0x2, 0x3}, 0x48) 07:36:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0xd}}}, 0x0}, 0x90) 07:36:16 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x1, 0x7, 0x5, '\x00', 0x800}, 0x1, [0xfffffffffffffff9, 0x8, 0x22, 0xffffffffffff2a22, 0x0, 0xffffffffffff7cac, 0xa79, 0xffff, 0x20, 0xffffffffffffffdd, 0x1ff, 0x4, 0x2, 0x17b, 0x6, 0x8, 0x6, 0xc2, 0x10000, 0x6, 0x338e9d49, 0xffffffffffffffff, 0x1000, 0x0, 0xfe6e, 0x5, 0x1, 0x7fffffffffffffff, 0x5c5b, 0x1f, 0x6b4, 0x1, 0x7fff, 0x9e, 0xe18b, 0x80000000, 0x3, 0xffff, 0x0, 0x8000, 0x9, 0x10001, 0xfd, 0xfffffffffffffff9, 0x11, 0xffffffffffff1ff5, 0xc42, 0x4, 0x9, 0x2, 0x15, 0x8001, 0x6, 0x4b37, 0x0, 0xffffffffffffff87, 0x3, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x26, 0x80000000, 0x7, 0x9, 0x317, 0x3, 0xfffffffffffffe00, 0x80000000, 0x4, 0x3f, 0x54, 0x100000001, 0x1000, 0x6, 0x8000, 0x150, 0xfffffffffffffffb, 0x6, 0x66cc, 0x1, 0x4, 0xf8b9, 0x9, 0x33f3fc33, 0x8, 0x2ef, 0x5, 0xf7, 0x4, 0x4, 0x3ff, 0x4, 0x8000000000000000, 0xca2, 0x7, 0xfffffffffffffffc, 0x10001, 0x6, 0x5, 0xdfa, 0x8, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x1, 0x4, 0x20, 0x0, 0x1a9c, 0x9, 0x2, 0x1, 0x8001, 0x2, 0xdd, 0xffffffff80000000, 0x2, 0x4fab, 0x7, 0xffffffffffffffff, 0x10000, 0x10000]}) 07:36:16 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:16 executing program 2: syz_open_dev$sndctrl(0x0, 0x810000000000000, 0x0) 07:36:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0xe}}}, 0x0}, 0x90) 07:36:16 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x1, 0x7, 0x5, '\x00', 0x800}, 0x1, [0xfffffffffffffff9, 0x8, 0x22, 0xffffffffffff2a22, 0x0, 0xffffffffffff7cac, 0xa79, 0xffff, 0x20, 0xffffffffffffffdd, 0x1ff, 0x4, 0x2, 0x17b, 0x6, 0x8, 0x6, 0xc2, 0x10000, 0x6, 0x338e9d49, 0xffffffffffffffff, 0x1000, 0x0, 0xfe6e, 0x5, 0x1, 0x7fffffffffffffff, 0x5c5b, 0x1f, 0x6b4, 0x1, 0x7fff, 0x9e, 0xe18b, 0x80000000, 0x3, 0xffff, 0x0, 0x8000, 0x9, 0x10001, 0xfd, 0xfffffffffffffff9, 0x11, 0xffffffffffff1ff5, 0xc42, 0x4, 0x9, 0x2, 0x15, 0x8001, 0x6, 0x4b37, 0x0, 0xffffffffffffff87, 0x3, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x26, 0x80000000, 0x7, 0x9, 0x317, 0x3, 0xfffffffffffffe00, 0x80000000, 0x4, 0x3f, 0x54, 0x100000001, 0x1000, 0x6, 0x8000, 0x150, 0xfffffffffffffffb, 0x6, 0x66cc, 0x1, 0x4, 0xf8b9, 0x9, 0x33f3fc33, 0x8, 0x2ef, 0x5, 0xf7, 0x4, 0x4, 0x3ff, 0x4, 0x8000000000000000, 0xca2, 0x7, 0xfffffffffffffffc, 0x10001, 0x6, 0x5, 0xdfa, 0x8, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x1, 0x4, 0x20, 0x0, 0x1a9c, 0x9, 0x2, 0x1, 0x8001, 0x2, 0xdd, 0xffffffff80000000, 0x2, 0x4fab, 0x7, 0xffffffffffffffff, 0x10000, 0x10000]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x1, 0x7, 0x5, '\x00', 0x800}, 0x1, [0xfffffffffffffff9, 0x8, 0x22, 0xffffffffffff2a22, 0x0, 0xffffffffffff7cac, 0xa79, 0xffff, 0x20, 0xffffffffffffffdd, 0x1ff, 0x4, 0x2, 0x17b, 0x6, 0x8, 0x6, 0xc2, 0x10000, 0x6, 0x338e9d49, 0xffffffffffffffff, 0x1000, 0x0, 0xfe6e, 0x5, 0x1, 0x7fffffffffffffff, 0x5c5b, 0x1f, 0x6b4, 0x1, 0x7fff, 0x9e, 0xe18b, 0x80000000, 0x3, 0xffff, 0x0, 0x8000, 0x9, 0x10001, 0xfd, 0xfffffffffffffff9, 0x11, 0xffffffffffff1ff5, 0xc42, 0x4, 0x9, 0x2, 0x15, 0x8001, 0x6, 0x4b37, 0x0, 0xffffffffffffff87, 0x3, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x3ff, 0x7, 0x5, 0x26, 0x80000000, 0x7, 0x9, 0x317, 0x3, 0xfffffffffffffe00, 0x80000000, 0x4, 0x3f, 0x54, 0x100000001, 0x1000, 0x6, 0x8000, 0x150, 0xfffffffffffffffb, 0x6, 0x66cc, 0x1, 0x4, 0xf8b9, 0x9, 0x33f3fc33, 0x8, 0x2ef, 0x5, 0xf7, 0x4, 0x4, 0x3ff, 0x4, 0x8000000000000000, 0xca2, 0x7, 0xfffffffffffffffc, 0x10001, 0x6, 0x5, 0xdfa, 0x8, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x1, 0x4, 0x20, 0x0, 0x1a9c, 0x9, 0x2, 0x1, 0x8001, 0x2, 0xdd, 0xffffffff80000000, 0x2, 0x4fab, 0x7, 0xffffffffffffffff, 0x10000, 0x10000]}) 07:36:16 executing program 4: syz_open_dev$sndctrl(0x0, 0x900000000000000, 0x0) 07:36:16 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, 0x0) 07:36:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0xf}}}, 0x0}, 0x90) 07:36:16 executing program 1: syz_open_dev$sndctrl(0x0, 0xc00000000000000, 0x0) 07:36:16 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) 07:36:16 executing program 2: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) (async) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x2b1f17a220ea296d) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x1403, 0x100, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x494c7409c9802427}, 0x2000c040) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x6100389) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0xfffe}]}) (async) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {0xfffe}]}) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) ioctl$PPPIOCDISCONN(r0, 0x7439) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x808, '\x00', 0x0, r2, 0x2, 0x3}, 0x48) 07:36:16 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x4, 0x2, 0xb43, 0x10001, 'syz0\x00', 0x6}, 0x0, [0x100000001, 0x100000010000, 0x45, 0xfb84, 0x800, 0x8, 0x3, 0x9, 0xffffffffffffffff, 0x200, 0x3, 0x80, 0x1, 0x5, 0x80000001, 0x0, 0x1, 0x8000000000000000, 0x7, 0x0, 0xfffffffffffffff9, 0x101, 0x100, 0xffff, 0x6, 0x2, 0xca1, 0x20cc, 0xffffffffffff9700, 0xd3b, 0x6, 0x80000001, 0x7, 0x7fffffffffffffff, 0x7, 0x2, 0x1, 0xbb9, 0x800, 0x0, 0x250, 0x0, 0xfa8, 0xd91f, 0xfff, 0x800, 0x8, 0x12f, 0x9d2, 0x10001, 0x5, 0x6, 0x2, 0x20c9be, 0x1, 0x1, 0x1, 0x100000000, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x8, 0x6, 0xa20, 0x6bc, 0x9, 0x8000, 0xf8, 0xffffffff80000000, 0xff, 0x100000000, 0x1, 0x3, 0x1f, 0x5, 0x1, 0x29f1, 0x7, 0x8000000000000001, 0x5, 0x7, 0x9, 0x9ee3, 0x1, 0xb79, 0x600e35d2, 0x100, 0x2, 0xf446, 0x8f, 0x9, 0x4, 0xd64, 0x800, 0x4, 0x1, 0x5, 0x80000000, 0x124e, 0xfffffffffffffffc, 0x2, 0x7, 0x3, 0x7, 0x0, 0x2, 0x7, 0x3, 0x780, 0x100000001, 0x8000000000000001, 0x8001, 0x9, 0x0, 0x1ff, 0x8000, 0x7fa0, 0x6, 0x5, 0x6, 0x2a, 0x1, 0x1, 0x1, 0x3, 0x5]}) 07:36:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:16 executing program 3: syz_open_dev$sndctrl(0x0, 0xc5ac5a7ffff0000, 0x0) 07:36:16 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) 07:36:16 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x4, 0x2, 0xb43, 0x10001, 'syz0\x00', 0x6}, 0x0, [0x100000001, 0x100000010000, 0x45, 0xfb84, 0x800, 0x8, 0x3, 0x9, 0xffffffffffffffff, 0x200, 0x3, 0x80, 0x1, 0x5, 0x80000001, 0x0, 0x1, 0x8000000000000000, 0x7, 0x0, 0xfffffffffffffff9, 0x101, 0x100, 0xffff, 0x6, 0x2, 0xca1, 0x20cc, 0xffffffffffff9700, 0xd3b, 0x6, 0x80000001, 0x7, 0x7fffffffffffffff, 0x7, 0x2, 0x1, 0xbb9, 0x800, 0x0, 0x250, 0x0, 0xfa8, 0xd91f, 0xfff, 0x800, 0x8, 0x12f, 0x9d2, 0x10001, 0x5, 0x6, 0x2, 0x20c9be, 0x1, 0x1, 0x1, 0x100000000, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x8, 0x6, 0xa20, 0x6bc, 0x9, 0x8000, 0xf8, 0xffffffff80000000, 0xff, 0x100000000, 0x1, 0x3, 0x1f, 0x5, 0x1, 0x29f1, 0x7, 0x8000000000000001, 0x5, 0x7, 0x9, 0x9ee3, 0x1, 0xb79, 0x600e35d2, 0x100, 0x2, 0xf446, 0x8f, 0x9, 0x4, 0xd64, 0x800, 0x4, 0x1, 0x5, 0x80000000, 0x124e, 0xfffffffffffffffc, 0x2, 0x7, 0x3, 0x7, 0x0, 0x2, 0x7, 0x3, 0x780, 0x100000001, 0x8000000000000001, 0x8001, 0x9, 0x0, 0x1ff, 0x8000, 0x7fa0, 0x6, 0x5, 0x6, 0x2a, 0x1, 0x1, 0x1, 0x3, 0x5]}) 07:36:16 executing program 1: syz_open_dev$sndctrl(0x0, 0x1100000000000000, 0x0) 07:36:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x2}}}, 0x0}, 0x90) 07:36:16 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0xf34, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:36:16 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) 07:36:16 executing program 3: syz_open_dev$sndctrl(0x0, 0x2000000000000000, 0x0) 07:36:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x3}}}, 0x0}, 0x90) 07:36:16 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x501000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0x1) r1 = gettid() r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x1, 0x0, 0x81, 0x8, 'syz1\x00', 0x80000001}, 0x1, 0x20000000, 0x0, r1, 0x4, 0xfffffffb, 'syz0\x00', &(0x7f0000000000)=['^.[].-^@-&[-\x00', '\x00', '@\x00', '\x00'], 0x11}) 07:36:16 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 07:36:16 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:16 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x501000) (async) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x501000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0x1) r1 = gettid() r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x1, 0x0, 0x81, 0x8, 'syz1\x00', 0x80000001}, 0x1, 0x20000000, 0x0, r1, 0x4, 0xfffffffb, 'syz0\x00', &(0x7f0000000000)=['^.[].-^@-&[-\x00', '\x00', '@\x00', '\x00'], 0x11}) 07:36:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x4}}}, 0x0}, 0x90) 07:36:16 executing program 4: syz_open_dev$sndctrl(0x0, 0x4000000000000000, 0x0) 07:36:16 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) (async) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) 07:36:16 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0xf34, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x48) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:36:16 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x8}}}, 0x0}, 0x90) 07:36:16 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40400) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x1, 0x3, 0x4, 0x7fff, 'syz1\x00', 0x81}, 0x0, 0x30, 0x80, 0xffffffffffffffff, 0x5, 0x1, 'syz1\x00', &(0x7f0000000040)=['*/\x00', '/dev/snd/controlC#\x00', '/dev/loop#\x00', '/dev/loop#\x00', '[\x00'], 0x2e}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="081b3d35000900007cee2d01d02768bac2009410518dd59e1d3bf12ec06bbb1047c56e179d33330b7d151db511e1ea947b1d05324d05c61542004fab"]) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x5) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 07:36:16 executing program 1: syz_open_dev$sndctrl(0x0, 0x7f00000000000000, 0x0) 07:36:17 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x4030582b, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x5, 0x81e8fc225e2e632f, 0x1, 0x0, '\x00', 0x7}, 0x4, 0x1, 0x9, r1, 0x8, 0x1, 'syz1\x00', &(0x7f0000000000)=['\\&}[/\x00', '\',#\x00', ')7:\x00', '),\x00', '-\\@\x00', '\'\x00', '-\x00', '&$%:\x00'], 0x1e}) 07:36:17 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = getpid() prlimit64(r2, 0x0, &(0x7f0000000140)={0x7}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='map\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r3, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20302, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)={'caif0\x00', 0x600}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='xprtrdma_op_set_cto\x00', r4}, 0x10) 07:36:17 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x40400) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x1, 0x3, 0x4, 0x7fff, 'syz1\x00', 0x81}, 0x0, 0x30, 0x80, 0xffffffffffffffff, 0x5, 0x1, 'syz1\x00', &(0x7f0000000040)=['*/\x00', '/dev/snd/controlC#\x00', '/dev/loop#\x00', '/dev/loop#\x00', '[\x00'], 0x2e}) (async, rerun: 32) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) (rerun: 32) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="081b3d35000900007cee2d01d02768bac2009410518dd59e1d3bf12ec06bbb1047c56e179d33330b7d151db511e1ea947b1d05324d05c61542004fab"]) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000080)=0x5) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 07:36:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0xc}}}, 0x0}, 0x90) 07:36:17 executing program 3: syz_open_dev$sndctrl(0x0, 0xffefff1f00000000, 0x0) 07:36:17 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x4030582b, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x5, 0x81e8fc225e2e632f, 0x1, 0x0, '\x00', 0x7}, 0x4, 0x1, 0x9, r1, 0x8, 0x1, 'syz1\x00', &(0x7f0000000000)=['\\&}[/\x00', '\',#\x00', ')7:\x00', '),\x00', '-\\@\x00', '\'\x00', '-\x00', '&$%:\x00'], 0x1e}) 07:36:17 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = getpid() prlimit64(r2, 0x0, &(0x7f0000000140)={0x7}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='map\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r3, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20302, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)={'caif0\x00', 0x600}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='xprtrdma_op_set_cto\x00', r4}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) getpid() (async) prlimit64(r2, 0x0, &(0x7f0000000140)={0x7}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='map\x00', r1}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r2, r3, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, r1, 0x3, 0x5, 0x4}, 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20302, 0x0) (async) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)={'caif0\x00', 0x600}) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='xprtrdma_op_set_cto\x00', r4}, 0x10) (async) 07:36:17 executing program 1: syz_open_dev$sndctrl(0x0, 0xffefff1f00000000, 0x0) 07:36:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:17 executing program 4: syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x0) 07:36:17 executing program 1: syz_open_dev$sndctrl(0x0, 0xffff1fa7ffff0000, 0x0) 07:36:17 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x4030582b, 0x0) (async, rerun: 64) r1 = gettid() (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x5, 0x81e8fc225e2e632f, 0x1, 0x0, '\x00', 0x7}, 0x4, 0x1, 0x9, r1, 0x8, 0x1, 'syz1\x00', &(0x7f0000000000)=['\\&}[/\x00', '\',#\x00', ')7:\x00', '),\x00', '-\\@\x00', '\'\x00', '-\x00', '&$%:\x00'], 0x1e}) 07:36:17 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x600100, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) 07:36:17 executing program 0: syz_open_dev$sndctrl(0x0, 0xfffffffffffffffe, 0x0) 07:36:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:17 executing program 0: syz_open_dev$sndctrl(0x0, 0xffffffff00000000, 0x0) 07:36:17 executing program 4: syz_open_dev$sndctrl(0x0, 0x5, 0x101142) 07:36:17 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x600100, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x48) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x48) (rerun: 32) 07:36:17 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x3) 07:36:17 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x5}}}, 0x0}, 0x90) 07:36:17 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x2) 07:36:17 executing program 3: syz_open_dev$sndctrl(0x0, 0x5, 0x101142) syz_open_dev$sndctrl(0x0, 0x5, 0x101142) (async) 07:36:17 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x3) 07:36:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x7}}}, 0x0}, 0x90) 07:36:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0xf4bac24b35504cad, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1406, 0x71c, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x2044820) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0xc020660b, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1402, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x24000010) 07:36:17 executing program 4: syz_open_dev$sndctrl(0x0, 0xa5f5, 0x10001) 07:36:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xf1bb4d56b01d4844) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x1, 0x4, 0x7, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r1, r2, r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000600)={0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0]}) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) [ 917.761604][ T50] Bluetooth: hci4: command 0x0407 tx timeout 07:36:17 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0}, 0x18) 07:36:17 executing program 2: syz_open_dev$sndctrl(0x0, 0xa5f5, 0x10001) 07:36:17 executing program 3: syz_open_dev$sndctrl(0x0, 0xa5f5, 0x10001) syz_open_dev$sndctrl(0x0, 0xa5f5, 0x10001) (async) 07:36:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0xf4bac24b35504cad, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1406, 0x71c, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x2044820) (async, rerun: 64) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0xc020660b, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x1402, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x24000010) 07:36:17 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x4) 07:36:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xf1bb4d56b01d4844) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r3}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[{}], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x1, 0x4, 0x7, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r1, r2, r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000600)={0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0]}) (async, rerun: 64) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (rerun: 64) 07:36:17 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0}, 0x18) 07:36:17 executing program 1: syz_open_dev$sndctrl(0x0, 0x6, 0x60a800) 07:36:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x9}}}, 0x0}, 0x90) 07:36:17 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x6) 07:36:17 executing program 3: syz_open_dev$sndctrl(0x0, 0x6, 0x60a800) 07:36:17 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x4) 07:36:17 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x8, 0x8, 0x0, 0x1, 0x221f1075, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x1}, 0x48) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x4030582b, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x5450, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x81, 0xfffffffb, 0xff, 0x2000, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x6}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x4030582a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x40305839, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x23, &(0x7f0000000980)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000380)=""/221, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xe, 0xffffffff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0, r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000740), 0x10, 0x10001}, 0x90) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r9, &(0x7f0000000140)={0x1f, @none}, 0x8) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) connect$bt_sco(r9, &(0x7f0000000040), 0x8) 07:36:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0xb}}}, 0x0}, 0x90) 07:36:17 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6402) 07:36:18 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x9) 07:36:18 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x1, 0x4, 0xffff, 0x80000000, 'syz1\x00', 0x80}, 0x1, [0xffffffff, 0x7fff, 0x35, 0x9, 0x5, 0x1, 0x7, 0x8000000000000001, 0xffffffffffffff7a, 0xb0, 0x6, 0x7, 0x7fffffffffffffff, 0x1, 0xb27, 0xfff, 0x5, 0x401, 0x3f, 0x8, 0x10001, 0x2, 0xffffffff, 0x2, 0x7fffffffffffffff, 0xfff, 0x1, 0xab, 0x20, 0x1ff, 0x80000001, 0x8000000000000001, 0x3ff, 0x8c11215, 0x1, 0x6, 0x0, 0x8000000000000001, 0x4, 0x5c428d52, 0x101, 0x200, 0x6, 0x4, 0x0, 0xcbdf, 0x1, 0x6, 0x7, 0x23, 0x3, 0x1, 0x2da1b639, 0x20, 0x7f, 0x309, 0x5, 0x3ff, 0x2, 0xfffffffffffffffc, 0x8001, 0x200, 0x0, 0x2, 0x9, 0x4, 0x2, 0xfffffffffffffff7, 0x7, 0x3, 0x80, 0x9, 0xffffffffffffff82, 0x4, 0x8000000000000000, 0x8, 0xffffffffffffffff, 0xfffffffffffffffa, 0x7fffffffffffffff, 0x4, 0x9c, 0x81, 0x4d0, 0x1d5c, 0x3, 0x78, 0x0, 0x4d6, 0x7, 0x4, 0x5, 0xfffffffffffffc00, 0x2, 0x4, 0x1, 0x8, 0x4, 0x2, 0xf66b, 0x1, 0x10001, 0x2, 0x9, 0x100, 0x10000, 0x40, 0x9, 0x2, 0x9, 0x10001, 0x6e4b, 0x100000000, 0xfffffffffffffff7, 0x4, 0xc4, 0x0, 0x7fff, 0xf84, 0x4, 0x1, 0x6, 0x400, 0x10000, 0xfffffffffffeffff, 0x77, 0x1, 0x0, 0x8000000000000]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x4c, 0x501000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000005c0)={{0x9, 0x4, 0x3, 0x2, '\x00', 0x3}, 0x1, [0x4, 0x0, 0x7, 0x9, 0x880, 0x8, 0xffffffffffffffb2, 0x0, 0x5, 0x8000, 0x10000, 0x100000001, 0x4, 0x7, 0x8, 0x101, 0x1f, 0x0, 0xa8d, 0x9, 0x23c, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x40, 0x100000000, 0x59, 0x10001, 0x9, 0x1f, 0x9, 0x1, 0x0, 0x7, 0x401, 0x4, 0x9, 0xff, 0x4, 0x7fffffff, 0xfffffffffffffff7, 0x7f, 0x3f02a81, 0x8, 0x200, 0x8, 0x5, 0x4, 0x8000000000000, 0x5, 0xffff, 0x4, 0x8, 0x8, 0xfffffffffffffffa, 0x81, 0x2, 0x8, 0x6, 0x380000000, 0x6, 0x20, 0xd56, 0x34, 0x0, 0x674f, 0x0, 0x800, 0x20, 0x4, 0xffff, 0x8000000000000001, 0x10001, 0x0, 0x6, 0x2, 0x3, 0xffffffffffffffe1, 0x5, 0x80000001, 0x10001, 0xc25, 0x6, 0x101, 0x7f, 0x7, 0x8000000000000000, 0x5, 0x7f, 0x8000000007, 0x5, 0x4000005, 0x8, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0xd79b, 0x5f9b6627, 0x5, 0x8000, 0x8, 0xfff, 0x9, 0x7a30, 0x8, 0x3ff, 0x7fffffff, 0x0, 0x200, 0x1, 0x20, 0x3, 0x1, 0xd902, 0x3, 0x80000000, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x10000, 0x8001, 0x0, 0x5, 0x9, 0x6]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x10001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000ac0), 0x80, 0x8800) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000540)=0x2) 07:36:18 executing program 4: r0 = getegid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) r3 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x7000) r4 = getuid() getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = gettid() r7 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x1, r4, r0, r5, r0, 0x4c, 0x9}, 0x2, 0x1, 0x7, 0x4, r6, r7, 0x4f4}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x0, 0x5, 0x3, 0xff}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x6, 0x39, 0x32c, 0x8}) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/200) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000000)=0x40000002) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f00000000c0)) 07:36:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:18 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xc) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6402) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xc) (async) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x6402) (async) 07:36:18 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x1, 0x4, 0xffff, 0x80000000, 'syz1\x00', 0x80}, 0x1, [0xffffffff, 0x7fff, 0x35, 0x9, 0x5, 0x1, 0x7, 0x8000000000000001, 0xffffffffffffff7a, 0xb0, 0x6, 0x7, 0x7fffffffffffffff, 0x1, 0xb27, 0xfff, 0x5, 0x401, 0x3f, 0x8, 0x10001, 0x2, 0xffffffff, 0x2, 0x7fffffffffffffff, 0xfff, 0x1, 0xab, 0x20, 0x1ff, 0x80000001, 0x8000000000000001, 0x3ff, 0x8c11215, 0x1, 0x6, 0x0, 0x8000000000000001, 0x4, 0x5c428d52, 0x101, 0x200, 0x6, 0x4, 0x0, 0xcbdf, 0x1, 0x6, 0x7, 0x23, 0x3, 0x1, 0x2da1b639, 0x20, 0x7f, 0x309, 0x5, 0x3ff, 0x2, 0xfffffffffffffffc, 0x8001, 0x200, 0x0, 0x2, 0x9, 0x4, 0x2, 0xfffffffffffffff7, 0x7, 0x3, 0x80, 0x9, 0xffffffffffffff82, 0x4, 0x8000000000000000, 0x8, 0xffffffffffffffff, 0xfffffffffffffffa, 0x7fffffffffffffff, 0x4, 0x9c, 0x81, 0x4d0, 0x1d5c, 0x3, 0x78, 0x0, 0x4d6, 0x7, 0x4, 0x5, 0xfffffffffffffc00, 0x2, 0x4, 0x1, 0x8, 0x4, 0x2, 0xf66b, 0x1, 0x10001, 0x2, 0x9, 0x100, 0x10000, 0x40, 0x9, 0x2, 0x9, 0x10001, 0x6e4b, 0x100000000, 0xfffffffffffffff7, 0x4, 0xc4, 0x0, 0x7fff, 0xf84, 0x4, 0x1, 0x6, 0x400, 0x10000, 0xfffffffffffeffff, 0x77, 0x1, 0x0, 0x8000000000000]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x4c, 0x501000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000005c0)={{0x9, 0x4, 0x3, 0x2, '\x00', 0x3}, 0x1, [0x4, 0x0, 0x7, 0x9, 0x880, 0x8, 0xffffffffffffffb2, 0x0, 0x5, 0x8000, 0x10000, 0x100000001, 0x4, 0x7, 0x8, 0x101, 0x1f, 0x0, 0xa8d, 0x9, 0x23c, 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x40, 0x100000000, 0x59, 0x10001, 0x9, 0x1f, 0x9, 0x1, 0x0, 0x7, 0x401, 0x4, 0x9, 0xff, 0x4, 0x7fffffff, 0xfffffffffffffff7, 0x7f, 0x3f02a81, 0x8, 0x200, 0x8, 0x5, 0x4, 0x8000000000000, 0x5, 0xffff, 0x4, 0x8, 0x8, 0xfffffffffffffffa, 0x81, 0x2, 0x8, 0x6, 0x380000000, 0x6, 0x20, 0xd56, 0x34, 0x0, 0x674f, 0x0, 0x800, 0x20, 0x4, 0xffff, 0x8000000000000001, 0x10001, 0x0, 0x6, 0x2, 0x3, 0xffffffffffffffe1, 0x5, 0x80000001, 0x10001, 0xc25, 0x6, 0x101, 0x7f, 0x7, 0x8000000000000000, 0x5, 0x7f, 0x8000000007, 0x5, 0x4000005, 0x8, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0xd79b, 0x5f9b6627, 0x5, 0x8000, 0x8, 0xfff, 0x9, 0x7a30, 0x8, 0x3ff, 0x7fffffff, 0x0, 0x200, 0x1, 0x20, 0x3, 0x1, 0xd902, 0x3, 0x80000000, 0x1000, 0x6, 0x9, 0x1, 0x0, 0x10000, 0x8001, 0x0, 0x5, 0x9, 0x6]}) r2 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x10001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000ac0), 0x80, 0x8800) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000540)=0x2) 07:36:18 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xc) 07:36:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:18 executing program 2: r0 = getegid() r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) r3 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x7000) r4 = getuid() getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) r6 = gettid() r7 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x1, r4, r0, r5, r0, 0x4c, 0x9}, 0x2, 0x1, 0x7, 0x4, r6, r7, 0x4f4}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x0, 0x5, 0x3, 0xff}) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x6, 0x39, 0x32c, 0x8}) r8 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/200) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000000)=0x40000002) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f00000000c0)) getegid() (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) (async) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) (async) shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x7000) (async) getuid() (async) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) gettid() (async) getpid() (async) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x1, r4, r0, r5, r0, 0x4c, 0x9}, 0x2, 0x1, 0x7, 0x4, r6, r7, 0x4f4}) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x0, 0x5, 0x3, 0xff}) (async) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x6, 0x39, 0x32c, 0x8}) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000340)=""/200) (async) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000000)=0x40000002) (async) ioctl$TIOCNOTTY(r1, 0x5422) (async) ioctl$SNDRV_CTL_IOCTL_PVERSION(r8, 0x80045500, &(0x7f00000000c0)) (async) 07:36:18 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x303042, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, r0, 0x1, 0x2, 0x3}, 0x48) 07:36:18 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x4, 0xffff8a86, 0x0, '\x00', 0x4f8}, 0x6, 0x100, 0x2, r1, 0x4, 0x8f48, 'syz1\x00', &(0x7f0000000000)=['\x00', '[(\x8f\\\x00', '!\x00', '\\}\x00'], 0xb}) 07:36:18 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x11) 07:36:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x41}}}, 0x0}, 0x90) 07:36:18 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000028000000070000000700000009000000fbffffff010000000500000005000000010100003f0000008140000005bc9aed24df064a8289da68477d547821fa737b86658e29dae434da5102c944679ff3ec2c9321103ee70452dc610e90c4d56e153cc60cdaf81d05e99a5960dc1e8d62ff47137eacf77b52672ba0e3f483719000955329fcde04a67ba5cbc04578a308ae33b4e40ddf2f78"]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 07:36:18 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x4, 0xffff8a86, 0x0, '\x00', 0x4f8}, 0x6, 0x100, 0x2, r1, 0x4, 0x8f48, 'syz1\x00', &(0x7f0000000000)=['\x00', '[(\x8f\\\x00', '!\x00', '\\}\x00'], 0xb}) 07:36:18 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x300) 07:36:18 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x303042, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, r0, 0x1, 0x2, 0x3}, 0x48) [ 918.281927][ T28] kauditd_printk_skb: 28743 callbacks suppressed [ 918.281942][ T28] audit: type=1400 audit(5470578.250:1880054): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20141 comm="syz-executor.2" name="syzkaller.ptuJlY" dev="nvme0n1p2" ino=1748 [ 918.288502][ T28] audit: type=1400 audit(5470578.260:1880055): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20141 comm="syz-executor.2" name="2078" dev="nvme0n1p2" ino=1743 [ 918.296320][ T5034] audit: audit_backlog=65 > audit_backlog_limit=64 07:36:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) [ 918.299483][ T5034] audit: audit_lost=480171 audit_rate_limit=0 audit_backlog_limit=64 [ 918.300128][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 918.301953][ T9126] audit: audit_backlog=65 > audit_backlog_limit=64 [ 918.303240][ C0] audit: audit_lost=480172 audit_rate_limit=0 audit_backlog_limit=64 [ 918.303256][ C0] audit: backlog limit exceeded [ 918.303388][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 918.304973][ T9126] audit: audit_lost=480173 audit_rate_limit=0 audit_backlog_limit=64 07:36:18 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x406) 07:36:18 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x200) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001640)={&(0x7f0000000200), 0xc, &(0x7f0000001600)={&(0x7f0000000240)={0x13bc, 0x14, 0x400, 0x70bd28, 0x25dfdbfc, {0x1f, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "e6414e0037350deb37ecb70bb37445d06f80d0d669cc44516e444468310e5c0c6d8d23271547d74b544e58bc55db22c955fd362ff5f6dee465e300a2bad89b3e082144a6f3a20c10e172c665541e71217ef5b4a2ee63c433f27a0444539fd4054e3adc485e4d1dc1006e5d3dd65bebd309b61be0905e19fe9281aef89e5e7d834aef0d88b43b1fe78aac6ec8910d6cd8f5af741ef5d9dd50e8a2fea90fd6ac020b5c3c75fbaf413f9f6c882cfa1ac0113ecb33e7d59bdb82e9"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "2ab6bd08893d23d9c74287a767e3708d8e3ec98ec59ac7d1ec63871c2c31d899080f696185bbe5224f027a18aab2b77756bdd4466f8939771dfd0db2e1d4aea43e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "04daa28c4b80c224242a40b1ab051437fc51f71496a16349b6fb1b7e2454518719f7c562ddbc0622a47b8141177820172137887c753e6b7a3fd4b191621a3c2f1c5d93a6fe77c9b957be7fb4127d4dbe39c285948572897885e9900fa858919d8d6150ce47dc975ed3"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "3f84dfbadda020367456301eb96ad0700fe69ec52b547d52da54cfff7e6ae04f2cac2b6c5a41bb3b3188ea763bd760c1f853aaa53acda45aa71407b2a92e05b37a77e880fc0efaa7c47d9b4fa4389dc57ec39c09f0ad7a1d7791a0698a289506a0faaaa2d4a02d74f6fa10814c3afd7bb529c58df1f75061fdbb8f34a2fc0ac5546de97d110cee82cd48e23544067261974d438cdf242eb86a5ce9a34b2053bd4c6d19f2ba1fb74b949f98f9ef5feb25c8e75374c3d7a31b44df"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "68485ec842f5793e77b33e8ad8b27304e3459fca63dd08aba1cc84cf6ac20c02c8bca34f653a0028671014180ffb279362ae21c88e6a378609926d79fa5927485055f6c2d040b098708bdf6d509284bd7eefc6b670c36110dd472a326c49ac3060298f01832c4babde90d957da2adf0696a8a3dd02608da067027274e8a5af996cef26ea"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "0fbb34d9a63f9ab7c40c4e82bd16782dff8900f502989f83ca62df5864b4deaf8560b875bc932a970312a4a3d6e0ef24ca2e1982d4f50d3a2481b28b80f36a5c9c92355530d5664fd620552ef6583bbb2352d28daf8b86d2c95b82e0a2e1e54e087f0329a3f2b82d3899ade72f02460260b031db5deb694053c7b5d64917a0d00ae3279fcc75876ae2533013751b02823c737bc511f8e78fa35cd5ab31844b089d0bd3207f7506a35f2f9ae5fc244d9150c6c3140f5f8fb4a6355f30ce803d05adeb9d4fabaf62481b58a0"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2184c8b29bdeb678432cae2f"}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = gettid() r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x7, 0x0, 0x1, 0x9, 'syz1\x00', 0x7}, 0x4, 0x2, 0x1, r2, 0x3, 0x1ff, 'syz1\x00', &(0x7f0000000040)=['\x00', ']^\x00', '/x\x00'], 0x7}) 07:36:18 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000028000000070000000700000009000000fbffffff010000000500000005000000010100003f0000008140000005bc9aed24df064a8289da68477d547821fa737b86658e29dae434da5102c944679ff3ec2c9321103ee70452dc610e90c4d56e153cc60cdaf81d05e99a5960dc1e8d62ff47137eacf77b52672ba0e3f483719000955329fcde04a67ba5cbc04578a308ae33b4e40ddf2f78"]) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) 07:36:18 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc023}) 07:36:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2}}}, 0x0}, 0x90) 07:36:18 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x600) 07:36:18 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x8080) 07:36:18 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x200) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001640)={&(0x7f0000000200), 0xc, &(0x7f0000001600)={&(0x7f0000000240)={0x13bc, 0x14, 0x400, 0x70bd28, 0x25dfdbfc, {0x1f, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "e6414e0037350deb37ecb70bb37445d06f80d0d669cc44516e444468310e5c0c6d8d23271547d74b544e58bc55db22c955fd362ff5f6dee465e300a2bad89b3e082144a6f3a20c10e172c665541e71217ef5b4a2ee63c433f27a0444539fd4054e3adc485e4d1dc1006e5d3dd65bebd309b61be0905e19fe9281aef89e5e7d834aef0d88b43b1fe78aac6ec8910d6cd8f5af741ef5d9dd50e8a2fea90fd6ac020b5c3c75fbaf413f9f6c882cfa1ac0113ecb33e7d59bdb82e9"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "2ab6bd08893d23d9c74287a767e3708d8e3ec98ec59ac7d1ec63871c2c31d899080f696185bbe5224f027a18aab2b77756bdd4466f8939771dfd0db2e1d4aea43e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "04daa28c4b80c224242a40b1ab051437fc51f71496a16349b6fb1b7e2454518719f7c562ddbc0622a47b8141177820172137887c753e6b7a3fd4b191621a3c2f1c5d93a6fe77c9b957be7fb4127d4dbe39c285948572897885e9900fa858919d8d6150ce47dc975ed3"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "3f84dfbadda020367456301eb96ad0700fe69ec52b547d52da54cfff7e6ae04f2cac2b6c5a41bb3b3188ea763bd760c1f853aaa53acda45aa71407b2a92e05b37a77e880fc0efaa7c47d9b4fa4389dc57ec39c09f0ad7a1d7791a0698a289506a0faaaa2d4a02d74f6fa10814c3afd7bb529c58df1f75061fdbb8f34a2fc0ac5546de97d110cee82cd48e23544067261974d438cdf242eb86a5ce9a34b2053bd4c6d19f2ba1fb74b949f98f9ef5feb25c8e75374c3d7a31b44df"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "68485ec842f5793e77b33e8ad8b27304e3459fca63dd08aba1cc84cf6ac20c02c8bca34f653a0028671014180ffb279362ae21c88e6a378609926d79fa5927485055f6c2d040b098708bdf6d509284bd7eefc6b670c36110dd472a326c49ac3060298f01832c4babde90d957da2adf0696a8a3dd02608da067027274e8a5af996cef26ea"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "0fbb34d9a63f9ab7c40c4e82bd16782dff8900f502989f83ca62df5864b4deaf8560b875bc932a970312a4a3d6e0ef24ca2e1982d4f50d3a2481b28b80f36a5c9c92355530d5664fd620552ef6583bbb2352d28daf8b86d2c95b82e0a2e1e54e087f0329a3f2b82d3899ade72f02460260b031db5deb694053c7b5d64917a0d00ae3279fcc75876ae2533013751b02823c737bc511f8e78fa35cd5ab31844b089d0bd3207f7506a35f2f9ae5fc244d9150c6c3140f5f8fb4a6355f30ce803d05adeb9d4fabaf62481b58a0"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2184c8b29bdeb678432cae2f"}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x1}, 0x40) r2 = gettid() r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x7, 0x0, 0x1, 0x9, 'syz1\x00', 0x7}, 0x4, 0x2, 0x1, r2, 0x3, 0x1ff, 'syz1\x00', &(0x7f0000000040)=['\x00', ']^\x00', '/x\x00'], 0x7}) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x200) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001640)={&(0x7f0000000200), 0xc, &(0x7f0000001600)={&(0x7f0000000240)={0x13bc, 0x14, 0x400, 0x70bd28, 0x25dfdbfc, {0x1f, 0x81}, [@INET_DIAG_REQ_BYTECODE={0xbd, 0x1, "e6414e0037350deb37ecb70bb37445d06f80d0d669cc44516e444468310e5c0c6d8d23271547d74b544e58bc55db22c955fd362ff5f6dee465e300a2bad89b3e082144a6f3a20c10e172c665541e71217ef5b4a2ee63c433f27a0444539fd4054e3adc485e4d1dc1006e5d3dd65bebd309b61be0905e19fe9281aef89e5e7d834aef0d88b43b1fe78aac6ec8910d6cd8f5af741ef5d9dd50e8a2fea90fd6ac020b5c3c75fbaf413f9f6c882cfa1ac0113ecb33e7d59bdb82e9"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "2ab6bd08893d23d9c74287a767e3708d8e3ec98ec59ac7d1ec63871c2c31d899080f696185bbe5224f027a18aab2b77756bdd4466f8939771dfd0db2e1d4aea43e"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "04daa28c4b80c224242a40b1ab051437fc51f71496a16349b6fb1b7e2454518719f7c562ddbc0622a47b8141177820172137887c753e6b7a3fd4b191621a3c2f1c5d93a6fe77c9b957be7fb4127d4dbe39c285948572897885e9900fa858919d8d6150ce47dc975ed3"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "3f84dfbadda020367456301eb96ad0700fe69ec52b547d52da54cfff7e6ae04f2cac2b6c5a41bb3b3188ea763bd760c1f853aaa53acda45aa71407b2a92e05b37a77e880fc0efaa7c47d9b4fa4389dc57ec39c09f0ad7a1d7791a0698a289506a0faaaa2d4a02d74f6fa10814c3afd7bb529c58df1f75061fdbb8f34a2fc0ac5546de97d110cee82cd48e23544067261974d438cdf242eb86a5ce9a34b2053bd4c6d19f2ba1fb74b949f98f9ef5feb25c8e75374c3d7a31b44df"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "68485ec842f5793e77b33e8ad8b27304e3459fca63dd08aba1cc84cf6ac20c02c8bca34f653a0028671014180ffb279362ae21c88e6a378609926d79fa5927485055f6c2d040b098708bdf6d509284bd7eefc6b670c36110dd472a326c49ac3060298f01832c4babde90d957da2adf0696a8a3dd02608da067027274e8a5af996cef26ea"}, @INET_DIAG_REQ_BYTECODE={0xcf, 0x1, "0fbb34d9a63f9ab7c40c4e82bd16782dff8900f502989f83ca62df5864b4deaf8560b875bc932a970312a4a3d6e0ef24ca2e1982d4f50d3a2481b28b80f36a5c9c92355530d5664fd620552ef6583bbb2352d28daf8b86d2c95b82e0a2e1e54e087f0329a3f2b82d3899ade72f02460260b031db5deb694053c7b5d64917a0d00ae3279fcc75876ae2533013751b02823c737bc511f8e78fa35cd5ab31844b089d0bd3207f7506a35f2f9ae5fc244d9150c6c3140f5f8fb4a6355f30ce803d05adeb9d4fabaf62481b58a0"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "2184c8b29bdeb678432cae2f"}]}, 0x13bc}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) gettid() (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x0, 0x0}, 0x30) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x7, 0x0, 0x1, 0x9, 'syz1\x00', 0x7}, 0x4, 0x2, 0x1, r2, 0x3, 0x1ff, 'syz1\x00', &(0x7f0000000040)=['\x00', ']^\x00', '/x\x00'], 0x7}) (async) 07:36:18 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3}}}, 0x0}, 0x90) 07:36:18 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc023}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc023}) (async) 07:36:18 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x5be, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008040}, 0x41) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) 07:36:18 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x6) 07:36:18 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x8080) 07:36:18 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x4}}}, 0x0}, 0x90) 07:36:18 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x604) 07:36:18 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x8, 0x8, 0x0, 0x1, 0x221f1075, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x1}, 0x48) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x4030582b, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x5450, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x81, 0xfffffffb, 0xff, 0x2000, 0x1, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x6}, 0x48) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x4030582a, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r8, 0x40305839, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x23, &(0x7f0000000980)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000380)=""/221, 0x41000, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xe, 0xffffffff, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r0, r2, r3, r4, r5, r6, r7, r8], &(0x7f0000000740), 0x10, 0x10001}, 0x90) (async) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async, rerun: 64) connect$bt_sco(r9, &(0x7f0000000140)={0x1f, @none}, 0x8) (async, rerun: 64) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000080)=""/68, &(0x7f0000000100)=0x44) (async, rerun: 32) connect$bt_sco(r9, &(0x7f0000000040), 0x8) (rerun: 32) 07:36:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x8}}}, 0x0}, 0x90) 07:36:18 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x810) 07:36:18 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/227) 07:36:18 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0x0, 0x1, 0x20, '\x00', 0x4}, 0x5, 0x2, 0x79, 0x0, 0x9, 0x6, 'syz1\x00', &(0x7f0000000000)=['\x00', '-#\x00', '@/\x00', '^)@[\x00', '.\x00', ')&\x00', '}}$\x00', '}%+\x00', '%\x00'], 0x1b}) 07:36:18 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x5be, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008040}, 0x41) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x5be, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008040}, 0x41) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) (async) 07:36:18 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:18 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x900) 07:36:18 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc}}}, 0x0}, 0x90) 07:36:19 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/227) 07:36:19 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0x0, 0x1, 0x20, '\x00', 0x4}, 0x5, 0x2, 0x79, 0x0, 0x9, 0x6, 'syz1\x00', &(0x7f0000000000)=['\x00', '-#\x00', '@/\x00', '^)@[\x00', '.\x00', ')&\x00', '}}$\x00', '}%+\x00', '%\x00'], 0x1b}) 07:36:19 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff12) 07:36:19 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xc00) 07:36:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x11}}}, 0x0}, 0x90) 07:36:19 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x81) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xb28) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x3) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x9) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x125204) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x7) 07:36:19 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:19 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff12) (async) 07:36:19 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x1008) 07:36:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x15}}}, 0x0}, 0x90) 07:36:19 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x81) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xb28) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x3) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x9) (async) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x125204) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000100)=0x7) 07:36:19 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x9) 07:36:19 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x1008) 07:36:19 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfffffffffffffffc) 07:36:19 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x22}}}, 0x0}, 0x90) 07:36:19 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xfffffffffffffffc) 07:36:19 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x9) 07:36:19 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)=0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:19 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x1100) 07:36:19 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff0e) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x4fee01, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) 07:36:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7d}}}, 0x0}, 0x90) 07:36:19 executing program 1: syz_open_dev$sndctrl(0x0, 0x5ab0cef9, 0x24800) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/219) 07:36:19 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)=0x1) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x155}}}, 0x0}, 0x90) 07:36:19 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffffffffff0e) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x4fee01, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) 07:36:19 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x2000) 07:36:19 executing program 2: syz_open_dev$sndctrl(0x0, 0x5ab0cef9, 0x24800) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/219) 07:36:19 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x239}}}, 0x0}, 0x90) [ 919.841576][ T5744] Bluetooth: hci4: command 0x0407 tx timeout 07:36:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x249}}}, 0x0}, 0x90) 07:36:19 executing program 0: syz_open_dev$sndctrl(0x0, 0x5ab0cef9, 0x24800) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/219) 07:36:19 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000200)=0x3f) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x327200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0x2) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000180)) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x29, 0x3}) 07:36:19 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x4000) 07:36:19 executing program 2: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x1403, 0x0, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x48806) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000003c0)) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000580)=0xffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x128, 0x1403, 0x300, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x1, 0x1, 0x1}, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x140e, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x6}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$PPPIOCDISCONN(r3, 0x7439) 07:36:19 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:19 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x300}}}, 0x0}, 0x90) 07:36:19 executing program 4: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20802210}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000214080000004b3e609b9cb108008f87a5fe9b854400", @ANYRES32=r0, @ANYBLOB="00000080ffffffff00", @ANYRES32=r3, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="080001000100000008000100000000000900020073797a3100000000080001000000000008000100000000000800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8008094}, 0x20004814) r4 = syz_open_dev$sndctrl(0x0, 0xa57, 0x20080) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) ioctl$PPPIOCDISCONN(r2, 0x7439) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000000)=0x6) 07:36:19 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x7f00) 07:36:19 executing program 0: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x1403, 0x0, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x48806) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x8004}, 0x4) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000003c0)) (async) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000580)=0xffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x128, 0x1403, 0x300, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_virt_wifi\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x1, 0x1, 0x1}, 0x48) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x140e, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x6}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) ioctl$PPPIOCDISCONN(r3, 0x7439) 07:36:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3c8}}}, 0x0}, 0x90) 07:36:20 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x200000) 07:36:20 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid\x00') r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20802210}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000214080000004b3e609b9cb108008f87a5fe9b854400", @ANYRES32=r0, @ANYBLOB="00000080ffffffff00", @ANYRES32=r3, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYBLOB="080001000100000008000100000000000900020073797a3100000000080001000000000008000100000000000800010000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8008094}, 0x20004814) r4 = syz_open_dev$sndctrl(0x0, 0xa57, 0x20080) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) (async) ioctl$PPPIOCDISCONN(r2, 0x7439) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000000)=0x6) 07:36:20 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60f302, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) 07:36:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3e0}}}, 0x0}, 0x90) 07:36:20 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xf0ff1f) 07:36:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000200)=0x3f) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x327200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x2) (async) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000140)=0x2) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSMRRU(r2, 0x4004743b, &(0x7f0000000080)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000180)) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f00000001c0)={0x29, 0x3}) 07:36:20 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x2, 0x6, 0x8, 0x9, '\x00', 0x4}, 0xffffffff, 0x400, 0x2, r1, 0x8, 0x9, 'syz1\x00', &(0x7f0000000000)=['^}{.(\xac/&-&:\x00', '\x00', '-$/\x00', '!,(:%:\x00', '\x00', '\x00', '\x00\x00', '},\\!\x00'], 0x21}) 07:36:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x406}}}, 0x0}, 0x90) 07:36:20 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60f302, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60f302, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, 0x1403, 0x4, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x81) (async) 07:36:20 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x1000000) 07:36:20 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x2, 0x6, 0x8, 0x9, '\x00', 0x4}, 0xffffffff, 0x400, 0x2, r1, 0x8, 0x9, 'syz1\x00', &(0x7f0000000000)=['^}{.(\xac/&-&:\x00', '\x00', '-$/\x00', '!,(:%:\x00', '\x00', '\x00', '\x00\x00', '},\\!\x00'], 0x21}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x2, 0x6, 0x8, 0x9, '\x00', 0x4}, 0xffffffff, 0x400, 0x2, r1, 0x8, 0x9, 'syz1\x00', &(0x7f0000000000)=['^}{.(\xac/&-&:\x00', '\x00', '-$/\x00', '!,(:%:\x00', '\x00', '\x00', '\x00\x00', '},\\!\x00'], 0x21}) 07:36:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:20 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/104) 07:36:20 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x2000000) 07:36:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x604}}}, 0x0}, 0x90) 07:36:20 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/127) 07:36:20 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/104) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/104) (async) 07:36:20 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x3000000) 07:36:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc00}}}, 0x0}, 0x90) 07:36:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) (async) r2 = inotify_init1(0x80000) (async) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) (async) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:20 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 07:36:20 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x4000000) 07:36:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1100}}}, 0x0}, 0x90) 07:36:20 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x6000000) 07:36:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:20 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffe5) 07:36:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:20 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) 07:36:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1100}}}, 0x0}, 0x90) 07:36:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:20 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1500}}}, 0x0}, 0x90) 07:36:20 executing program 0: r0 = gettid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_req_failed\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x2, &(0x7f0000000080)='-\x00'}, 0x30) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:20 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xffffffe5) 07:36:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}}, 0x0}, 0x90) 07:36:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)={'veth0\x00', 0x600}) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x881) 07:36:20 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x6040000) 07:36:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) r2 = inotify_init1(0x80000) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x50000950) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:20 executing program 4: r0 = gettid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_req_failed\x00'}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x2, &(0x7f0000000080)='-\x00'}, 0x30) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) gettid() (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='io_uring_req_failed\x00'}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x2, &(0x7f0000000080)='-\x00'}, 0x30) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) 07:36:20 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x105000) 07:36:20 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2200}}}, 0x0}, 0x90) 07:36:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)={'veth0\x00', 0x600}) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x881) 07:36:20 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x8100000) 07:36:21 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3902}}}, 0x0}, 0x90) 07:36:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0xc}, 0x18) 07:36:21 executing program 0: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) (async) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x105000) 07:36:21 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) inotify_init1(0x80000) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x9000000) 07:36:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x4000}}}, 0x0}, 0x90) 07:36:21 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x200880) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = inotify_init1(0x80800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 07:36:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0xc}, 0x18) 07:36:21 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x200880) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = inotify_init1(0x80800) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 07:36:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x4902}}}, 0x0}, 0x90) 07:36:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) inotify_init1(0x80000) socket$phonet(0x23, 0x2, 0x1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc025, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xc000000) 07:36:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5501}}}, 0x0}, 0x90) 07:36:21 executing program 2: syz_open_dev$sndctrl(0x0, 0x200100000001, 0x46a803) 07:36:21 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x80086601, 0x0) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 07:36:21 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc025, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7d00}}}, 0x0}, 0x90) 07:36:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) inotify_init1(0x80000) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 32) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) (rerun: 32) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc025, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 4: syz_open_dev$sndctrl(0x0, 0x200100000001, 0x46a803) syz_open_dev$sndctrl(0x0, 0x200100000001, 0x46a803) (async) 07:36:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x80086601, 0x0) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 07:36:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) inotify_rm_watch(r1, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc803}}}, 0x0}, 0x90) 07:36:21 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc025, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc025, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82304, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc029, 0x3}) 07:36:21 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x1b3, 0x7, 0x68, 0x2085, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @none}, 0x8) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:36:21 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x7ffbffff, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x4) 07:36:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xe003}}}, 0x0}, 0x90) 07:36:21 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc025, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x7ffbffff, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x4) 07:36:21 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x82304, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000040)={0xc029, 0x3}) 07:36:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x200000}}}, 0x0}, 0x90) 07:36:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x11000000) 07:36:21 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x7a8065ac) 07:36:21 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, r0, 0x4, 0x1}, 0x48) 07:36:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf0ff1f}}}, 0x0}, 0x90) 07:36:21 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x609d) 07:36:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3f, 0xd0301) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x1, 0x8}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1000000}}}, 0x0}, 0x90) 07:36:21 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:21 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x609d) 07:36:21 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x7a8065ac) 07:36:21 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x1fffefff) 07:36:21 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 07:36:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000000}}}, 0x0}, 0x90) 07:36:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="b0ee63c537f92f0424ebf405cf0a6fd2b10f338010994b6a30bf2c3fad71e3cc5203b164ecb8cb60949837885ab89bcd164f173126c832e126a4e0a2d5da3e7526f7594f6dae7dbd3381fc2f4386aa326eb6d41ef05b9ba0f2872482c64ddce7d2e86d2a89e554d3cf43b797410819c8236215449300a30e0de84a298760bbdf8cc070cfd0fb02b8146b6d5581a0061eea4ae33b54a072c9cfffd931acf8bc74bdb36a2d51da4868446e712a16afb92f9bac637b72941229cab32794753ed58b5736cc08fbeeb6a1267fa7503be3fe9d29eacae1ac1a351e41a61d2e46199f9c3ccc4c1ed2a7364e3f73da") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 07:36:21 executing program 3: syz_open_dev$sndctrl(0x0, 0x4, 0xc300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000000)={{0x2, 0x3, 0x5c, 0x1, '\x00', 0x3f}, 0x0, [0x0, 0x4, 0x0, 0x8001, 0x2, 0xfffffffffffff800, 0x9, 0x1, 0x1fd, 0x3, 0x6, 0x3, 0x5, 0x8, 0x33c894fd, 0x7, 0x6, 0x1, 0x8000000000000001, 0x3, 0x8001, 0x8db3, 0x0, 0x5, 0xd4, 0x8, 0x5, 0x6, 0x90, 0x1, 0x0, 0x100000000, 0x1, 0x7, 0x4, 0x3ff, 0x4, 0x2, 0x334, 0x6d3, 0x8000, 0x6, 0x7f, 0xbd2, 0x3, 0x0, 0x300000000, 0x10001, 0x5, 0xfffffffffffff0f8, 0x0, 0x2a, 0x5, 0xc8f6, 0xffffffffffff8000, 0x7ffffffffffffffe, 0x5, 0xffbe, 0x8, 0x0, 0xdc, 0x10000, 0x6, 0xe5b5, 0x8, 0x28b4, 0x0, 0x86, 0x4, 0x1, 0x0, 0x80000000, 0x2, 0x101, 0x46, 0x6, 0x1, 0x5, 0x3ff, 0xffffffff, 0x3, 0x6f, 0x2, 0x7, 0x401, 0xae7, 0x9, 0x2, 0x3, 0x5, 0x6158, 0x1, 0x7, 0x7, 0x4, 0x36, 0x6, 0x7f, 0xffff, 0x10001, 0xffff, 0x7, 0x7fff, 0x6, 0x1ff, 0x4, 0xe2f, 0x9, 0x7, 0x6, 0x733, 0x81, 0x4, 0x7, 0x67c8, 0x1000000000000101, 0x4, 0x1, 0x9, 0xb58, 0x1, 0x80, 0x9a, 0x6, 0x4, 0x8000000000000000, 0x9aa0]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r1, &(0x7f00000000c0), 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x80000000, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xe}, 0x48) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x80982, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000880), 0x840c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2d, &(0x7f00000005c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7d9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000740)='GPL\x00', 0x2614, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000007c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x3, 0x10001, 0x46}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r4, r5], &(0x7f0000000900), 0x10, 0x8f8}, 0x90) 07:36:21 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:36:21 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x3000000}}}, 0x0}, 0x90) 07:36:21 executing program 4: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 07:36:21 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="b0ee63c537f92f0424ebf405cf0a6fd2b10f338010994b6a30bf2c3fad71e3cc5203b164ecb8cb60949837885ab89bcd164f173126c832e126a4e0a2d5da3e7526f7594f6dae7dbd3381fc2f4386aa326eb6d41ef05b9ba0f2872482c64ddce7d2e86d2a89e554d3cf43b797410819c8236215449300a30e0de84a298760bbdf8cc070cfd0fb02b8146b6d5581a0061eea4ae33b54a072c9cfffd931acf8bc74bdb36a2d51da4868446e712a16afb92f9bac637b72941229cab32794753ed58b5736cc08fbeeb6a1267fa7503be3fe9d29eacae1ac1a351e41a61d2e46199f9c3ccc4c1ed2a7364e3f73da") (async) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="b0ee63c537f92f0424ebf405cf0a6fd2b10f338010994b6a30bf2c3fad71e3cc5203b164ecb8cb60949837885ab89bcd164f173126c832e126a4e0a2d5da3e7526f7594f6dae7dbd3381fc2f4386aa326eb6d41ef05b9ba0f2872482c64ddce7d2e86d2a89e554d3cf43b797410819c8236215449300a30e0de84a298760bbdf8cc070cfd0fb02b8146b6d5581a0061eea4ae33b54a072c9cfffd931acf8bc74bdb36a2d51da4868446e712a16afb92f9bac637b72941229cab32794753ed58b5736cc08fbeeb6a1267fa7503be3fe9d29eacae1ac1a351e41a61d2e46199f9c3ccc4c1ed2a7364e3f73da") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 07:36:21 executing program 1: syz_open_dev$sndctrl(0x0, 0x4, 0xc300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000000)={{0x2, 0x3, 0x5c, 0x1, '\x00', 0x3f}, 0x0, [0x0, 0x4, 0x0, 0x8001, 0x2, 0xfffffffffffff800, 0x9, 0x1, 0x1fd, 0x3, 0x6, 0x3, 0x5, 0x8, 0x33c894fd, 0x7, 0x6, 0x1, 0x8000000000000001, 0x3, 0x8001, 0x8db3, 0x0, 0x5, 0xd4, 0x8, 0x5, 0x6, 0x90, 0x1, 0x0, 0x100000000, 0x1, 0x7, 0x4, 0x3ff, 0x4, 0x2, 0x334, 0x6d3, 0x8000, 0x6, 0x7f, 0xbd2, 0x3, 0x0, 0x300000000, 0x10001, 0x5, 0xfffffffffffff0f8, 0x0, 0x2a, 0x5, 0xc8f6, 0xffffffffffff8000, 0x7ffffffffffffffe, 0x5, 0xffbe, 0x8, 0x0, 0xdc, 0x10000, 0x6, 0xe5b5, 0x8, 0x28b4, 0x0, 0x86, 0x4, 0x1, 0x0, 0x80000000, 0x2, 0x101, 0x46, 0x6, 0x1, 0x5, 0x3ff, 0xffffffff, 0x3, 0x6f, 0x2, 0x7, 0x401, 0xae7, 0x9, 0x2, 0x3, 0x5, 0x6158, 0x1, 0x7, 0x7, 0x4, 0x36, 0x6, 0x7f, 0xffff, 0x10001, 0xffff, 0x7, 0x7fff, 0x6, 0x1ff, 0x4, 0xe2f, 0x9, 0x7, 0x6, 0x733, 0x81, 0x4, 0x7, 0x67c8, 0x1000000000000101, 0x4, 0x1, 0x9, 0xb58, 0x1, 0x80, 0x9a, 0x6, 0x4, 0x8000000000000000, 0x9aa0]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r1, &(0x7f00000000c0), 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x80000000, 0x3, 0x1, 0x1, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xe}, 0x48) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x80982, 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000880), 0x840c0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x2d, &(0x7f00000005c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7d9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000740)='GPL\x00', 0x2614, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000007c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x3, 0x10001, 0x46}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[r4, r5], &(0x7f0000000900), 0x10, 0x8f8}, 0x90) 07:36:21 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x4000000}}}, 0x0}, 0x90) [ 921.925832][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:22 executing program 0: socket$pptp(0x2d, 0x1, 0x2) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xe1b) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x450100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)=ANY=[]) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfc, 0x18001) r2 = gettid() prlimit64(r2, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x9, 0xf4907fb4a929f7e8, 0x8000, 0x8, 'syz0\x00', 0x3}, 0x0, 0x30, 0x3, r2, 0x3, 0x6, 'syz1\x00', &(0x7f00000000c0)=['^%-[\x00', '/dev/snd/controlC#\x00', '9]\x00'], 0x1b}) 07:36:22 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:36:22 executing program 3: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 07:36:22 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getpid() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 07:36:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x6040000}}}, 0x0}, 0x90) 07:36:22 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x1b3, 0x7, 0x68, 0x2085, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, @none}, 0x8) (async) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0)) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:36:22 executing program 4: r0 = syz_open_dev$loop(0x0, 0x3f, 0xd0301) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:22 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:36:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x8000000}}}, 0x0}, 0x90) 07:36:22 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getpid() (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) 07:36:22 executing program 0: r0 = syz_open_dev$loop(0x0, 0x3f, 0xd0301) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:22 executing program 2: socket$pptp(0x2d, 0x1, 0x2) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xe1b) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x450100) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)=ANY=[]) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfc, 0x18001) r2 = gettid() prlimit64(r2, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x9, 0xf4907fb4a929f7e8, 0x8000, 0x8, 'syz0\x00', 0x3}, 0x0, 0x30, 0x3, r2, 0x3, 0x6, 'syz1\x00', &(0x7f00000000c0)=['^%-[\x00', '/dev/snd/controlC#\x00', '9]\x00'], 0x1b}) socket$pptp(0x2d, 0x1, 0x2) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xe1b) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x450100) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)=ANY=[]) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfc, 0x18001) (async) gettid() (async) prlimit64(r2, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x9, 0xf4907fb4a929f7e8, 0x8000, 0x8, 'syz0\x00', 0x3}, 0x0, 0x30, 0x3, r2, 0x3, 0x6, 'syz1\x00', &(0x7f00000000c0)=['^%-[\x00', '/dev/snd/controlC#\x00', '9]\x00'], 0x1b}) (async) 07:36:22 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x1ffff000) 07:36:22 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc000000}}}, 0x0}, 0x90) 07:36:22 executing program 1: r0 = syz_open_dev$loop(0x0, 0x3f, 0xd0301) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:22 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xff41) 07:36:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:22 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8001, 0x2, 0x40, 0x6}, {0x0, 0x7, 0x3f, 0x5c0}, {0x1, 0x1, 0x8, 0x9}]}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000880)={'veth1_to_bridge\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x22f8}, 0x1, 0x0, 0x0, 0x400c040}, 0x4042045) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)={'team0\x00', 0x400}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'netdevsim0\x00', 0x200}) syz_open_dev$sndctrl(0x0, 0x8001, 0x400) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) 07:36:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xd0301) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x11000000}}}, 0x0}, 0x90) 07:36:22 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0xff41) 07:36:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x5, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:22 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x8001, 0x2, 0x40, 0x6}, {0x0, 0x7, 0x3f, 0x5c0}, {0x1, 0x1, 0x8, 0x9}]}) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000880)={'veth1_to_bridge\x00'}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="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"], 0x22f8}, 0x1, 0x0, 0x0, 0x400c040}, 0x4042045) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)={'team0\x00', 0x400}) (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)={'netdevsim0\x00', 0x200}) (async) syz_open_dev$sndctrl(0x0, 0x8001, 0x400) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) 07:36:22 executing program 4: r0 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x15000000}}}, 0x0}, 0x90) 07:36:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x401, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:22 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0x2, 0x3, 0x6, 'syz0\x00', 0x200}, 0x0, 0x20, 0x7, r1, 0x6, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x12\x00', '#-/$\x00', '\'\x00', '$&\x00', '^],+\x00', ']@.o@*\x00'], 0x18}) 07:36:22 executing program 0: r0 = shmget(0x1, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) shmget(0x1, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) (async) shmctl$IPC_RMID(r0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) 07:36:22 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1fffefff}}}, 0x0}, 0x90) 07:36:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:22 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0xa, 0x2, 0x3, 0x6, 'syz0\x00', 0x200}, 0x0, 0x20, 0x7, r1, 0x6, 0x80000001, 'syz1\x00', &(0x7f0000000000)=['\x12\x00', '#-/$\x00', '\'\x00', '$&\x00', '^],+\x00', ']@.o@*\x00'], 0x18}) 07:36:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x3f, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:22 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1ffff000}}}, 0x0}, 0x90) 07:36:22 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, r1, 0x5, 0x1, 0x1}, 0x48) 07:36:22 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, 0x12, 0x200, 0x70bd2a, 0x25dfdbfb, {0x26, 0x3, 0x2, 0xed, {0x4e24, 0x4e23, [0xffff, 0x7, 0x40, 0x800], [0x5, 0x2, 0x2bd], 0x0, [0x4, 0x2]}, 0x80ce, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "097982b05af61115a4fcda0916425f798d2e5a850f3eece72896da700e27a1ce8a019eb50da84a0b2bf48ab627a41c5b56"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "4b24b65441c4ab5deb7224308b078662953e08c8eaf3e4bae4d8ddc1f51cb9510ad3ad3011d81958df9c24e26ba7da2163beae4002127b1521835e4dbed9bfb3c5638cc8b474abbb88ade64864368cfbcba4865ba23ee1a3e4f880392f919c3b66c218c94525f2e06c8afdd9cef1a797df23f4c5ad9bd433e487222512ffb09c3f84a6089ab8def6e5c38b9d93cdd5445fe6a79e3582c3e8440fbe12d5bd99eb6529b6d3f081ac6c1ca5bac2bac411a8d760a8e23d28c5"}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x48801) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:36:23 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, 0x12, 0x200, 0x70bd2a, 0x25dfdbfb, {0x26, 0x3, 0x2, 0xed, {0x4e24, 0x4e23, [0xffff, 0x7, 0x40, 0x800], [0x5, 0x2, 0x2bd], 0x0, [0x4, 0x2]}, 0x80ce, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x35, 0x1, "097982b05af61115a4fcda0916425f798d2e5a850f3eece72896da700e27a1ce8a019eb50da84a0b2bf48ab627a41c5b56"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "4b24b65441c4ab5deb7224308b078662953e08c8eaf3e4bae4d8ddc1f51cb9510ad3ad3011d81958df9c24e26ba7da2163beae4002127b1521835e4dbed9bfb3c5638cc8b474abbb88ade64864368cfbcba4865ba23ee1a3e4f880392f919c3b66c218c94525f2e06c8afdd9cef1a797df23f4c5ad9bd433e487222512ffb09c3f84a6089ab8def6e5c38b9d93cdd5445fe6a79e3582c3e8440fbe12d5bd99eb6529b6d3f081ac6c1ca5bac2bac411a8d760a8e23d28c5"}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x48801) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 07:36:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x601, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 07:36:23 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, r1, 0x5, 0x1, 0x1}, 0x48) (rerun: 32) 07:36:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20000000}}}, 0x0}, 0x90) [ 923.300715][ T28] kauditd_printk_skb: 24990 callbacks suppressed [ 923.300729][ T28] audit: type=1400 audit(5470583.270:1899980): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5034 comm="syz-executor.3" name="syzkaller.PHX9em" dev="nvme0n1p2" ino=1762 [ 923.310115][ T5034] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.311442][ T9590] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.311984][ T28] audit: type=1400 audit(5470583.270:1899981): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5034 comm="syz-executor.3" name="syzkaller.PHX9em" dev="nvme0n1p2" ino=1762 [ 923.313973][ T9591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 923.319115][ T28] audit: type=1400 audit(5470583.270:1899982): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5034 comm="syz-executor.3" name="syzkaller.PHX9em" dev="nvme0n1p2" ino=1762 [ 923.320366][ T9591] audit: audit_lost=481880 audit_rate_limit=0 audit_backlog_limit=64 [ 923.327589][ T9590] audit: audit_lost=481881 audit_rate_limit=0 audit_backlog_limit=64 [ 923.329800][ T9590] audit: backlog limit exceeded [ 923.329960][ T5771] audit: audit_backlog=65 > audit_backlog_limit=64 07:36:23 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x541b, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:23 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 07:36:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x22000000}}}, 0x0}, 0x90) 07:36:23 executing program 0: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xd0301) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 07:36:23 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x20000000) 07:36:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x541b, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:23 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xd0301) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 07:36:23 executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 07:36:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x39020000}}}, 0x0}, 0x90) 07:36:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 4: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x101, 0x12) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffe78) 07:36:23 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x80, 0x88241) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x4, 0x2, 0x39, 0xffff, '\x00', 0x8}, 0x0, [0x7, 0x17f1, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x8, 0x8000000000000001, 0x100000000, 0x4, 0x7fffffff, 0x8, 0x8000000000000000, 0x9, 0x8, 0x10000, 0x0, 0x401, 0x7, 0x75, 0x80, 0x7fffffff, 0x9, 0x5, 0x8, 0xffffffffffffffff, 0x7fff, 0x3, 0x80000000, 0x7b9c, 0x3, 0x6, 0xda0, 0x80000000, 0x1, 0x7, 0x3dac, 0x8, 0x401, 0x3, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x13, 0x7, 0x40, 0x4, 0x3, 0x5, 0x101, 0x6, 0x9, 0x0, 0x7, 0x0, 0x7, 0x1f, 0x4, 0x6, 0x2, 0x7ff, 0xfffffffffffffffa, 0x1, 0xffff, 0x2a44, 0xfffffffffffffffc, 0x4, 0x6, 0x3, 0x615, 0xfffffffffffffffa, 0x800, 0x751c, 0xa7, 0x0, 0x8, 0xfe2, 0x26, 0x6, 0x0, 0x8000000000000000, 0x400, 0x7ff, 0x4, 0x0, 0x5, 0x7, 0x7fffffffffffffff, 0x401, 0xf773, 0x1, 0x7, 0x8000000000000000, 0x4, 0x1f0, 0x9, 0x6, 0x8000000000000001, 0x7, 0x1, 0x8, 0xbe, 0x1, 0x8000000000000000, 0x5, 0xfffffffffffffff9, 0x1f, 0x2, 0x3, 0x200, 0x380000, 0xffffffffffff0000, 0x3, 0x101, 0x3bf, 0x1, 0x7, 0x100000000, 0x2, 0xc45, 0x3f, 0x3, 0x400, 0x5]}) 07:36:23 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0xd0301) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) 07:36:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}}, 0x0}, 0x90) 07:36:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) 07:36:23 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.latency\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x101, 0x12) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0xfffffffffffffe78) 07:36:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x49020000}}}, 0x0}, 0x90) 07:36:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x601, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:23 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async, rerun: 64) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0xc0, 0x0) (rerun: 64) 07:36:23 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2480, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0xffffffff) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) 07:36:23 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x80, 0x88241) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x4, 0x2, 0x39, 0xffff, '\x00', 0x8}, 0x0, [0x7, 0x17f1, 0x1, 0x2, 0xffffffffffffffff, 0x6, 0x0, 0xfffffffffffffff9, 0x8, 0x8000000000000001, 0x100000000, 0x4, 0x7fffffff, 0x8, 0x8000000000000000, 0x9, 0x8, 0x10000, 0x0, 0x401, 0x7, 0x75, 0x80, 0x7fffffff, 0x9, 0x5, 0x8, 0xffffffffffffffff, 0x7fff, 0x3, 0x80000000, 0x7b9c, 0x3, 0x6, 0xda0, 0x80000000, 0x1, 0x7, 0x3dac, 0x8, 0x401, 0x3, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x13, 0x7, 0x40, 0x4, 0x3, 0x5, 0x101, 0x6, 0x9, 0x0, 0x7, 0x0, 0x7, 0x1f, 0x4, 0x6, 0x2, 0x7ff, 0xfffffffffffffffa, 0x1, 0xffff, 0x2a44, 0xfffffffffffffffc, 0x4, 0x6, 0x3, 0x615, 0xfffffffffffffffa, 0x800, 0x751c, 0xa7, 0x0, 0x8, 0xfe2, 0x26, 0x6, 0x0, 0x8000000000000000, 0x400, 0x7ff, 0x4, 0x0, 0x5, 0x7, 0x7fffffffffffffff, 0x401, 0xf773, 0x1, 0x7, 0x8000000000000000, 0x4, 0x1f0, 0x9, 0x6, 0x8000000000000001, 0x7, 0x1, 0x8, 0xbe, 0x1, 0x8000000000000000, 0x5, 0xfffffffffffffff9, 0x1f, 0x2, 0x3, 0x200, 0x380000, 0xffffffffffff0000, 0x3, 0x101, 0x3bf, 0x1, 0x7, 0x100000000, 0x2, 0xc45, 0x3f, 0x3, 0x400, 0x5]}) 07:36:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x601, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 07:36:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x55010000}}}, 0x0}, 0x90) 07:36:23 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:36:23 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 07:36:23 executing program 0: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000180)='1\x00', 0x2) write$yama_ptrace_scope(r0, &(0x7f0000000100)='3\x00', 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x292d00) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000080)=0x1e0) 07:36:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x601, 0x1}, 0x48) 07:36:23 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:36:23 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2480, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0xffffffff) (async) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) 07:36:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x7d000000}}}, 0x0}, 0x90) 07:36:23 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x40000000) 07:36:23 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$yama_ptrace_scope(r1, &(0x7f0000000180)='1\x00', 0x2) write$yama_ptrace_scope(r0, &(0x7f0000000100)='3\x00', 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x292d00) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000080)=0x1e0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$yama_ptrace_scope(r1, &(0x7f0000000180)='1\x00', 0x2) (async) write$yama_ptrace_scope(r0, &(0x7f0000000100)='3\x00', 0x2) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x292d00) (async) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000080)=0x1e0) (async) 07:36:23 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/127) syz_open_dev$sndctrl(0x0, 0x1, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/127) (async) 07:36:23 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:36:23 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x7f000000) 07:36:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc8030000}}}, 0x0}, 0x90) 07:36:23 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:36:23 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x80000001, 0x14, [0x5, 0x5, 0x143, 0x3, 0x3]}) 07:36:23 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x4cc0) 07:36:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) [ 924.001566][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:24 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x48) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 07:36:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xe0030000}}}, 0x0}, 0x90) 07:36:24 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0xffefff1f) 07:36:24 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x80000001, 0x14, [0x5, 0x5, 0x143, 0x3, 0x3]}) 07:36:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:24 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x4cc0) 07:36:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101286, 0xffffffffffffffff) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x1, 0x9e, 0xf}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffefff1f}}}, 0x0}, 0x90) 07:36:24 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x2000000000) 07:36:24 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2c6, 0x100) r2 = gettid() r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r2, r3, 0x0, 0x5, &(0x7f0000000700)='*($%\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x3, 0x3, 0xa09, 0x0, 'syz1\x00', 0x1f}, 0x6, 0x0, 0x4, r2, 0x4, 0x6, 'syz1\x00', &(0x7f0000000040)=['-)]@$#+7#.$[}\x00', '\x00', '\x00', ')\x00'], 0x12}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x3, 0x5, 0x7, 0x1, 'syz1\x00', 0xfab65cb6}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x4, 0x8, 0x7fffffff, 0x2, 0x685b, 0x9, 0x5, 0x100, 0x7f, 0x3ff, 0xb1, 0x3, 0x4, 0x6, 0x9, 0x8, 0x8, 0xa7b, 0xffffffff7fffffff, 0x1, 0x0, 0x1, 0x2, 0x6, 0x3f, 0xf5, 0x1f, 0x48, 0x96, 0xa74, 0x2c7, 0x1, 0x0, 0x8000, 0xffffffffffff4686, 0x8000, 0x8b5a, 0x8, 0x3, 0x3, 0x4, 0x4, 0x3f, 0x7, 0x7ff, 0x5a, 0x20, 0x4, 0xfffffffffffffffe, 0x5f573824, 0x8001, 0x4, 0x20, 0x2, 0x40, 0x4, 0x93, 0xffff, 0x3, 0x5, 0xffff, 0x4, 0x4, 0xfffffffffffffff7, 0x9, 0x400, 0x5, 0x7, 0x7, 0x7fffffffffffffff, 0xb341, 0xd2, 0x7, 0x6, 0x101, 0x679, 0x6, 0x2, 0x18c, 0x7c7b9aa7, 0x1, 0x7, 0x200, 0x81, 0x6, 0xfffffffffffffffb, 0x4, 0x400, 0x10001, 0x81, 0x5, 0x7f, 0xdf, 0x10001, 0x7, 0x414, 0x200, 0x3, 0xfffffffffffffff9, 0x100000001, 0x8000, 0x1, 0x8, 0x401, 0x2, 0x5e7, 0xfffffffffffffffa, 0x3, 0x20, 0x3, 0x6, 0x0, 0x80000001, 0x6, 0x62ef, 0x6b19, 0x1, 0x81, 0x392, 0x8, 0x7ff, 0x1, 0x3]}) 07:36:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:24 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x109800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x0, 0xfffffffa, 0x2, 'syz0\x00', 0x2}, 0x1, [0x10000, 0x20000000000000, 0x1, 0x2000000000000f61, 0x81, 0x6, 0x6, 0x4, 0x6, 0x3f, 0x3, 0xffffffff, 0x1, 0x80, 0x5, 0xfffffffffffffffd, 0x8, 0x1, 0x139b, 0xffff, 0x7, 0x28a8, 0x7fffffff, 0xb18, 0x1, 0x200, 0x100000001, 0x9398000000000000, 0x4, 0x1, 0x3f, 0x1, 0x80000000000, 0x6, 0x5, 0x4, 0x0, 0x1, 0x1ff, 0x3f, 0x5, 0x2400000, 0xde9, 0x9, 0x2, 0x895, 0x3, 0x589, 0x5, 0xfffffffffffffffd, 0x400, 0x7, 0x3376, 0x5, 0x3f, 0x5, 0x1000, 0x8, 0x0, 0xffffffff, 0x4, 0xdf, 0x8, 0x3f, 0x4, 0x7, 0x1, 0x2, 0xcde, 0x8000, 0x6, 0x4, 0x1, 0x3, 0x0, 0x6, 0x18000, 0xffffffffffffff07, 0x6, 0x7, 0x97a7, 0x6, 0x5, 0x0, 0x3ff, 0x2, 0x3f, 0xffffffffffffd3be, 0xfff, 0x200, 0x2, 0x2000000000000000, 0x3f, 0xc0, 0xa, 0x8, 0xffffffffffffffff, 0x40, 0x400, 0x1, 0xfffffffffffffffb, 0x3f, 0x37800000000, 0xffffffffffffffff, 0x800, 0x100, 0x8000, 0xa711, 0x100, 0x7, 0x7, 0x2, 0x9, 0x4, 0x669, 0x3, 0x4, 0x100000001, 0xffffffff, 0xb36, 0x6116, 0x8, 0x731, 0x5, 0x3, 0x9, 0xffffffffffffff06, 0x1]}) 07:36:24 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0xffffa71fffff) 07:36:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:24 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x40101286, 0xffffffffffffffff) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000000)={0x1, 0x9e, 0xf}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:24 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2c6, 0x100) (async) r2 = gettid() (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r2, r3, 0x0, 0x5, &(0x7f0000000700)='*($%\x00'}, 0x30) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x3, 0x3, 0xa09, 0x0, 'syz1\x00', 0x1f}, 0x6, 0x0, 0x4, r2, 0x4, 0x6, 'syz1\x00', &(0x7f0000000040)=['-)]@$#+7#.$[}\x00', '\x00', '\x00', ')\x00'], 0x12}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000001c0)={{0x3, 0x5, 0x7, 0x1, 'syz1\x00', 0xfab65cb6}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x4, 0x8, 0x7fffffff, 0x2, 0x685b, 0x9, 0x5, 0x100, 0x7f, 0x3ff, 0xb1, 0x3, 0x4, 0x6, 0x9, 0x8, 0x8, 0xa7b, 0xffffffff7fffffff, 0x1, 0x0, 0x1, 0x2, 0x6, 0x3f, 0xf5, 0x1f, 0x48, 0x96, 0xa74, 0x2c7, 0x1, 0x0, 0x8000, 0xffffffffffff4686, 0x8000, 0x8b5a, 0x8, 0x3, 0x3, 0x4, 0x4, 0x3f, 0x7, 0x7ff, 0x5a, 0x20, 0x4, 0xfffffffffffffffe, 0x5f573824, 0x8001, 0x4, 0x20, 0x2, 0x40, 0x4, 0x93, 0xffff, 0x3, 0x5, 0xffff, 0x4, 0x4, 0xfffffffffffffff7, 0x9, 0x400, 0x5, 0x7, 0x7, 0x7fffffffffffffff, 0xb341, 0xd2, 0x7, 0x6, 0x101, 0x679, 0x6, 0x2, 0x18c, 0x7c7b9aa7, 0x1, 0x7, 0x200, 0x81, 0x6, 0xfffffffffffffffb, 0x4, 0x400, 0x10001, 0x81, 0x5, 0x7f, 0xdf, 0x10001, 0x7, 0x414, 0x200, 0x3, 0xfffffffffffffff9, 0x100000001, 0x8000, 0x1, 0x8, 0x401, 0x2, 0x5e7, 0xfffffffffffffffa, 0x3, 0x20, 0x3, 0x6, 0x0, 0x80000001, 0x6, 0x62ef, 0x6b19, 0x1, 0x81, 0x392, 0x8, 0x7ff, 0x1, 0x3]}) 07:36:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x48) 07:36:24 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x109800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x0, 0xfffffffa, 0x2, 'syz0\x00', 0x2}, 0x1, [0x10000, 0x20000000000000, 0x1, 0x2000000000000f61, 0x81, 0x6, 0x6, 0x4, 0x6, 0x3f, 0x3, 0xffffffff, 0x1, 0x80, 0x5, 0xfffffffffffffffd, 0x8, 0x1, 0x139b, 0xffff, 0x7, 0x28a8, 0x7fffffff, 0xb18, 0x1, 0x200, 0x100000001, 0x9398000000000000, 0x4, 0x1, 0x3f, 0x1, 0x80000000000, 0x6, 0x5, 0x4, 0x0, 0x1, 0x1ff, 0x3f, 0x5, 0x2400000, 0xde9, 0x9, 0x2, 0x895, 0x3, 0x589, 0x5, 0xfffffffffffffffd, 0x400, 0x7, 0x3376, 0x5, 0x3f, 0x5, 0x1000, 0x8, 0x0, 0xffffffff, 0x4, 0xdf, 0x8, 0x3f, 0x4, 0x7, 0x1, 0x2, 0xcde, 0x8000, 0x6, 0x4, 0x1, 0x3, 0x0, 0x6, 0x18000, 0xffffffffffffff07, 0x6, 0x7, 0x97a7, 0x6, 0x5, 0x0, 0x3ff, 0x2, 0x3f, 0xffffffffffffd3be, 0xfff, 0x200, 0x2, 0x2000000000000000, 0x3f, 0xc0, 0xa, 0x8, 0xffffffffffffffff, 0x40, 0x400, 0x1, 0xfffffffffffffffb, 0x3f, 0x37800000000, 0xffffffffffffffff, 0x800, 0x100, 0x8000, 0xa711, 0x100, 0x7, 0x7, 0x2, 0x9, 0x4, 0x669, 0x3, 0x4, 0x100000001, 0xffffffff, 0xb36, 0x6116, 0x8, 0x731, 0x5, 0x3, 0x9, 0xffffffffffffff06, 0x1]}) 07:36:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x2}}}, 0x0}, 0x90) 07:36:24 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0xffffa7c55a0c) 07:36:24 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 07:36:24 executing program 0: syz_open_dev$sndctrl(0x0, 0xa53, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 07:36:24 executing program 1: bpf$BPF_TASK_FD_QUERY(0x12, &(0x7f0000004d00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:24 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x68b5, 0x202c00) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001140)={{0x0, 0x0, 0x6, 0x2, 'syz0\x00', 0x101}, 0x1, 0x100, 0x0, r2, 0xa, 0xc2, 'syz1\x00', &(0x7f00000010c0)=['@#\x00', '\x00', '@}\x00', '/dev/snd/controlC#\x00', '\x00', 'syz1\x00', 'syz1\x00', 'j#*,/)\x00', '%+/\x00', '/dev/snd/controlC#\x00'], 0x43}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a40), 0x5, 0x402000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000a80)={{0x7, 0x4, 0x400, 0xeef, 'syz1\x00', 0x51}, 0x0, [0x200, 0xfb11, 0x8, 0x0, 0x8a, 0x5, 0x8000000000000000, 0x1, 0x8000000000000001, 0x67, 0x9, 0x7, 0x9, 0x4, 0x9, 0xb73, 0x7, 0x4, 0xd9, 0x3, 0x3, 0x4, 0x2772, 0x10000, 0x6, 0x1ff, 0x2477, 0x80000000, 0x100, 0x2, 0x2, 0x3, 0x7f, 0x80000000, 0x21ac, 0x51, 0x0, 0x1, 0xfffffffffffffffc, 0xac, 0x2, 0x7, 0x1, 0xfec, 0x200, 0x2, 0xc, 0x10000, 0x3df, 0x8000800000000, 0xdcc, 0x4c06, 0x9, 0x4, 0x7, 0xfff, 0xb4, 0x1, 0x979, 0x8, 0x0, 0x81, 0x2, 0x5, 0x101, 0x9, 0x3, 0x2, 0x0, 0x1, 0x8, 0x80000001, 0x4, 0x939, 0x2, 0x4f, 0x6, 0xb1, 0x3ff, 0x2, 0x1ff, 0x7, 0x2501, 0xfffffffffcffb2c1, 0x5, 0x3, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x1f, 0x81, 0x9, 0x8, 0x7, 0x7, 0xffffffffffff8001, 0x2, 0x8, 0x1, 0x1, 0xfffffffffffffffe, 0x1, 0x3, 0xacf1, 0xff, 0x1, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x2, 0x4, 0x9, 0xfffffffffffffff9, 0x8, 0x3ff, 0x0, 0x0, 0x5, 0x7f, 0x0, 0x0, 0x7f, 0x7f800000000, 0xfff, 0x9, 0x0, 0xffff, 0x1f]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000540)={{0x5, 0x3, 0x800, 0x3, '\x00', 0xffffff45}, 0x1, [0x9, 0x2, 0x4eb, 0x4, 0x5, 0x2, 0xfac5, 0x1, 0x8, 0x7f, 0x9, 0x2, 0x8, 0xff, 0x4b, 0xffffffff, 0x6, 0xc0a, 0x0, 0x4, 0x5, 0x1000, 0x5dd, 0x34cd0b16, 0x8, 0x80000001, 0x4, 0x8, 0x3, 0xd4, 0x0, 0x800, 0x6, 0x5, 0x4, 0x100000001, 0x1, 0x95, 0x3, 0x3, 0x6, 0x6, 0x2, 0x4, 0x0, 0x3, 0x2, 0xffff, 0x5, 0x3, 0x100000001, 0x1, 0x7, 0x42, 0xffff, 0x7, 0x7c, 0x14c, 0x9, 0x2, 0x7, 0x5, 0x5, 0x10000, 0x9, 0x9, 0xfffffffffffefffe, 0x0, 0xffff, 0x3ff, 0x4, 0x9, 0x7, 0x6, 0x9, 0x2, 0xcd00000, 0x7, 0x21, 0x2f3, 0x6, 0x401, 0x4, 0x2, 0x40, 0x6, 0x10001, 0x6, 0x4, 0x7f, 0x400, 0x401, 0x1, 0x6, 0x5, 0xffffffff, 0x9, 0x2, 0x9, 0x14, 0xffff, 0x2b0, 0x4, 0x2, 0x1, 0x3, 0x2, 0x1f, 0x2, 0x8001, 0x3, 0x48, 0x51, 0x7, 0x1f, 0x6, 0x9c0, 0x7ff, 0x1, 0x100, 0x22, 0x7ff, 0x8000, 0x2, 0x1000, 0x2, 0x7f, 0x6]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x6, 0x0, 0x80000000, 0x5054, 'syz1\x00', 0x770d}, 0x1, [0x6, 0x10001, 0x0, 0x8, 0x6323, 0x200, 0x1, 0x9, 0x7fb, 0x20, 0xfffffffffffffffb, 0x68ef, 0x0, 0x100000001, 0x7, 0xffffffffffffffff, 0x6, 0x435, 0x5, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x5, 0x0, 0x4, 0x7c2, 0x0, 0x3, 0x3, 0x6c, 0x8864, 0x6, 0x6, 0x80, 0x6, 0x40, 0x4, 0x2f, 0x0, 0x4, 0x8d, 0xd5c9, 0x9, 0x31a9, 0x6, 0xff, 0x49, 0xcc71, 0xbd, 0x400, 0x0, 0x10000, 0x0, 0x4, 0x9, 0x200, 0x0, 0x7ff, 0x9, 0x52a, 0x2, 0x1, 0x100000001, 0xf7d, 0x8, 0x6, 0x6c, 0x0, 0xef6a, 0xffffffff, 0x2, 0x7, 0xf7, 0x5, 0x1, 0x6, 0x0, 0x9, 0x20, 0x80, 0x2, 0x6, 0x3ff, 0x48e, 0x0, 0x8, 0x5, 0x5, 0xac, 0x7fffffff, 0x10001, 0x7fff, 0x4, 0x2, 0x0, 0x101, 0x7ff, 0x9, 0x7c, 0x0, 0x1, 0x6, 0x9, 0x6, 0x2b0f, 0x9, 0x5, 0x0, 0x1000, 0x94, 0xaa6, 0x8, 0x3, 0x5, 0x81, 0x0, 0x8e17, 0x1, 0xff43, 0x8, 0x0, 0x2, 0x5, 0x71c6, 0x6, 0x337]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001280), 0x181601, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r5, 0x0, 0x47) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, r5, 0x1, 0x0, 0x5}, 0x48) 07:36:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x3}}}, 0x0}, 0x90) 07:36:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:36:24 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x1000000000000) 07:36:24 executing program 0: bpf$BPF_TASK_FD_QUERY(0x12, &(0x7f0000004d00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x12, &(0x7f0000004d00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:24 executing program 4: syz_open_dev$sndctrl(0x0, 0xa53, 0x0) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 07:36:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x4}}}, 0x0}, 0x90) 07:36:24 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0xc) 07:36:24 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x68b5, 0x202c00) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001140)={{0x0, 0x0, 0x6, 0x2, 'syz0\x00', 0x101}, 0x1, 0x100, 0x0, r2, 0xa, 0xc2, 'syz1\x00', &(0x7f00000010c0)=['@#\x00', '\x00', '@}\x00', '/dev/snd/controlC#\x00', '\x00', 'syz1\x00', 'syz1\x00', 'j#*,/)\x00', '%+/\x00', '/dev/snd/controlC#\x00'], 0x43}) r3 = syz_open_dev$sndctrl(&(0x7f0000000a40), 0x5, 0x402000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000a80)={{0x7, 0x4, 0x400, 0xeef, 'syz1\x00', 0x51}, 0x0, [0x200, 0xfb11, 0x8, 0x0, 0x8a, 0x5, 0x8000000000000000, 0x1, 0x8000000000000001, 0x67, 0x9, 0x7, 0x9, 0x4, 0x9, 0xb73, 0x7, 0x4, 0xd9, 0x3, 0x3, 0x4, 0x2772, 0x10000, 0x6, 0x1ff, 0x2477, 0x80000000, 0x100, 0x2, 0x2, 0x3, 0x7f, 0x80000000, 0x21ac, 0x51, 0x0, 0x1, 0xfffffffffffffffc, 0xac, 0x2, 0x7, 0x1, 0xfec, 0x200, 0x2, 0xc, 0x10000, 0x3df, 0x8000800000000, 0xdcc, 0x4c06, 0x9, 0x4, 0x7, 0xfff, 0xb4, 0x1, 0x979, 0x8, 0x0, 0x81, 0x2, 0x5, 0x101, 0x9, 0x3, 0x2, 0x0, 0x1, 0x8, 0x80000001, 0x4, 0x939, 0x2, 0x4f, 0x6, 0xb1, 0x3ff, 0x2, 0x1ff, 0x7, 0x2501, 0xfffffffffcffb2c1, 0x5, 0x3, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x1f, 0x81, 0x9, 0x8, 0x7, 0x7, 0xffffffffffff8001, 0x2, 0x8, 0x1, 0x1, 0xfffffffffffffffe, 0x1, 0x3, 0xacf1, 0xff, 0x1, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x2, 0x4, 0x9, 0xfffffffffffffff9, 0x8, 0x3ff, 0x0, 0x0, 0x5, 0x7f, 0x0, 0x0, 0x7f, 0x7f800000000, 0xfff, 0x9, 0x0, 0xffff, 0x1f]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000540)={{0x5, 0x3, 0x800, 0x3, '\x00', 0xffffff45}, 0x1, [0x9, 0x2, 0x4eb, 0x4, 0x5, 0x2, 0xfac5, 0x1, 0x8, 0x7f, 0x9, 0x2, 0x8, 0xff, 0x4b, 0xffffffff, 0x6, 0xc0a, 0x0, 0x4, 0x5, 0x1000, 0x5dd, 0x34cd0b16, 0x8, 0x80000001, 0x4, 0x8, 0x3, 0xd4, 0x0, 0x800, 0x6, 0x5, 0x4, 0x100000001, 0x1, 0x95, 0x3, 0x3, 0x6, 0x6, 0x2, 0x4, 0x0, 0x3, 0x2, 0xffff, 0x5, 0x3, 0x100000001, 0x1, 0x7, 0x42, 0xffff, 0x7, 0x7c, 0x14c, 0x9, 0x2, 0x7, 0x5, 0x5, 0x10000, 0x9, 0x9, 0xfffffffffffefffe, 0x0, 0xffff, 0x3ff, 0x4, 0x9, 0x7, 0x6, 0x9, 0x2, 0xcd00000, 0x7, 0x21, 0x2f3, 0x6, 0x401, 0x4, 0x2, 0x40, 0x6, 0x10001, 0x6, 0x4, 0x7f, 0x400, 0x401, 0x1, 0x6, 0x5, 0xffffffff, 0x9, 0x2, 0x9, 0x14, 0xffff, 0x2b0, 0x4, 0x2, 0x1, 0x3, 0x2, 0x1f, 0x2, 0x8001, 0x3, 0x48, 0x51, 0x7, 0x1f, 0x6, 0x9c0, 0x7ff, 0x1, 0x100, 0x22, 0x7ff, 0x8000, 0x2, 0x1000, 0x2, 0x7f, 0x6]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x6, 0x0, 0x80000000, 0x5054, 'syz1\x00', 0x770d}, 0x1, [0x6, 0x10001, 0x0, 0x8, 0x6323, 0x200, 0x1, 0x9, 0x7fb, 0x20, 0xfffffffffffffffb, 0x68ef, 0x0, 0x100000001, 0x7, 0xffffffffffffffff, 0x6, 0x435, 0x5, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x5, 0x0, 0x4, 0x7c2, 0x0, 0x3, 0x3, 0x6c, 0x8864, 0x6, 0x6, 0x80, 0x6, 0x40, 0x4, 0x2f, 0x0, 0x4, 0x8d, 0xd5c9, 0x9, 0x31a9, 0x6, 0xff, 0x49, 0xcc71, 0xbd, 0x400, 0x0, 0x10000, 0x0, 0x4, 0x9, 0x200, 0x0, 0x7ff, 0x9, 0x52a, 0x2, 0x1, 0x100000001, 0xf7d, 0x8, 0x6, 0x6c, 0x0, 0xef6a, 0xffffffff, 0x2, 0x7, 0xf7, 0x5, 0x1, 0x6, 0x0, 0x9, 0x20, 0x80, 0x2, 0x6, 0x3ff, 0x48e, 0x0, 0x8, 0x5, 0x5, 0xac, 0x7fffffff, 0x10001, 0x7fff, 0x4, 0x2, 0x0, 0x101, 0x7ff, 0x9, 0x7c, 0x0, 0x1, 0x6, 0x9, 0x6, 0x2b0f, 0x9, 0x5, 0x0, 0x1000, 0x94, 0xaa6, 0x8, 0x3, 0x5, 0x81, 0x0, 0x8e17, 0x1, 0xff43, 0x8, 0x0, 0x2, 0x5, 0x71c6, 0x6, 0x337]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001280), 0x181601, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0x1, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r5, 0x0, 0x47) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, r5, 0x1, 0x0, 0x5}, 0x48) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000500), 0x68b5, 0x202c00) (async) getpid() (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001140)={{0x0, 0x0, 0x6, 0x2, 'syz0\x00', 0x101}, 0x1, 0x100, 0x0, r2, 0xa, 0xc2, 'syz1\x00', &(0x7f00000010c0)=['@#\x00', '\x00', '@}\x00', '/dev/snd/controlC#\x00', '\x00', 'syz1\x00', 'syz1\x00', 'j#*,/)\x00', '%+/\x00', '/dev/snd/controlC#\x00'], 0x43}) (async) syz_open_dev$sndctrl(&(0x7f0000000a40), 0x5, 0x402000) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000a80)={{0x7, 0x4, 0x400, 0xeef, 'syz1\x00', 0x51}, 0x0, [0x200, 0xfb11, 0x8, 0x0, 0x8a, 0x5, 0x8000000000000000, 0x1, 0x8000000000000001, 0x67, 0x9, 0x7, 0x9, 0x4, 0x9, 0xb73, 0x7, 0x4, 0xd9, 0x3, 0x3, 0x4, 0x2772, 0x10000, 0x6, 0x1ff, 0x2477, 0x80000000, 0x100, 0x2, 0x2, 0x3, 0x7f, 0x80000000, 0x21ac, 0x51, 0x0, 0x1, 0xfffffffffffffffc, 0xac, 0x2, 0x7, 0x1, 0xfec, 0x200, 0x2, 0xc, 0x10000, 0x3df, 0x8000800000000, 0xdcc, 0x4c06, 0x9, 0x4, 0x7, 0xfff, 0xb4, 0x1, 0x979, 0x8, 0x0, 0x81, 0x2, 0x5, 0x101, 0x9, 0x3, 0x2, 0x0, 0x1, 0x8, 0x80000001, 0x4, 0x939, 0x2, 0x4f, 0x6, 0xb1, 0x3ff, 0x2, 0x1ff, 0x7, 0x2501, 0xfffffffffcffb2c1, 0x5, 0x3, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x1f, 0x81, 0x9, 0x8, 0x7, 0x7, 0xffffffffffff8001, 0x2, 0x8, 0x1, 0x1, 0xfffffffffffffffe, 0x1, 0x3, 0xacf1, 0xff, 0x1, 0x9, 0x3, 0x1, 0xfffffffffffffff9, 0x2, 0x4, 0x9, 0xfffffffffffffff9, 0x8, 0x3ff, 0x0, 0x0, 0x5, 0x7f, 0x0, 0x0, 0x7f, 0x7f800000000, 0xfff, 0x9, 0x0, 0xffff, 0x1f]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000540)={{0x5, 0x3, 0x800, 0x3, '\x00', 0xffffff45}, 0x1, [0x9, 0x2, 0x4eb, 0x4, 0x5, 0x2, 0xfac5, 0x1, 0x8, 0x7f, 0x9, 0x2, 0x8, 0xff, 0x4b, 0xffffffff, 0x6, 0xc0a, 0x0, 0x4, 0x5, 0x1000, 0x5dd, 0x34cd0b16, 0x8, 0x80000001, 0x4, 0x8, 0x3, 0xd4, 0x0, 0x800, 0x6, 0x5, 0x4, 0x100000001, 0x1, 0x95, 0x3, 0x3, 0x6, 0x6, 0x2, 0x4, 0x0, 0x3, 0x2, 0xffff, 0x5, 0x3, 0x100000001, 0x1, 0x7, 0x42, 0xffff, 0x7, 0x7c, 0x14c, 0x9, 0x2, 0x7, 0x5, 0x5, 0x10000, 0x9, 0x9, 0xfffffffffffefffe, 0x0, 0xffff, 0x3ff, 0x4, 0x9, 0x7, 0x6, 0x9, 0x2, 0xcd00000, 0x7, 0x21, 0x2f3, 0x6, 0x401, 0x4, 0x2, 0x40, 0x6, 0x10001, 0x6, 0x4, 0x7f, 0x400, 0x401, 0x1, 0x6, 0x5, 0xffffffff, 0x9, 0x2, 0x9, 0x14, 0xffff, 0x2b0, 0x4, 0x2, 0x1, 0x3, 0x2, 0x1f, 0x2, 0x8001, 0x3, 0x48, 0x51, 0x7, 0x1f, 0x6, 0x9c0, 0x7ff, 0x1, 0x100, 0x22, 0x7ff, 0x8000, 0x2, 0x1000, 0x2, 0x7f, 0x6]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x6, 0x0, 0x80000000, 0x5054, 'syz1\x00', 0x770d}, 0x1, [0x6, 0x10001, 0x0, 0x8, 0x6323, 0x200, 0x1, 0x9, 0x7fb, 0x20, 0xfffffffffffffffb, 0x68ef, 0x0, 0x100000001, 0x7, 0xffffffffffffffff, 0x6, 0x435, 0x5, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x5, 0x0, 0x4, 0x7c2, 0x0, 0x3, 0x3, 0x6c, 0x8864, 0x6, 0x6, 0x80, 0x6, 0x40, 0x4, 0x2f, 0x0, 0x4, 0x8d, 0xd5c9, 0x9, 0x31a9, 0x6, 0xff, 0x49, 0xcc71, 0xbd, 0x400, 0x0, 0x10000, 0x0, 0x4, 0x9, 0x200, 0x0, 0x7ff, 0x9, 0x52a, 0x2, 0x1, 0x100000001, 0xf7d, 0x8, 0x6, 0x6c, 0x0, 0xef6a, 0xffffffff, 0x2, 0x7, 0xf7, 0x5, 0x1, 0x6, 0x0, 0x9, 0x20, 0x80, 0x2, 0x6, 0x3ff, 0x48e, 0x0, 0x8, 0x5, 0x5, 0xac, 0x7fffffff, 0x10001, 0x7fff, 0x4, 0x2, 0x0, 0x101, 0x7ff, 0x9, 0x7c, 0x0, 0x1, 0x6, 0x9, 0x6, 0x2b0f, 0x9, 0x5, 0x0, 0x1000, 0x94, 0xaa6, 0x8, 0x3, 0x5, 0x81, 0x0, 0x8e17, 0x1, 0xff43, 0x8, 0x0, 0x2, 0x5, 0x71c6, 0x6, 0x337]}) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001280), 0x181601, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0x1}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) (async) connect$bt_sco(r5, 0x0, 0x47) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001040)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x3, '\x00', 0x0, r5, 0x1, 0x0, 0x5}, 0x48) (async) 07:36:24 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x20000000000000) 07:36:24 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4020940d, &(0x7f00000006c0)=0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 07:36:24 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xfff) 07:36:24 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x1402, 0x100, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000844}, 0x4005080) 07:36:24 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x40000000000000) 07:36:24 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x8000000000000000, 0x8000, 0x1}) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) [ 924.642728][ T2253] ieee802154 phy0 wpan0: encryption failed: -22 [ 924.644333][ T2253] ieee802154 phy1 wpan1: encryption failed: -22 07:36:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x8}}}, 0x0}, 0x90) 07:36:24 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x11) 07:36:24 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xf0ff1f00000000) 07:36:24 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xfff) 07:36:24 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x8000000000000000, 0x8000, 0x1}) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) (async) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) 07:36:24 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4020940d, &(0x7f00000006c0)=0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 07:36:24 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x300) 07:36:24 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') (async) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, 0x1402, 0x100, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000844}, 0x4005080) 07:36:24 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0xc}}}, 0x0}, 0x90) 07:36:24 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x43f8, 0x28000) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000640)={{0x6, 0x5, 0x8001, 0x200, '\x00', 0x6}, 0x6, 0x4, 0x8, r1, 0x3, 0x3, 'syz0\x00', &(0x7f0000000600)=['-\x00', '\x00', '%-}&\x00'], 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x9, '\x00', 0x40}, 0x0, [0x3, 0x8001, 0x5, 0x1f, 0x1, 0xfffffffffffffffd, 0x7, 0x5, 0x2d, 0x2ad, 0x1000, 0xa0, 0x803, 0x200, 0x0, 0x54e, 0x10, 0x3, 0x2, 0x80000000, 0xff, 0x8, 0x9, 0xf2e2, 0x0, 0x80, 0x1800000000000, 0x6, 0x81, 0x80000001, 0x8, 0x1000, 0x6, 0x401, 0x3, 0x2, 0x4, 0x9, 0x5, 0x0, 0x9, 0x1ff, 0x3f, 0xffffffffffffffff, 0x7fffffff, 0x8001, 0x6, 0x5, 0xc1, 0x9, 0x8, 0x1f73, 0x2, 0x3ff, 0x1, 0x9, 0x14000000, 0xfffffffffffffff7, 0x8, 0x0, 0x7fffffffffffffff, 0x9, 0x6, 0x7, 0x101, 0x7f, 0x3, 0x0, 0x0, 0x7ff, 0x2800000000000000, 0x4, 0x2, 0x4, 0x0, 0x1, 0xff, 0x0, 0x5, 0x5, 0x5, 0x5, 0xffff, 0x8000, 0x9, 0x6, 0x9da, 0x7fff, 0x8, 0xa06b, 0x4e, 0xe, 0x1, 0x5, 0x0, 0x5, 0x8001, 0x1f, 0x3, 0x3, 0x7ff, 0xffffffff, 0x7927, 0x7f, 0x6, 0xfff, 0x8, 0x5, 0x1, 0x1ff, 0x4, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x101, 0x1, 0x7fffffff, 0xa3bf, 0x2, 0x5, 0x8aa, 0x200, 0x8, 0x7fffffffffffffff, 0x2, 0x7, 0x2]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/122) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000580)=""/118) 07:36:24 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x100000000000000) 07:36:24 executing program 3: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x98, &(0x7f0000000000)={0x6, 0x8000, 0x5}}) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:24 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x11}}}, 0x0}, 0x90) 07:36:24 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:24 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x43f8, 0x28000) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000640)={{0x6, 0x5, 0x8001, 0x200, '\x00', 0x6}, 0x6, 0x4, 0x8, r1, 0x3, 0x3, 'syz0\x00', &(0x7f0000000600)=['-\x00', '\x00', '%-}&\x00'], 0x8}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x9, '\x00', 0x40}, 0x0, [0x3, 0x8001, 0x5, 0x1f, 0x1, 0xfffffffffffffffd, 0x7, 0x5, 0x2d, 0x2ad, 0x1000, 0xa0, 0x803, 0x200, 0x0, 0x54e, 0x10, 0x3, 0x2, 0x80000000, 0xff, 0x8, 0x9, 0xf2e2, 0x0, 0x80, 0x1800000000000, 0x6, 0x81, 0x80000001, 0x8, 0x1000, 0x6, 0x401, 0x3, 0x2, 0x4, 0x9, 0x5, 0x0, 0x9, 0x1ff, 0x3f, 0xffffffffffffffff, 0x7fffffff, 0x8001, 0x6, 0x5, 0xc1, 0x9, 0x8, 0x1f73, 0x2, 0x3ff, 0x1, 0x9, 0x14000000, 0xfffffffffffffff7, 0x8, 0x0, 0x7fffffffffffffff, 0x9, 0x6, 0x7, 0x101, 0x7f, 0x3, 0x0, 0x0, 0x7ff, 0x2800000000000000, 0x4, 0x2, 0x4, 0x0, 0x1, 0xff, 0x0, 0x5, 0x5, 0x5, 0x5, 0xffff, 0x8000, 0x9, 0x6, 0x9da, 0x7fff, 0x8, 0xa06b, 0x4e, 0xe, 0x1, 0x5, 0x0, 0x5, 0x8001, 0x1f, 0x3, 0x3, 0x7ff, 0xffffffff, 0x7927, 0x7f, 0x6, 0xfff, 0x8, 0x5, 0x1, 0x1ff, 0x4, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x101, 0x1, 0x7fffffff, 0xa3bf, 0x2, 0x5, 0x8aa, 0x200, 0x8, 0x7fffffffffffffff, 0x2, 0x7, 0x2]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/122) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000580)=""/118) 07:36:24 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x200000000000000) 07:36:24 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x406) 07:36:24 executing program 2: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000000c0)={0x2, 0x0, 0x98, &(0x7f0000000000)={0x6, 0x8000, 0x5}}) (async) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x15}}}, 0x0}, 0x90) 07:36:24 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:24 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:24 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x600) 07:36:24 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x1080200a57, 0x210600) r1 = getpid() ptrace$setsig(0x4203, r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x3, 0x1, 0xfffff000, 0x3, 'syz0\x00', 0xd}, 0x1, 0x20, 0x10000, r1, 0x1, 0x6, 'syz0\x00', &(0x7f0000000080)=['+\x00'], 0x2}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0xfffffffa) 07:36:24 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x300000000000000) 07:36:24 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x22}}}, 0x0}, 0x90) 07:36:25 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)="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") bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:25 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x1080200a57, 0x210600) r1 = getpid() ptrace$setsig(0x4203, r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x3, 0x1, 0xfffff000, 0x3, 'syz0\x00', 0xd}, 0x1, 0x20, 0x10000, r1, 0x1, 0x6, 'syz0\x00', &(0x7f0000000080)=['+\x00'], 0x2}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0xfffffffa) syz_open_dev$sndctrl(0x0, 0x1080200a57, 0x210600) (async) getpid() (async) ptrace$setsig(0x4203, r1, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x3, 0x1, 0xfffff000, 0x3, 'syz0\x00', 0xd}, 0x1, 0x20, 0x10000, r1, 0x1, 0x6, 'syz0\x00', &(0x7f0000000080)=['+\x00'], 0x2}) (async) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0xfffffffa) (async) 07:36:25 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x604) 07:36:25 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x400000000000000) 07:36:25 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000040)="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") bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:25 executing program 4: syz_open_dev$loop(&(0x7f0000000080), 0x8000, 0x1a1181) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x28100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'nr0\x00'}) 07:36:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x7d}}}, 0x0}, 0x90) 07:36:25 executing program 2: getegid() r0 = getegid() r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5cb, 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/60) r3 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/91) getgid() shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x7000) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r6 = getuid() r7 = getpid() prlimit64(r7, 0x0, 0x0, 0x0) r8 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x0, r4, r5, r6, r0, 0x0, 0xfff9}, 0x3, 0x6, 0x6, 0x8, r7, r8, 0x9}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0x9, 0x8, [0x8, 0xff]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000002c0)=0x4) 07:36:25 executing program 0: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x6080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:25 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x600000000000000) 07:36:25 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x810) 07:36:25 executing program 1: syz_open_dev$loop(&(0x7f0000000080), 0x8000, 0x1a1181) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x28100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x420000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'nr0\x00'}) 07:36:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:25 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x6080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:25 executing program 3: getegid() r0 = getegid() r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x5cb, 0x1) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000000c0)=""/60) r3 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/91) getgid() shmat(r3, &(0x7f0000ffe000/0x2000)=nil, 0x7000) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100)) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) (async) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r6 = getuid() getpid() (async) r7 = getpid() prlimit64(r7, 0x0, 0x0, 0x0) (async) prlimit64(r7, 0x0, 0x0, 0x0) r8 = getpid() shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x0, r4, r5, r6, r0, 0x0, 0xfff9}, 0x3, 0x6, 0x6, 0x8, r7, r8, 0x9}) (async) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000200)={{0x0, r4, r5, r6, r0, 0x0, 0xfff9}, 0x3, 0x6, 0x6, 0x8, r7, r8, 0x9}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0x9, 0x8, [0x8, 0xff]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0x9, 0x8, [0x8, 0xff]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000002c0)=0x4) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000002c0)=0x4) 07:36:25 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x604000000000000) 07:36:25 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x80000000, 0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0x7, 0x699cadc3, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x1}, 0x48) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0140, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x55e6, '\x00', 0x0, r2, 0x4, 0x2, 0x3}, 0x48) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x1) 07:36:25 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x900) 07:36:25 executing program 0: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x21, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getpid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:25 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x810000000000000) 07:36:25 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x80000000, 0x400) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0x7, 0x699cadc3, 0x10, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1, 0x1}, 0x48) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0140, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x55e6, '\x00', 0x0, r2, 0x4, 0x2, 0x3}, 0x48) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x1) 07:36:25 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x3, 0x6, 0x9, 0x3, '\x00', 0x3}, 0x6, 0x20000500, 0x0, r1, 0x6, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '}\x00', ',&)\']\x93#./\x00', ')\x00', '\x00', '\x00'], 0x11}) prlimit64(r1, 0x3, &(0x7f0000000180)={0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x6, 0x2, 0xfff, 0x74, 'syz1\x00'}, 0x1, [0x6, 0x9, 0x5, 0x3, 0x88db, 0xfffffffffffffc2f, 0x316b, 0x8, 0x80000000, 0x2, 0x8001, 0x3, 0x10000, 0xb3d, 0x27, 0x1, 0x3, 0x9, 0x1, 0x100000001, 0x2, 0xffffffffffff7fff, 0x1, 0x97c, 0x100000000, 0x15, 0xffffffffffffffff, 0x800, 0x81, 0x0, 0x6, 0xfff, 0x80, 0x7cedc046, 0x6, 0x1, 0x8, 0x7ff, 0x6a, 0x2d3, 0x3, 0x80000001, 0x40, 0x5, 0x57, 0x8, 0x3f, 0x7, 0x8, 0x9, 0x6, 0x1bf, 0x3, 0x4, 0x9, 0x8, 0x15a, 0x7, 0x20, 0xcd2e, 0x3, 0x9, 0xffff, 0x0, 0x7, 0x0, 0xcd, 0x3, 0x0, 0x2, 0x90f, 0x5, 0x0, 0x9, 0xdafb, 0xea82, 0xfffffffffffffffa, 0x8, 0x1, 0x800, 0x8, 0x20, 0x1ff, 0x1, 0x80, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x1, 0xae1, 0xc1, 0x7, 0x3, 0x5, 0x3, 0x7f, 0x7, 0x1, 0x8000000000000000, 0x7fffffff, 0x8, 0x6, 0x0, 0x7, 0x7, 0x3, 0x80000001, 0x1, 0x6d6, 0x0, 0x101, 0x401, 0x7, 0x7fffffff, 0x2, 0x3, 0x1f, 0x100000000, 0x4, 0x8e, 0xc4, 0x100000000, 0x2, 0xca, 0x8, 0x2000000000, 0x8]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000006c0)=""/156) 07:36:25 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0xc00) 07:36:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:25 executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x21, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) getpid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x21, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) getpid() (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) 07:36:25 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x900000000000000) 07:36:25 executing program 2: syz_open_dev$sndctrl(0x0, 0x8a, 0x84c01) 07:36:25 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x3, 0x6, 0x9, 0x3, '\x00', 0x3}, 0x6, 0x20000500, 0x0, r1, 0x6, 0x8, 'syz0\x00', &(0x7f0000000000)=['\x00', '}\x00', ',&)\']\x93#./\x00', ')\x00', '\x00', '\x00'], 0x11}) prlimit64(r1, 0x3, &(0x7f0000000180)={0x0, 0x3}, 0x0) (async) prlimit64(r1, 0x3, &(0x7f0000000180)={0x0, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x6, 0x2, 0xfff, 0x74, 'syz1\x00'}, 0x1, [0x6, 0x9, 0x5, 0x3, 0x88db, 0xfffffffffffffc2f, 0x316b, 0x8, 0x80000000, 0x2, 0x8001, 0x3, 0x10000, 0xb3d, 0x27, 0x1, 0x3, 0x9, 0x1, 0x100000001, 0x2, 0xffffffffffff7fff, 0x1, 0x97c, 0x100000000, 0x15, 0xffffffffffffffff, 0x800, 0x81, 0x0, 0x6, 0xfff, 0x80, 0x7cedc046, 0x6, 0x1, 0x8, 0x7ff, 0x6a, 0x2d3, 0x3, 0x80000001, 0x40, 0x5, 0x57, 0x8, 0x3f, 0x7, 0x8, 0x9, 0x6, 0x1bf, 0x3, 0x4, 0x9, 0x8, 0x15a, 0x7, 0x20, 0xcd2e, 0x3, 0x9, 0xffff, 0x0, 0x7, 0x0, 0xcd, 0x3, 0x0, 0x2, 0x90f, 0x5, 0x0, 0x9, 0xdafb, 0xea82, 0xfffffffffffffffa, 0x8, 0x1, 0x800, 0x8, 0x20, 0x1ff, 0x1, 0x80, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x1, 0xae1, 0xc1, 0x7, 0x3, 0x5, 0x3, 0x7f, 0x7, 0x1, 0x8000000000000000, 0x7fffffff, 0x8, 0x6, 0x0, 0x7, 0x7, 0x3, 0x80000001, 0x1, 0x6d6, 0x0, 0x101, 0x401, 0x7, 0x7fffffff, 0x2, 0x3, 0x1f, 0x100000000, 0x4, 0x8e, 0xc4, 0x100000000, 0x2, 0xca, 0x8, 0x2000000000, 0x8]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x6, 0x2, 0xfff, 0x74, 'syz1\x00'}, 0x1, [0x6, 0x9, 0x5, 0x3, 0x88db, 0xfffffffffffffc2f, 0x316b, 0x8, 0x80000000, 0x2, 0x8001, 0x3, 0x10000, 0xb3d, 0x27, 0x1, 0x3, 0x9, 0x1, 0x100000001, 0x2, 0xffffffffffff7fff, 0x1, 0x97c, 0x100000000, 0x15, 0xffffffffffffffff, 0x800, 0x81, 0x0, 0x6, 0xfff, 0x80, 0x7cedc046, 0x6, 0x1, 0x8, 0x7ff, 0x6a, 0x2d3, 0x3, 0x80000001, 0x40, 0x5, 0x57, 0x8, 0x3f, 0x7, 0x8, 0x9, 0x6, 0x1bf, 0x3, 0x4, 0x9, 0x8, 0x15a, 0x7, 0x20, 0xcd2e, 0x3, 0x9, 0xffff, 0x0, 0x7, 0x0, 0xcd, 0x3, 0x0, 0x2, 0x90f, 0x5, 0x0, 0x9, 0xdafb, 0xea82, 0xfffffffffffffffa, 0x8, 0x1, 0x800, 0x8, 0x20, 0x1ff, 0x1, 0x80, 0x9, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x3, 0x1, 0xae1, 0xc1, 0x7, 0x3, 0x5, 0x3, 0x7f, 0x7, 0x1, 0x8000000000000000, 0x7fffffff, 0x8, 0x6, 0x0, 0x7, 0x7, 0x3, 0x80000001, 0x1, 0x6d6, 0x0, 0x101, 0x401, 0x7, 0x7fffffff, 0x2, 0x3, 0x1f, 0x100000000, 0x4, 0x8e, 0xc4, 0x100000000, 0x2, 0xca, 0x8, 0x2000000000, 0x8]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000006c0)=""/156) 07:36:25 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:25 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x1008) 07:36:25 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:36:25 executing program 0: syz_open_dev$sndctrl(0x0, 0x8a, 0x84c01) 07:36:25 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x88040) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5, 0x0, 0x7, 0xffff, '\x00', 0x1}, 0x0, [0x290, 0x200, 0x800, 0x8000, 0x0, 0x0, 0xff, 0x341, 0xffffffffffff04c5, 0x94b, 0x7, 0x2, 0x7fffffffffffffff, 0xbc, 0x7c6d00, 0xfe00000000000000, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x1, 0x2, 0x7, 0x8000, 0xfffffffffffffff9, 0x5, 0x0, 0x40, 0x0, 0x6, 0x65, 0x40, 0x8, 0x9, 0x7, 0x7, 0x100000000, 0x40, 0x80000000, 0x890f, 0x2, 0x7fffffffffffffff, 0x7f, 0x3f, 0x6, 0xa5, 0x7, 0x3, 0x9888, 0x0, 0x1, 0x8, 0x8000000000000000, 0x3, 0x40, 0x74c, 0x4, 0x8000000000000000, 0x4, 0x4, 0xf, 0x3, 0x200, 0x19ed602f, 0x800, 0x3, 0x5, 0x1, 0x3, 0x9, 0x1, 0xffffffff, 0x0, 0x6, 0x2, 0x1, 0x8, 0x8000000000000000, 0x4, 0x8, 0xfa0, 0x3, 0x3ff, 0xf891, 0x43, 0x3, 0x3, 0x8, 0xe, 0x1, 0x5, 0x80000001, 0x66ac, 0x3ff, 0x9, 0x48, 0x2, 0x4, 0x4, 0x6, 0x7, 0x7fffffff, 0x101, 0x4, 0x4f, 0x8, 0x1000, 0xffffffffffffff00, 0xeb4, 0x9, 0xb2, 0x8000, 0xffff, 0x7fffffff, 0x59c, 0x8, 0x5, 0x20, 0x1, 0x20, 0x1, 0x2d7, 0xffffffffffffff81, 0xffffffffffffffff, 0xff, 0x0, 0x9a]}) syz_open_dev$sndctrl(&(0x7f0000000540), 0x6, 0x80801) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x444400) 07:36:25 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xc00000000000000) 07:36:25 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:25 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x1100) 07:36:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:36:25 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x1, 0x80000000, 0x1, '\x00', 0x8}, 0x0, [0x2, 0x1, 0x4, 0x7fffffffffffffff, 0x5, 0x196, 0x5, 0xfffffffffffffc00, 0x4, 0x5, 0x7, 0xc89, 0xfffffffffffffffa, 0x1f, 0x9, 0x2, 0x5, 0x1, 0x10000, 0x80, 0xbf0, 0x8, 0x2, 0x1, 0x7f, 0x7, 0x67, 0x1000, 0xffffffffffffffff, 0x6, 0x4, 0x4, 0x9da, 0x0, 0x0, 0x6, 0xcda6, 0x10000, 0x80000000, 0x10000, 0x100000001, 0x10000, 0xcc3f, 0x3c, 0x1, 0x4, 0x5, 0x2, 0x1f, 0x2, 0x2, 0x8, 0x9, 0xb4e, 0x8f, 0x0, 0xffffffff, 0x8c5, 0x800, 0x5, 0x7ff, 0xfef, 0x5, 0xff, 0x7f, 0xfffffffffffffe00, 0x1f, 0x8000000000000001, 0xea0, 0x40, 0x9, 0x400, 0x6, 0x9, 0xfff, 0x0, 0x100000001, 0x1, 0x4, 0x0, 0x1, 0x3, 0x8, 0x5, 0x2, 0x1000, 0x1, 0x4, 0x2, 0xe4, 0x8, 0x7, 0xfffffffffffffffd, 0x4, 0x100000000, 0x159, 0x4, 0x200, 0x7, 0x9, 0x100000001, 0x8, 0xc188, 0x8001, 0x7efd, 0x4, 0xfffffffffffffd0b, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf3, 0xcf1, 0x5, 0x6, 0xffffffffffffffff, 0x8, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x9f, 0x73b, 0x1, 0x9c14, 0x7]}) 07:36:25 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0xc5ac5a7ffff0000) 07:36:25 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x88040) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x5, 0x0, 0x7, 0xffff, '\x00', 0x1}, 0x0, [0x290, 0x200, 0x800, 0x8000, 0x0, 0x0, 0xff, 0x341, 0xffffffffffff04c5, 0x94b, 0x7, 0x2, 0x7fffffffffffffff, 0xbc, 0x7c6d00, 0xfe00000000000000, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x1, 0x2, 0x7, 0x8000, 0xfffffffffffffff9, 0x5, 0x0, 0x40, 0x0, 0x6, 0x65, 0x40, 0x8, 0x9, 0x7, 0x7, 0x100000000, 0x40, 0x80000000, 0x890f, 0x2, 0x7fffffffffffffff, 0x7f, 0x3f, 0x6, 0xa5, 0x7, 0x3, 0x9888, 0x0, 0x1, 0x8, 0x8000000000000000, 0x3, 0x40, 0x74c, 0x4, 0x8000000000000000, 0x4, 0x4, 0xf, 0x3, 0x200, 0x19ed602f, 0x800, 0x3, 0x5, 0x1, 0x3, 0x9, 0x1, 0xffffffff, 0x0, 0x6, 0x2, 0x1, 0x8, 0x8000000000000000, 0x4, 0x8, 0xfa0, 0x3, 0x3ff, 0xf891, 0x43, 0x3, 0x3, 0x8, 0xe, 0x1, 0x5, 0x80000001, 0x66ac, 0x3ff, 0x9, 0x48, 0x2, 0x4, 0x4, 0x6, 0x7, 0x7fffffff, 0x101, 0x4, 0x4f, 0x8, 0x1000, 0xffffffffffffff00, 0xeb4, 0x9, 0xb2, 0x8000, 0xffff, 0x7fffffff, 0x59c, 0x8, 0x5, 0x20, 0x1, 0x20, 0x1, 0x2d7, 0xffffffffffffff81, 0xffffffffffffffff, 0xff, 0x0, 0x9a]}) (async) syz_open_dev$sndctrl(&(0x7f0000000540), 0x6, 0x80801) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x444400) (rerun: 32) 07:36:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:25 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x18) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 07:36:25 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x1100000000000000) 07:36:25 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x1, 0x80000000, 0x1, '\x00', 0x8}, 0x0, [0x2, 0x1, 0x4, 0x7fffffffffffffff, 0x5, 0x196, 0x5, 0xfffffffffffffc00, 0x4, 0x5, 0x7, 0xc89, 0xfffffffffffffffa, 0x1f, 0x9, 0x2, 0x5, 0x1, 0x10000, 0x80, 0xbf0, 0x8, 0x2, 0x1, 0x7f, 0x7, 0x67, 0x1000, 0xffffffffffffffff, 0x6, 0x4, 0x4, 0x9da, 0x0, 0x0, 0x6, 0xcda6, 0x10000, 0x80000000, 0x10000, 0x100000001, 0x10000, 0xcc3f, 0x3c, 0x1, 0x4, 0x5, 0x2, 0x1f, 0x2, 0x2, 0x8, 0x9, 0xb4e, 0x8f, 0x0, 0xffffffff, 0x8c5, 0x800, 0x5, 0x7ff, 0xfef, 0x5, 0xff, 0x7f, 0xfffffffffffffe00, 0x1f, 0x8000000000000001, 0xea0, 0x40, 0x9, 0x400, 0x6, 0x9, 0xfff, 0x0, 0x100000001, 0x1, 0x4, 0x0, 0x1, 0x3, 0x8, 0x5, 0x2, 0x1000, 0x1, 0x4, 0x2, 0xe4, 0x8, 0x7, 0xfffffffffffffffd, 0x4, 0x100000000, 0x159, 0x4, 0x200, 0x7, 0x9, 0x100000001, 0x8, 0xc188, 0x8001, 0x7efd, 0x4, 0xfffffffffffffd0b, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xf3, 0xcf1, 0x5, 0x6, 0xffffffffffffffff, 0x8, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, 0x9f, 0x73b, 0x1, 0x9c14, 0x7]}) 07:36:25 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x2000) 07:36:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:25 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x18) connect$bt_sco(r0, &(0x7f0000000000), 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) read$smackfs_logging(r0, &(0x7f00000000c0), 0x18) (async) connect$bt_sco(r0, &(0x7f0000000000), 0x8) (async) 07:36:25 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x2000000000000000) 07:36:25 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1262, 0xffffffffffffffff) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r1, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x64800, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0x2) 07:36:25 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x4000) 07:36:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8983, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) 07:36:25 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x4000000000000000) 07:36:25 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000005c0)=""/183) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000500)=""/1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x7, 0x4, 0x6, 0xfc75, '\x00', 0x8}, 0x1, [0x8001, 0x1, 0x3f, 0x0, 0xffffffff, 0xe8ba, 0x4, 0x1, 0x3, 0xffffffff, 0x0, 0x7496, 0x401, 0x3, 0x6, 0x200, 0x10004, 0x3cca742e, 0x1, 0x7fffffffffffffff, 0x0, 0x9, 0x80, 0xfff, 0x200000000000, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x53f, 0x19d, 0x1, 0x1f, 0x100000001, 0x9, 0x9, 0x2188, 0x7fff, 0x7, 0x1, 0xffffffffffffff12, 0x3, 0xfa22, 0x8000000000000001, 0x4, 0x3, 0x3674, 0x3e7, 0xffffffff, 0x2, 0x7fff, 0x1ff, 0x8, 0x4426, 0xff, 0x5, 0x7, 0x10001, 0x5b, 0x9, 0x38000, 0x5, 0x8000000000000001, 0x2, 0x1, 0xe9af, 0x1, 0x278, 0x8, 0x2, 0x4, 0x5, 0xffffffff, 0xffff, 0x8, 0x8000000000000001, 0x1, 0xf2c9, 0x8000000000000000, 0xc95, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, 0x9c, 0x4, 0x9, 0x7, 0xffffffffffffffff, 0x8000, 0xda9, 0x5, 0x81, 0x6, 0x0, 0x100, 0x6, 0x4, 0x4, 0x4, 0x81, 0x9, 0xffffffff, 0x5de, 0x7fff, 0x0, 0x7fffffff, 0xfff, 0x2e, 0x8531, 0x935, 0x4, 0x5, 0xffffffffffffffe0, 0xee1, 0xd61, 0x4, 0xfffffffffffffbff, 0x7, 0x100000001, 0x0, 0x55e, 0x40, 0x8]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x7b7, 0x430040) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000580)=0x1000) 07:36:25 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x15}}}, 0x0}, 0x90) 07:36:26 executing program 2: openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1262, 0xffffffffffffffff) (async) ioctl$LOOP_CHANGE_FD(r0, 0x1262, 0xffffffffffffffff) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r1, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x64800, 0x0) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000040)=0x2) 07:36:26 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x64e602, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:36:26 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0x7f00000000000000) 07:36:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8983, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) [ 926.082134][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:26 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000005c0)=""/183) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000500)=""/1) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x7, 0x4, 0x6, 0xfc75, '\x00', 0x8}, 0x1, [0x8001, 0x1, 0x3f, 0x0, 0xffffffff, 0xe8ba, 0x4, 0x1, 0x3, 0xffffffff, 0x0, 0x7496, 0x401, 0x3, 0x6, 0x200, 0x10004, 0x3cca742e, 0x1, 0x7fffffffffffffff, 0x0, 0x9, 0x80, 0xfff, 0x200000000000, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x53f, 0x19d, 0x1, 0x1f, 0x100000001, 0x9, 0x9, 0x2188, 0x7fff, 0x7, 0x1, 0xffffffffffffff12, 0x3, 0xfa22, 0x8000000000000001, 0x4, 0x3, 0x3674, 0x3e7, 0xffffffff, 0x2, 0x7fff, 0x1ff, 0x8, 0x4426, 0xff, 0x5, 0x7, 0x10001, 0x5b, 0x9, 0x38000, 0x5, 0x8000000000000001, 0x2, 0x1, 0xe9af, 0x1, 0x278, 0x8, 0x2, 0x4, 0x5, 0xffffffff, 0xffff, 0x8, 0x8000000000000001, 0x1, 0xf2c9, 0x8000000000000000, 0xc95, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x3, 0x9c, 0x4, 0x9, 0x7, 0xffffffffffffffff, 0x8000, 0xda9, 0x5, 0x81, 0x6, 0x0, 0x100, 0x6, 0x4, 0x4, 0x4, 0x81, 0x9, 0xffffffff, 0x5de, 0x7fff, 0x0, 0x7fffffff, 0xfff, 0x2e, 0x8531, 0x935, 0x4, 0x5, 0xffffffffffffffe0, 0xee1, 0xd61, 0x4, 0xfffffffffffffbff, 0x7, 0x100000001, 0x0, 0x55e, 0x40, 0x8]}) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x7b7, 0x430040) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000580)=0x1000) 07:36:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x22}}}, 0x0}, 0x90) 07:36:26 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x7f00) 07:36:26 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0xffefff1f00000000) 07:36:26 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) write$capi20(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000a00)) r2 = syz_open_dev$sndctrl(&(0x7f0000000f40), 0x5, 0xc00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000f80)=0x7fff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000500)={{0x1, 0x5, 0xfffffffc, 0x9, 'syz1\x00', 0x926}, 0x1, [0x100000000, 0x6, 0xc09d, 0x9, 0x80000001, 0x8000000000000001, 0x1, 0xb35, 0x6c9a, 0xbf, 0x8, 0x3, 0x67, 0x100, 0xfff, 0x4967ab0d, 0x7, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff8, 0x3c, 0x3ef, 0x9, 0xa, 0x6, 0x5, 0x5, 0x200, 0x7, 0x1, 0x6, 0x9, 0x1000, 0x3b9ad580, 0x100000001, 0xfffffffffffffffd, 0x7fff, 0x0, 0x8001, 0x1000, 0x3ff, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0xf27, 0x5, 0x200, 0x5, 0x6790, 0x4, 0x6, 0x5, 0x8000000000000000, 0x9, 0x6, 0xffff, 0x2, 0xffffffffffff474b, 0x7f, 0x4, 0x3ff, 0x20, 0x993, 0x6, 0x6, 0xfffffffffffffff9, 0x40, 0xb3a, 0x8000000000000000, 0xf9a, 0x9, 0x5, 0x2420, 0x6, 0x19, 0x7fffffffffffffff, 0x2, 0x1, 0xead5, 0xfffffffffffffffe, 0x4, 0xef87, 0x4, 0x6, 0xfffffffc, 0x7, 0x400, 0x8, 0x9, 0x0, 0x3f, 0x6, 0x3, 0x7f, 0xff, 0x3ff, 0x7, 0x6, 0x5, 0x8, 0x8, 0x6, 0x2, 0x81, 0x2, 0xd52, 0x8, 0x0, 0x9, 0x8, 0x50751cc4, 0xfffffffffffffffa, 0x1, 0x0, 0x1, 0x1, 0x200, 0x8, 0xfffffffffffffffc, 0xcdf4, 0x7, 0xff, 0x0, 0x800, 0x3, 0x9, 0x2]}) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000fc0)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x0, 0x3ce340, 0x2, 'syz1\x00', 0x40}, 0x1, [0x9, 0x5f6f, 0x9, 0x2, 0xf071967, 0x7fff, 0x7fff, 0x10000, 0x4, 0x5, 0x4, 0xc741, 0x1ff, 0x7, 0x7f, 0x7fff, 0xfffe000, 0x2, 0x9, 0x3, 0x5cb, 0x401, 0xffffffffffffffe6, 0x8, 0x8, 0x200, 0x6, 0x100000001, 0xccf4, 0x186, 0x80000000, 0xfffffffffffffffc, 0x6, 0x5, 0x0, 0x518, 0xc15, 0x7, 0x4, 0x100000000, 0xa52, 0xfffffffffffffff8, 0xbe3, 0xff, 0x5, 0x4, 0x958e, 0x5, 0x100000000, 0x80, 0x6, 0x8, 0x3ff, 0x100, 0x5, 0xed87, 0x3, 0x7, 0xed, 0x0, 0x7fff, 0x3, 0x3, 0x8000000000000001, 0x6, 0xfffffffffffff7aa, 0x20, 0x57b, 0x1, 0x1, 0x8, 0x6ae8, 0x2, 0x1, 0x6df8, 0x6, 0x3, 0x0, 0x3, 0xb9db, 0x5, 0x7fffffff, 0x6, 0x8, 0x5, 0x4, 0xffffffff, 0x8, 0x2, 0x8000, 0xffff, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x0, 0x6, 0x10000, 0x9, 0x823, 0x3f, 0x93b, 0x5, 0x2, 0x80000001, 0x5, 0x4, 0x0, 0x3, 0x2, 0x52ab5aa7, 0x1, 0x8, 0x3, 0x4, 0x8, 0x1, 0xef3e, 0x2d, 0x919b, 0x1, 0x9, 0x81, 0x75a17b15, 0x1, 0x9, 0xf03d]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000a40)={{0x3, 0x1, 0x8, 0x4, '\x00', 0x1f}, 0x1, [0xce8, 0x100, 0xffffffff, 0x6, 0x5, 0x17, 0x15f, 0x1, 0x6, 0xffffffffffffffff, 0x5, 0x7, 0x6, 0x49, 0x1, 0x400, 0xff, 0x1, 0x2, 0xfffffffffffffeff, 0x3, 0x10000, 0xff, 0x10001, 0x8, 0x8, 0x6, 0x0, 0x6, 0x6, 0x55a5, 0x1f, 0x1, 0x3, 0x7f, 0x3, 0x7fffffff, 0x41b28018, 0x2000000000000000, 0x7, 0x4, 0x3, 0x8, 0x7, 0x1, 0x7fff, 0x3ff, 0xffffffffffffffff, 0xb16, 0x4, 0x7, 0xe3ab, 0x85c7, 0xcbde, 0x7, 0x5, 0x0, 0x6, 0x401, 0x81, 0x80000001, 0x5, 0xa32, 0x9, 0x2, 0x5, 0x8000000000000001, 0x10001, 0xbdc0, 0x6, 0x4, 0x0, 0x7fff, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x8000, 0x81, 0x8, 0x5, 0xffff, 0x200, 0x1, 0x0, 0x387, 0x3, 0x0, 0x100000001, 0x20, 0xfffffffffffffc01, 0x3ff, 0x0, 0x20, 0xfff, 0x1, 0xffff, 0x200, 0x9, 0xb5f1, 0x100000000, 0xffff, 0x79, 0x51797ae0, 0x45, 0x6, 0x7a33d3b9, 0xffff, 0xcf, 0x200, 0x0, 0x8000000000000001, 0x100000001, 0x7, 0x0, 0x8, 0x7, 0xdd9, 0x2, 0x68, 0x9, 0x100000000, 0xa15, 0x8001, 0x1, 0x100000000, 0x9, 0xfffffffffffffffa]}) 07:36:26 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0xffff1fa7ffff0000) 07:36:26 executing program 4: r0 = inotify_init1(0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1) inotify_rm_watch(r0, r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) inotify_rm_watch(r0, r1) inotify_rm_watch(r0, r1) 07:36:26 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x200000) 07:36:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x7d}}}, 0x0}, 0x90) 07:36:26 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async, rerun: 32) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) (rerun: 32) write$capi20(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000a00)) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000f40), 0x5, 0xc00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000f80)=0x7fff) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000500)={{0x1, 0x5, 0xfffffffc, 0x9, 'syz1\x00', 0x926}, 0x1, [0x100000000, 0x6, 0xc09d, 0x9, 0x80000001, 0x8000000000000001, 0x1, 0xb35, 0x6c9a, 0xbf, 0x8, 0x3, 0x67, 0x100, 0xfff, 0x4967ab0d, 0x7, 0xfffffffffffffffe, 0x5, 0xfffffffffffffff8, 0x3c, 0x3ef, 0x9, 0xa, 0x6, 0x5, 0x5, 0x200, 0x7, 0x1, 0x6, 0x9, 0x1000, 0x3b9ad580, 0x100000001, 0xfffffffffffffffd, 0x7fff, 0x0, 0x8001, 0x1000, 0x3ff, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0xf27, 0x5, 0x200, 0x5, 0x6790, 0x4, 0x6, 0x5, 0x8000000000000000, 0x9, 0x6, 0xffff, 0x2, 0xffffffffffff474b, 0x7f, 0x4, 0x3ff, 0x20, 0x993, 0x6, 0x6, 0xfffffffffffffff9, 0x40, 0xb3a, 0x8000000000000000, 0xf9a, 0x9, 0x5, 0x2420, 0x6, 0x19, 0x7fffffffffffffff, 0x2, 0x1, 0xead5, 0xfffffffffffffffe, 0x4, 0xef87, 0x4, 0x6, 0xfffffffc, 0x7, 0x400, 0x8, 0x9, 0x0, 0x3f, 0x6, 0x3, 0x7f, 0xff, 0x3ff, 0x7, 0x6, 0x5, 0x8, 0x8, 0x6, 0x2, 0x81, 0x2, 0xd52, 0x8, 0x0, 0x9, 0x8, 0x50751cc4, 0xfffffffffffffffa, 0x1, 0x0, 0x1, 0x1, 0x200, 0x8, 0xfffffffffffffffc, 0xcdf4, 0x7, 0xff, 0x0, 0x800, 0x3, 0x9, 0x2]}) (async, rerun: 64) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000fc0)) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x0, 0x3ce340, 0x2, 'syz1\x00', 0x40}, 0x1, [0x9, 0x5f6f, 0x9, 0x2, 0xf071967, 0x7fff, 0x7fff, 0x10000, 0x4, 0x5, 0x4, 0xc741, 0x1ff, 0x7, 0x7f, 0x7fff, 0xfffe000, 0x2, 0x9, 0x3, 0x5cb, 0x401, 0xffffffffffffffe6, 0x8, 0x8, 0x200, 0x6, 0x100000001, 0xccf4, 0x186, 0x80000000, 0xfffffffffffffffc, 0x6, 0x5, 0x0, 0x518, 0xc15, 0x7, 0x4, 0x100000000, 0xa52, 0xfffffffffffffff8, 0xbe3, 0xff, 0x5, 0x4, 0x958e, 0x5, 0x100000000, 0x80, 0x6, 0x8, 0x3ff, 0x100, 0x5, 0xed87, 0x3, 0x7, 0xed, 0x0, 0x7fff, 0x3, 0x3, 0x8000000000000001, 0x6, 0xfffffffffffff7aa, 0x20, 0x57b, 0x1, 0x1, 0x8, 0x6ae8, 0x2, 0x1, 0x6df8, 0x6, 0x3, 0x0, 0x3, 0xb9db, 0x5, 0x7fffffff, 0x6, 0x8, 0x5, 0x4, 0xffffffff, 0x8, 0x2, 0x8000, 0xffff, 0x7, 0x8001, 0x2, 0x9, 0x0, 0x0, 0x6, 0x10000, 0x9, 0x823, 0x3f, 0x93b, 0x5, 0x2, 0x80000001, 0x5, 0x4, 0x0, 0x3, 0x2, 0x52ab5aa7, 0x1, 0x8, 0x3, 0x4, 0x8, 0x1, 0xef3e, 0x2d, 0x919b, 0x1, 0x9, 0x81, 0x75a17b15, 0x1, 0x9, 0xf03d]}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000a40)={{0x3, 0x1, 0x8, 0x4, '\x00', 0x1f}, 0x1, [0xce8, 0x100, 0xffffffff, 0x6, 0x5, 0x17, 0x15f, 0x1, 0x6, 0xffffffffffffffff, 0x5, 0x7, 0x6, 0x49, 0x1, 0x400, 0xff, 0x1, 0x2, 0xfffffffffffffeff, 0x3, 0x10000, 0xff, 0x10001, 0x8, 0x8, 0x6, 0x0, 0x6, 0x6, 0x55a5, 0x1f, 0x1, 0x3, 0x7f, 0x3, 0x7fffffff, 0x41b28018, 0x2000000000000000, 0x7, 0x4, 0x3, 0x8, 0x7, 0x1, 0x7fff, 0x3ff, 0xffffffffffffffff, 0xb16, 0x4, 0x7, 0xe3ab, 0x85c7, 0xcbde, 0x7, 0x5, 0x0, 0x6, 0x401, 0x81, 0x80000001, 0x5, 0xa32, 0x9, 0x2, 0x5, 0x8000000000000001, 0x10001, 0xbdc0, 0x6, 0x4, 0x0, 0x7fff, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x8000, 0x81, 0x8, 0x5, 0xffff, 0x200, 0x1, 0x0, 0x387, 0x3, 0x0, 0x100000001, 0x20, 0xfffffffffffffc01, 0x3ff, 0x0, 0x20, 0xfff, 0x1, 0xffff, 0x200, 0x9, 0xb5f1, 0x100000000, 0xffff, 0x79, 0x51797ae0, 0x45, 0x6, 0x7a33d3b9, 0xffff, 0xcf, 0x200, 0x0, 0x8000000000000001, 0x100000001, 0x7, 0x0, 0x8, 0x7, 0xdd9, 0x2, 0x68, 0x9, 0x100000000, 0xa15, 0x8001, 0x1, 0x100000000, 0x9, 0xfffffffffffffffa]}) 07:36:26 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x20100) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0x6, 0x2, 0x9, 0x6, '\x00', 0xfffffffd}, 0x1, 0x0, 0x8, 0x0, 0x6, 0x13595824, 'syz1\x00', &(0x7f0000000040)=['.){{{,\x00', '\x00', '\x00', '.&/.(\x00', '\x00', '\x00'], 0x11}) 07:36:26 executing program 4: syz_open_dev$sndctrl(0x0, 0x0, 0xffffffff00000000) 07:36:26 executing program 3: r0 = inotify_init1(0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) (async) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1) inotify_rm_watch(r0, r1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async, rerun: 64) inotify_rm_watch(r0, r1) (rerun: 64) inotify_rm_watch(r0, r1) 07:36:26 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x64e602, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:36:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x155}}}, 0x0}, 0x90) 07:36:26 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0xf0ff1f) 07:36:26 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x20100) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x20100) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0x6, 0x2, 0x9, 0x6, '\x00', 0xfffffffd}, 0x1, 0x0, 0x8, 0x0, 0x6, 0x13595824, 'syz1\x00', &(0x7f0000000040)=['.){{{,\x00', '\x00', '\x00', '.&/.(\x00', '\x00', '\x00'], 0x11}) 07:36:26 executing program 3: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x2a080, 0x0) 07:36:26 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5421, 0x0) write$ppp(r0, &(0x7f0000000040), 0x0) write$damon_contexts(r0, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) 07:36:26 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x239}}}, 0x0}, 0x90) 07:36:26 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$TUNGETDEVNETNS(r0, 0x4030582b, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:26 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:26 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x6, 0x7, 0xc1c, 'syz1\x00', 0x1ff}, 0x2, 0x4, 0x9, r1, 0xa, 0x6, 'syz0\x00', &(0x7f0000000000)=['#:-\x00', '+\x00', ':\x00', '!\x00', '/$:\x00', '\x00', '\\{\x00', '\x00', '@\xb0\x1a:-#$\x00', '-%\x00'], 0x1e}) 07:36:26 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x1000000) 07:36:26 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5421, 0x0) write$ppp(r0, &(0x7f0000000040), 0x0) write$damon_contexts(r0, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x5421, 0x0) (async) write$ppp(r0, &(0x7f0000000040), 0x0) (async) write$damon_contexts(r0, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) (async) 07:36:26 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$TUNGETDEVNETNS(r0, 0x4030582b, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) ioctl$TUNGETDEVNETNS(r0, 0x4030582b, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) (async) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @none}, 0x8) (async) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) 07:36:26 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x2a080, 0x0) 07:36:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x249}}}, 0x0}, 0x90) 07:36:26 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x3, 0x6, 0x7, 0xc1c, 'syz1\x00', 0x1ff}, 0x2, 0x4, 0x9, r1, 0xa, 0x6, 'syz0\x00', &(0x7f0000000000)=['#:-\x00', '+\x00', ':\x00', '!\x00', '/$:\x00', '\x00', '\\{\x00', '\x00', '@\xb0\x1a:-#$\x00', '-%\x00'], 0x1e}) 07:36:26 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x2000000) 07:36:26 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xc0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:26 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x202, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x4, &(0x7f0000000000)='.!/\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r0, 0x0, 0x179, &(0x7f0000000300)='usive\x00~\x8a\xdat*D]\na7\xd7m\xb3\x13\xb9\xc5\x05\x00\x00\x00\x00\x00@\x00S\xa5\x05\x99E\xa0\x960{\xfdN \x1c+|K\x88\v\xa6J\x97~[\xf4\xe9\xab\x1e\xce\xf9\xc7\x9fA\xf9\xa9\xf5x4h\xd1bwC\x85\x80\xac\xc2\xa2\xbd\xb1z8mfn\x80\xb7rJ\xfd\xfc,\x9a\x97~\x91\xb7\xd6\xe0\xfd\xa7V\xeb\xf6\xfe\xd6\xe2\xcd)6\x1d\r\xcdT\xfa\xe0Z\a\x13\x9fUa\xc5\xe0\xdd\xfa\xaaO\xa4\xf3\xddK\x1c9\xb8L\x83$\xd4\xbd\xc6\tW\xb3\xf6kZ\x99\xf0\xc9\xa4\xefn\x9c\x9192(\xd3Z\xfb?\xc6\xdc\x95\xb6\xbaS\xdc3`\xbe\xaf\xc8\x00d,r\xdd\xb2(\x99\xcbi5\xa3e-~\x81P_i\x87\xe8K\xb4l \xcc\x95\xf2\xb4s,C\xf4VT\x14\fd\x96\xee\xdc\xe6 \x8d\xbb\f8.:22\x1b?kV\x03\x8d\x7f\x14\\\xc4\x18\xd2o\xf5q-\xdedG\x98\'\x90\x16\x12\xc5\xae\xa5\x818\x89Qc\xf0(=)\x92}30\xebd\xaf\xda\xd1+\xb0\xfc\xa5\x8f4D\xa0\xad\xe7\xfe6\xef~\xd6(G]\xe9{\x12_\x18\x81\xad\r\xf8\xcc\x1d\xef\xba~%\xcf\x0e\x88\xe9\x140\x9e\xf5\xf7\x03\x85\xa6E:6O\x02\x8a23\xd3\xf92\xe1AJe\xc8\r\xbdyFe\xc3%\xf2\x04\xd4\xd3\x1e+\a)h\x9c\x02\xc42\fl\xbc\x02\x02\xa7\x062\xe6\xb5\x8a\xec\\\x1f\x9a\x00'/377}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='f2fs_sync_file_exit\x00', r0}, 0x10) prlimit64(r1, 0x8, &(0x7f0000000080)={0x10000, 0xffffffffffffffff}, &(0x7f00000000c0)) openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 07:36:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x181001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x9, 0x6, 0x1d, 0x5, "0cf5a87c16ce452e5f4282e6cdf78de46fa5e9f5f2fa4645abd35aa6721541863a121c2990daff23bcc8e5b971659fd429cf62cb08d64b2fefb9ca7d8c29b318", "919ee1ba528b134dd7e08ddffee636b5a8df8d37dc2d5068e8b100f6215098cf", [0x6, 0x3]}) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:26 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x2, 0x4, 0x5, 0x4, '\x00', 0x4}, 0x0, [0x400, 0x1, 0x4, 0xa501, 0x1, 0x4, 0x4, 0xffffffff, 0x2, 0x7f, 0xffffffffffffffc0, 0x5b71, 0x4, 0x7, 0x1, 0x8, 0x0, 0x6, 0x2, 0x7, 0xfffffffffffffffc, 0xce, 0x1ff, 0xe270, 0x3, 0x741, 0x7, 0x1f673ab, 0x1be, 0x80, 0x3, 0x0, 0x101, 0x1, 0x7, 0x4ddc, 0x4, 0x6, 0x9, 0x5, 0x13, 0x101, 0x9, 0x1, 0x9, 0x0, 0x7, 0x7, 0x3, 0x2, 0x200, 0xfffffffffffffff7, 0x8000, 0xcae, 0x3, 0x2, 0x7fffffffffffffff, 0x800, 0x8001, 0x4, 0x5, 0x8, 0x3, 0x3647, 0xa4cd, 0x80000001, 0x7, 0x80, 0x2, 0x1f, 0x2, 0x9dd, 0xe1, 0x7fff, 0x6, 0xca2, 0xffffffffffffffff, 0x781, 0x0, 0x7fffffff, 0xffffffff, 0x86, 0x69, 0x1808, 0x6, 0x6, 0x100000001, 0x8, 0x9, 0x4, 0x8001, 0xfffffffffffffffe, 0x3, 0x5, 0x6, 0x7, 0x7fff, 0x0, 0x6, 0x8, 0x1ff, 0x7, 0x3, 0x9, 0x3ff, 0x2, 0x4, 0x8, 0x7, 0xffffffffffffffff, 0x2, 0x1, 0x8000000000000000, 0x3, 0x0, 0x4, 0x7, 0x631, 0x0, 0x2, 0x8000, 0x0, 0x3f4, 0x0, 0x1, 0x100000000, 0x2, 0x8]}) 07:36:26 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x3000000) 07:36:26 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x300}}}, 0x0}, 0x90) 07:36:26 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x202, 0x0) gettid() (async) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x4, &(0x7f0000000000)='.!/\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r0, 0x0, 0x179, &(0x7f0000000300)='usive\x00~\x8a\xdat*D]\na7\xd7m\xb3\x13\xb9\xc5\x05\x00\x00\x00\x00\x00@\x00S\xa5\x05\x99E\xa0\x960{\xfdN \x1c+|K\x88\v\xa6J\x97~[\xf4\xe9\xab\x1e\xce\xf9\xc7\x9fA\xf9\xa9\xf5x4h\xd1bwC\x85\x80\xac\xc2\xa2\xbd\xb1z8mfn\x80\xb7rJ\xfd\xfc,\x9a\x97~\x91\xb7\xd6\xe0\xfd\xa7V\xeb\xf6\xfe\xd6\xe2\xcd)6\x1d\r\xcdT\xfa\xe0Z\a\x13\x9fUa\xc5\xe0\xdd\xfa\xaaO\xa4\xf3\xddK\x1c9\xb8L\x83$\xd4\xbd\xc6\tW\xb3\xf6kZ\x99\xf0\xc9\xa4\xefn\x9c\x9192(\xd3Z\xfb?\xc6\xdc\x95\xb6\xbaS\xdc3`\xbe\xaf\xc8\x00d,r\xdd\xb2(\x99\xcbi5\xa3e-~\x81P_i\x87\xe8K\xb4l \xcc\x95\xf2\xb4s,C\xf4VT\x14\fd\x96\xee\xdc\xe6 \x8d\xbb\f8.:22\x1b?kV\x03\x8d\x7f\x14\\\xc4\x18\xd2o\xf5q-\xdedG\x98\'\x90\x16\x12\xc5\xae\xa5\x818\x89Qc\xf0(=)\x92}30\xebd\xaf\xda\xd1+\xb0\xfc\xa5\x8f4D\xa0\xad\xe7\xfe6\xef~\xd6(G]\xe9{\x12_\x18\x81\xad\r\xf8\xcc\x1d\xef\xba~%\xcf\x0e\x88\xe9\x140\x9e\xf5\xf7\x03\x85\xa6E:6O\x02\x8a23\xd3\xf92\xe1AJe\xc8\r\xbdyFe\xc3%\xf2\x04\xd4\xd3\x1e+\a)h\x9c\x02\xc42\fl\xbc\x02\x02\xa7\x062\xe6\xb5\x8a\xec\\\x1f\x9a\x00'/377}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='f2fs_sync_file_exit\x00', r0}, 0x10) prlimit64(r1, 0x8, &(0x7f0000000080)={0x10000, 0xffffffffffffffff}, &(0x7f00000000c0)) (async) prlimit64(r1, 0x8, &(0x7f0000000080)={0x10000, 0xffffffffffffffff}, &(0x7f00000000c0)) openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) 07:36:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xc0) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0xc0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x181001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x9, 0x6, 0x1d, 0x5, "0cf5a87c16ce452e5f4282e6cdf78de46fa5e9f5f2fa4645abd35aa6721541863a121c2990daff23bcc8e5b971659fd429cf62cb08d64b2fefb9ca7d8c29b318", "919ee1ba528b134dd7e08ddffee636b5a8df8d37dc2d5068e8b100f6215098cf", [0x6, 0x3]}) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 07:36:26 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x2, 0x4, 0x5, 0x4, '\x00', 0x4}, 0x0, [0x400, 0x1, 0x4, 0xa501, 0x1, 0x4, 0x4, 0xffffffff, 0x2, 0x7f, 0xffffffffffffffc0, 0x5b71, 0x4, 0x7, 0x1, 0x8, 0x0, 0x6, 0x2, 0x7, 0xfffffffffffffffc, 0xce, 0x1ff, 0xe270, 0x3, 0x741, 0x7, 0x1f673ab, 0x1be, 0x80, 0x3, 0x0, 0x101, 0x1, 0x7, 0x4ddc, 0x4, 0x6, 0x9, 0x5, 0x13, 0x101, 0x9, 0x1, 0x9, 0x0, 0x7, 0x7, 0x3, 0x2, 0x200, 0xfffffffffffffff7, 0x8000, 0xcae, 0x3, 0x2, 0x7fffffffffffffff, 0x800, 0x8001, 0x4, 0x5, 0x8, 0x3, 0x3647, 0xa4cd, 0x80000001, 0x7, 0x80, 0x2, 0x1f, 0x2, 0x9dd, 0xe1, 0x7fff, 0x6, 0xca2, 0xffffffffffffffff, 0x781, 0x0, 0x7fffffff, 0xffffffff, 0x86, 0x69, 0x1808, 0x6, 0x6, 0x100000001, 0x8, 0x9, 0x4, 0x8001, 0xfffffffffffffffe, 0x3, 0x5, 0x6, 0x7, 0x7fff, 0x0, 0x6, 0x8, 0x1ff, 0x7, 0x3, 0x9, 0x3ff, 0x2, 0x4, 0x8, 0x7, 0xffffffffffffffff, 0x2, 0x1, 0x8000000000000000, 0x3, 0x0, 0x4, 0x7, 0x631, 0x0, 0x2, 0x8000, 0x0, 0x3f4, 0x0, 0x1, 0x100000000, 0x2, 0x8]}) 07:36:26 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x4000000) 07:36:26 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x529000, 0x0) 07:36:26 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x3c8}}}, 0x0}, 0x90) 07:36:26 executing program 2: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xc010, r0}, 0x18) 07:36:26 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x1, 0x5, 0x2270, 0x6, 'syz1\x00', 0x5}, 0x1, 0x100, 0x7b0, r1, 0xa, 0x80000000, 'syz1\x00', &(0x7f0000000000)=['}\'@-&(\'!@%&\\\x00', '$\x89\x00', '\x00', '\x00', '.[+-^\x06((%\x00', '\x13,@b\x00', '@\\$}^\x00', '\xb4\x00', '\'%\\\x00', '!!\x00'], 0x30}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{0x4, 0x2, 0x4, 0x9, 'syz0\x00', 0x7}, 0x4, 0x4, 0x20, r1, 0x3, 0x3, 'syz0\x00', &(0x7f0000000180)=['.[+-^\x06((%\x00', '}\'@-&(\'!@%&\\\x00', '^\x00'], 0x19}) 07:36:26 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x212e62) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x0, 0x3, 0xffff9ce6, 0x1ff, 'syz1\x00', 0x8}, 0x0, [0x1, 0x80000001, 0x1a66, 0xdcbd, 0x4, 0x1, 0x8, 0x3, 0x4, 0x1, 0xffffffffffffff81, 0xfffffffffffffffe, 0x3ff, 0x71a, 0x2, 0x9, 0x8001, 0xa896, 0x9, 0x9, 0x1ff, 0x7f, 0xffffffffffffffff, 0x1, 0x401, 0x8, 0x2, 0x4, 0x100000000, 0x8, 0x1f, 0x1, 0x1f, 0x0, 0xe000000000000, 0x2ff, 0x1, 0x6, 0x3ff, 0x5, 0xbede, 0xff, 0x5, 0x4, 0x2ced, 0xfff, 0x8000000000000000, 0xde, 0x9, 0xfffffffffffffffe, 0x2510, 0x8, 0x100, 0x8, 0x5, 0x10000, 0x80000001, 0x8, 0x25, 0xfffffffffffffffe, 0x81f6, 0x3, 0x5, 0xff, 0x2, 0x7, 0x4, 0x10001, 0x5, 0x4800000000, 0x1ff, 0xfffffffffffffff8, 0x10000, 0x0, 0x9, 0x5, 0x8, 0x10001, 0x7, 0x5, 0x4, 0x8000000000000000, 0x80, 0x3ff, 0x2, 0xff, 0xfffffffeffffffff, 0x0, 0x40, 0x9, 0xf9, 0x34dc, 0x1, 0x5, 0x31bf, 0x0, 0x8000000000000000, 0x17180, 0x1f, 0x4, 0x1, 0x2, 0x3, 0x20, 0x79, 0x295, 0x9, 0xbf, 0x9, 0x7ff, 0x939, 0x100000001, 0x5, 0xffffffffffffff89, 0x1082, 0x9, 0x8, 0x9, 0x5760, 0x1, 0x1, 0x1, 0x2, 0x2, 0x3f, 0xc1, 0xd5b3, 0x5]}) 07:36:26 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x529000, 0x0) 07:36:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x3e0}}}, 0x0}, 0x90) 07:36:26 executing program 3: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xc010, r0}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0xc010, r0}, 0x18) 07:36:26 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) gettid() (async) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x1, 0x5, 0x2270, 0x6, 'syz1\x00', 0x5}, 0x1, 0x100, 0x7b0, r1, 0xa, 0x80000000, 'syz1\x00', &(0x7f0000000000)=['}\'@-&(\'!@%&\\\x00', '$\x89\x00', '\x00', '\x00', '.[+-^\x06((%\x00', '\x13,@b\x00', '@\\$}^\x00', '\xb4\x00', '\'%\\\x00', '!!\x00'], 0x30}) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000001c0)={{0x4, 0x2, 0x4, 0x9, 'syz0\x00', 0x7}, 0x4, 0x4, 0x20, r1, 0x3, 0x3, 'syz0\x00', &(0x7f0000000180)=['.[+-^\x06((%\x00', '}\'@-&(\'!@%&\\\x00', '^\x00'], 0x19}) 07:36:26 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x212e62) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0x0, 0x3, 0xffff9ce6, 0x1ff, 'syz1\x00', 0x8}, 0x0, [0x1, 0x80000001, 0x1a66, 0xdcbd, 0x4, 0x1, 0x8, 0x3, 0x4, 0x1, 0xffffffffffffff81, 0xfffffffffffffffe, 0x3ff, 0x71a, 0x2, 0x9, 0x8001, 0xa896, 0x9, 0x9, 0x1ff, 0x7f, 0xffffffffffffffff, 0x1, 0x401, 0x8, 0x2, 0x4, 0x100000000, 0x8, 0x1f, 0x1, 0x1f, 0x0, 0xe000000000000, 0x2ff, 0x1, 0x6, 0x3ff, 0x5, 0xbede, 0xff, 0x5, 0x4, 0x2ced, 0xfff, 0x8000000000000000, 0xde, 0x9, 0xfffffffffffffffe, 0x2510, 0x8, 0x100, 0x8, 0x5, 0x10000, 0x80000001, 0x8, 0x25, 0xfffffffffffffffe, 0x81f6, 0x3, 0x5, 0xff, 0x2, 0x7, 0x4, 0x10001, 0x5, 0x4800000000, 0x1ff, 0xfffffffffffffff8, 0x10000, 0x0, 0x9, 0x5, 0x8, 0x10001, 0x7, 0x5, 0x4, 0x8000000000000000, 0x80, 0x3ff, 0x2, 0xff, 0xfffffffeffffffff, 0x0, 0x40, 0x9, 0xf9, 0x34dc, 0x1, 0x5, 0x31bf, 0x0, 0x8000000000000000, 0x17180, 0x1f, 0x4, 0x1, 0x2, 0x3, 0x20, 0x79, 0x295, 0x9, 0xbf, 0x9, 0x7ff, 0x939, 0x100000001, 0x5, 0xffffffffffffff89, 0x1082, 0x9, 0x8, 0x9, 0x5760, 0x1, 0x1, 0x1, 0x2, 0x2, 0x3f, 0xc1, 0xd5b3, 0x5]}) 07:36:26 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000140)='syzkaller\x00', 0x40, 0x0, &(0x7f0000000180), 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[r1, 0x1], &(0x7f0000000240)=[{0x0, 0x1, 0x9, 0x3}, {0x4, 0x4, 0x8, 0x5}, {0x2, 0x3, 0xa, 0x8}, {0x3, 0x2, 0x7, 0x4}], 0x10, 0x7}, 0x90) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x7, 0xa664}, &(0x7f0000000040)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$smackfs_logging(r0, &(0x7f0000000180), 0x14) 07:36:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x406}}}, 0x0}, 0x90) 07:36:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 07:36:27 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000440) inotify_rm_watch(r0, r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xffffffff80000000, 0x22003) 07:36:27 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read$smackfs_logging(r0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$cgroup_int(r1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xe, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}]}, &(0x7f0000000140)='syzkaller\x00', 0x40, 0x0, &(0x7f0000000180), 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[r1, 0x1], &(0x7f0000000240)=[{0x0, 0x1, 0x9, 0x3}, {0x4, 0x4, 0x8, 0x5}, {0x2, 0x3, 0xa, 0x8}, {0x3, 0x2, 0x7, 0x4}], 0x10, 0x7}, 0x90) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x7, 0xa664}, &(0x7f0000000040)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) read$smackfs_logging(r0, &(0x7f0000000180), 0x14) 07:36:27 executing program 3: syz_open_dev$sndctrl(0x0, 0x6, 0x468100) 07:36:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x604}}}, 0x0}, 0x90) 07:36:27 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) (async, rerun: 32) r1 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000440) (rerun: 32) inotify_rm_watch(r0, r1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) read$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0xffffffff80000000, 0x22003) 07:36:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 07:36:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 927.218904][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 927.223011][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 927.225692][ T5744] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 927.229551][ T5744] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 927.232972][ T5744] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 927.235025][ T5744] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 07:36:27 executing program 1: syz_open_dev$sndctrl(0x0, 0x6, 0x468100) 07:36:27 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0xfffffff7fefffffe, 0x400080) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000580)=0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0xa, 0x2, 0x4, 0x87a, 'syz0\x00', 0x1}, 0x1, [0x100000000, 0x3, 0x7, 0x4, 0xffffffffffffffff, 0x6, 0x0, 0x2, 0x81, 0xb10, 0x80, 0x58, 0xfffffffffffffffe, 0x3, 0x4, 0x4, 0x5, 0x6, 0x1000, 0x10000, 0x400, 0xfff, 0x1, 0x5, 0x3, 0xfffffffffffffe01, 0x2a7d069a, 0x3ff, 0x5, 0x0, 0x2, 0x1, 0x355, 0x1, 0x9, 0x0, 0x4, 0x2, 0xfffffffffffff001, 0x7, 0x7, 0x7ff, 0x8, 0x3, 0x731, 0x148, 0x3, 0x6, 0xf9c5, 0xffffffffffff03ab, 0x20, 0x7, 0x2, 0x1, 0x8001, 0xb3d, 0x8454, 0x0, 0x5, 0x20, 0x0, 0x26, 0xffffffffffffff01, 0x2, 0xfffffffffffffebc, 0x40, 0x3, 0x4, 0xd85, 0xffffffffffffffe1, 0x440, 0x28, 0x7, 0x698, 0x200, 0x8000000000000001, 0x3d3a, 0x7, 0xed2, 0x6, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x8, 0x50da, 0x57, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0x40, 0x8001, 0x80000000, 0x9, 0x7, 0x1, 0x5, 0x2, 0x5, 0x1, 0x9, 0x9, 0x8168b08, 0x7ff, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6, 0xd48, 0xc1e, 0x8000, 0x400, 0x5, 0x7ff, 0x200, 0x8, 0x401, 0x400, 0x5, 0x7, 0x1000, 0x4, 0x7]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 07:36:27 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 07:36:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0xc00}}}, 0x0}, 0x90) 07:36:27 executing program 3: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/214, &(0x7f0000000100)=0xd6) 07:36:27 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:36:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x1100}}}, 0x0}, 0x90) 07:36:27 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0xfffffff7fefffffe, 0x400080) (async) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000580)=0x7) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x4) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000080)={{0xa, 0x2, 0x4, 0x87a, 'syz0\x00', 0x1}, 0x1, [0x100000000, 0x3, 0x7, 0x4, 0xffffffffffffffff, 0x6, 0x0, 0x2, 0x81, 0xb10, 0x80, 0x58, 0xfffffffffffffffe, 0x3, 0x4, 0x4, 0x5, 0x6, 0x1000, 0x10000, 0x400, 0xfff, 0x1, 0x5, 0x3, 0xfffffffffffffe01, 0x2a7d069a, 0x3ff, 0x5, 0x0, 0x2, 0x1, 0x355, 0x1, 0x9, 0x0, 0x4, 0x2, 0xfffffffffffff001, 0x7, 0x7, 0x7ff, 0x8, 0x3, 0x731, 0x148, 0x3, 0x6, 0xf9c5, 0xffffffffffff03ab, 0x20, 0x7, 0x2, 0x1, 0x8001, 0xb3d, 0x8454, 0x0, 0x5, 0x20, 0x0, 0x26, 0xffffffffffffff01, 0x2, 0xfffffffffffffebc, 0x40, 0x3, 0x4, 0xd85, 0xffffffffffffffe1, 0x440, 0x28, 0x7, 0x698, 0x200, 0x8000000000000001, 0x3d3a, 0x7, 0xed2, 0x6, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x8, 0x50da, 0x57, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0x40, 0x8001, 0x80000000, 0x9, 0x7, 0x1, 0x5, 0x2, 0x5, 0x1, 0x9, 0x9, 0x8168b08, 0x7ff, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x6, 0xd48, 0xc1e, 0x8000, 0x400, 0x5, 0x7ff, 0x200, 0x8, 0x401, 0x400, 0x5, 0x7, 0x1000, 0x4, 0x7]}) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) 07:36:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:27 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 07:36:27 executing program 1: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffff) (async, rerun: 64) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 64) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/214, &(0x7f0000000100)=0xd6) 07:36:27 executing program 2: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) syz_open_dev$sndctrl(0x0, 0x40000003ff, 0x40000) 07:36:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x1500}}}, 0x0}, 0x90) 07:36:27 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/84, &(0x7f0000000080)=0x54) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000140)={{0x7, 0x0, 0xfffffffa, 0x10000, '\x00', 0x7ff}, 0x3, 0x100, 0x4, r2, 0x3, 0x20, 'syz1\x00', &(0x7f0000000100)=['*!.$@\x00', ']\x00', '.%\x00'], 0xb}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0xffffff09) 07:36:27 executing program 3: ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(0x0, 0x40000003ff, 0x40000) 07:36:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x2000}}}, 0x0}, 0x90) 07:36:27 executing program 2: delete_module(&(0x7f0000000000)='\\#\x00', 0x200) r0 = socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000040), 0x8) 07:36:27 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/84, &(0x7f0000000080)=0x54) (async) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000140)={{0x7, 0x0, 0xfffffffa, 0x10000, '\x00', 0x7ff}, 0x3, 0x100, 0x4, r2, 0x3, 0x20, 'syz1\x00', &(0x7f0000000100)=['*!.$@\x00', ']\x00', '.%\x00'], 0xb}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f00000000c0)=0xffffff09) 07:36:27 executing program 1: getitimer(0x2, &(0x7f0000000000)) getitimer(0x1, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x2200}}}, 0x0}, 0x90) 07:36:27 executing program 1: syz_open_dev$sndctrl(0x0, 0xa53, 0x0) 07:36:27 executing program 3: getitimer(0x2, &(0x7f0000000000)) (async) getitimer(0x1, &(0x7f0000000040)) (async, rerun: 64) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (rerun: 64) 07:36:27 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x3902}}}, 0x0}, 0x90) 07:36:27 executing program 3: syz_open_dev$sndctrl(0x0, 0xa53, 0x0) [ 927.662628][ T600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:36:27 executing program 0: syz_open_dev$sndctrl(0x0, 0x8, 0x0) 07:36:27 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 07:36:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x4000}}}, 0x0}, 0x90) [ 927.754710][ T600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:36:27 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x301800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:27 executing program 1: syz_open_dev$sndctrl(0x0, 0x8, 0x0) 07:36:27 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x0, 0x0, 0x98}) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 07:36:27 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x8, 0x7c3100) r1 = getpid() prlimit64(r1, 0x0, &(0x7f0000000140)={0x7}, 0x0) prlimit64(r1, 0x4, &(0x7f0000000180)={0x3, 0x8001}, &(0x7f00000001c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x5, 0x0, 0x9, 0x9d, 'syz1\x00', 0x2}, 0x4, 0x400, 0x1ff, r1, 0x7, 0xfe000000, 'syz1\x00', &(0x7f0000000000)=['-.*/.{]\'}]#\x00', '\x00', '\x00', '#+&${\x00', '\x00', '*#{}.]./]}\\\\6[\x00', '*\x00'], 0x26}) 07:36:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x4902}}}, 0x0}, 0x90) 07:36:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x301800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x301800) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) [ 927.900484][ T600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:36:27 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) 07:36:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x5501}}}, 0x0}, 0x90) 07:36:27 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x8, 0x7c3100) r1 = getpid() prlimit64(r1, 0x0, &(0x7f0000000140)={0x7}, 0x0) (async) prlimit64(r1, 0x4, &(0x7f0000000180)={0x3, 0x8001}, &(0x7f00000001c0)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000040)={{0x5, 0x0, 0x9, 0x9d, 'syz1\x00', 0x2}, 0x4, 0x400, 0x1ff, r1, 0x7, 0xfe000000, 'syz1\x00', &(0x7f0000000000)=['-.*/.{]\'}]#\x00', '\x00', '\x00', '#+&${\x00', '\x00', '*#{}.]./]}\\\\6[\x00', '*\x00'], 0x26}) 07:36:27 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) [ 928.003029][ T600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:36:28 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$capi20(r0, &(0x7f0000000000)={0x10, 0xffe0, 0x1, 0x82, 0x4, 0x7}, 0x10) 07:36:28 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x2, 0x0, 0x3f, 0x8000, 'syz0\x00', 0x7fffffff}, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 'syz0\x00', &(0x7f0000000000)=['-:\x00', '\x81].\'\\:@@\x00'], 0xc}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000200)={{0x6, 0x0, 0x20, 0x3ff, '\x00', 0x9}, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x1, 0x47b2, 'syz1\x00', &(0x7f00000001c0)=['\x92-(\\\x00'], 0x5}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x2) 07:36:28 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x105400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x1, 0x9, 0xfffffffd, 'syz1\x00', 0x3}, 0x0, [0x6, 0x6, 0x4, 0x3, 0x3, 0x9, 0x100, 0x1, 0x59, 0x7fffffff, 0x1, 0x200, 0x8, 0x8000000000000000, 0x8, 0x8, 0x354, 0x800, 0x7, 0x10000, 0xb900, 0x2, 0x7, 0x200, 0x9, 0x1, 0xfffffffffffffffd, 0x5, 0x6, 0x200, 0xd4b, 0x6, 0xa57, 0x0, 0x3, 0x0, 0x6, 0x7, 0xfffffffffffffff8, 0x2, 0xb9, 0x6, 0x7, 0x8f, 0x8, 0xfffffffffffffffd, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x9, 0x1000, 0xffffffff80000001, 0x0, 0x8000, 0x7, 0xfffffffffffffff9, 0xfff, 0x7f, 0x1000, 0x40000000000, 0x1943, 0xb24a, 0x7fffffffffffffff, 0x40, 0x7, 0x7, 0x3, 0x400, 0x80000000, 0x1, 0x6, 0xd085, 0x0, 0x7f, 0x8, 0x401, 0x3, 0x9, 0xfffffffffffffff8, 0x82e, 0x8000000000000001, 0x81, 0x7, 0x7, 0x0, 0xe9, 0x8000000000000000, 0x1, 0x4, 0x462, 0x81, 0x4, 0x800, 0x1, 0x7fff, 0x9, 0x5, 0x1, 0x3, 0xfffffffffffffc01, 0xffffffff, 0xe00000000000000, 0x80000000, 0x8, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x5, 0x2, 0xffff, 0x30000000, 0xe8a7, 0x401, 0x1000, 0x227, 0xfff, 0x8, 0x1, 0x20, 0x6, 0x1f, 0x8001, 0xffffffff, 0x3, 0x3, 0x0, 0x800, 0x101]}) [ 928.075109][T10112] chnl_net:caif_netlink_parms(): no params data found 07:36:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x7d00}}}, 0x0}, 0x90) 07:36:28 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x2, 0x0, 0x3f, 0x8000, 'syz0\x00', 0x7fffffff}, 0x2, 0x100, 0x3, 0x0, 0x2, 0x80000001, 'syz0\x00', &(0x7f0000000000)=['-:\x00', '\x81].\'\\:@@\x00'], 0xc}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000200)={{0x6, 0x0, 0x20, 0x3ff, '\x00', 0x9}, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x1, 0x47b2, 'syz1\x00', &(0x7f00000001c0)=['\x92-(\\\x00'], 0x5}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x2) 07:36:28 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x105400) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x1, 0x9, 0xfffffffd, 'syz1\x00', 0x3}, 0x0, [0x6, 0x6, 0x4, 0x3, 0x3, 0x9, 0x100, 0x1, 0x59, 0x7fffffff, 0x1, 0x200, 0x8, 0x8000000000000000, 0x8, 0x8, 0x354, 0x800, 0x7, 0x10000, 0xb900, 0x2, 0x7, 0x200, 0x9, 0x1, 0xfffffffffffffffd, 0x5, 0x6, 0x200, 0xd4b, 0x6, 0xa57, 0x0, 0x3, 0x0, 0x6, 0x7, 0xfffffffffffffff8, 0x2, 0xb9, 0x6, 0x7, 0x8f, 0x8, 0xfffffffffffffffd, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x9, 0x1000, 0xffffffff80000001, 0x0, 0x8000, 0x7, 0xfffffffffffffff9, 0xfff, 0x7f, 0x1000, 0x40000000000, 0x1943, 0xb24a, 0x7fffffffffffffff, 0x40, 0x7, 0x7, 0x3, 0x400, 0x80000000, 0x1, 0x6, 0xd085, 0x0, 0x7f, 0x8, 0x401, 0x3, 0x9, 0xfffffffffffffff8, 0x82e, 0x8000000000000001, 0x81, 0x7, 0x7, 0x0, 0xe9, 0x8000000000000000, 0x1, 0x4, 0x462, 0x81, 0x4, 0x800, 0x1, 0x7fff, 0x9, 0x5, 0x1, 0x3, 0xfffffffffffffc01, 0xffffffff, 0xe00000000000000, 0x80000000, 0x8, 0xffffffffffffffff, 0x1, 0xfffffffffffffffd, 0x5, 0x2, 0xffff, 0x30000000, 0xe8a7, 0x401, 0x1000, 0x227, 0xfff, 0x8, 0x1, 0x20, 0x6, 0x1f, 0x8001, 0xffffffff, 0x3, 0x3, 0x0, 0x800, 0x101]}) 07:36:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$capi20(r0, &(0x7f0000000000)={0x10, 0xffe0, 0x1, 0x82, 0x4, 0x7}, 0x10) [ 928.161859][ T5744] Bluetooth: hci4: command 0x0405 tx timeout 07:36:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0xc803}}}, 0x0}, 0x90) 07:36:28 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x4, 0xc, [0x9, 0x81, 0x7]}) 07:36:28 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000480)={{0x2, 0x6, 0x5, 0xfffffff7, '\x00', 0x2}, 0x1, [0x1, 0x1, 0xae0, 0xe00000000000, 0x988b, 0x7fffffff, 0x2, 0x247, 0x7, 0x101, 0x306d87a, 0x29ad, 0x1f, 0x8, 0x6, 0x9a1, 0xa8, 0x4, 0x80, 0x2, 0x7, 0x3, 0xfffffffffffff001, 0x8, 0x9a0, 0x1f, 0x4, 0x9, 0xffffffffffffffff, 0x1, 0xa4e, 0x45, 0x8, 0x5, 0x7, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0xe103, 0x3ce37998, 0x3, 0x7fff, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffffffffffffff00, 0xfff, 0x7, 0x5, 0x8, 0xff, 0x6, 0x4, 0x0, 0x9, 0x2, 0x6, 0x7fff, 0x8, 0xacb, 0x5, 0xfff, 0x4e7a, 0x7, 0xfffffffffffffffb, 0x1, 0x101, 0x3f, 0x4, 0x2, 0x8, 0x80, 0x80000, 0xdf6, 0x401, 0x5, 0x4, 0x4e47e6ef, 0x7fc, 0x40, 0x5, 0x3, 0x3, 0xf710000000, 0x0, 0x4, 0x26, 0x100000001, 0x4, 0x8, 0x3ff, 0x8, 0x7, 0x4, 0x800, 0x100000001, 0x4, 0x81, 0x9, 0xffff, 0xfffffffffffffffb, 0x81, 0x6, 0x8, 0x200, 0xa8, 0x5, 0x3, 0x2, 0x7, 0x8000000000000000, 0x4, 0x7fffffffffffffff, 0x351a, 0x4, 0xfffffffffffff001, 0x0, 0xa, 0x6, 0x3, 0x5, 0x4, 0x7fffffffffffffff, 0x5, 0x8]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x1267, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 07:36:28 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x4, 0xc, [0x9, 0x81, 0x7]}) [ 928.269665][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.271410][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.286656][T10112] bridge_slave_0: entered allmulticast mode [ 928.288968][T10112] bridge_slave_0: entered promiscuous mode [ 928.302961][ T28] kauditd_printk_skb: 61620 callbacks suppressed [ 928.302972][ T28] audit: type=1400 audit(5470588.280:1934071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5786 comm="udevd" name="/" dev="tmpfs" ino=1 [ 928.304172][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.306165][ T28] audit: type=1400 audit(5470588.280:1934072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5786 comm="udevd" name="udev" dev="tmpfs" ino=7 [ 928.310092][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.310587][ T28] audit: type=1400 audit(5470588.280:1934073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=5786 comm="udevd" name="queue" dev="tmpfs" ino=25926 [ 928.318937][T10112] bridge_slave_1: entered allmulticast mode [ 928.324953][ T9880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 928.326290][T10112] bridge_slave_1: entered promiscuous mode [ 928.326657][ T9880] audit: audit_lost=491162 audit_rate_limit=0 audit_backlog_limit=64 [ 928.330227][ T9880] audit: backlog limit exceeded [ 928.331456][ T9880] audit: audit_backlog=65 > audit_backlog_limit=64 [ 928.332105][ T5786] audit: audit_backlog=65 > audit_backlog_limit=64 [ 928.335238][ T5786] audit: audit_lost=491163 audit_rate_limit=0 audit_backlog_limit=64 [ 928.335493][ T9865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 928.359055][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.369327][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.391963][T10112] team0: Port device team_slave_0 added [ 928.395348][T10112] team0: Port device team_slave_1 added [ 928.415081][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.416857][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.423526][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.427371][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.429100][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.436111][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 07:36:28 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440), 0x648302, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000480)={{0x2, 0x6, 0x5, 0xfffffff7, '\x00', 0x2}, 0x1, [0x1, 0x1, 0xae0, 0xe00000000000, 0x988b, 0x7fffffff, 0x2, 0x247, 0x7, 0x101, 0x306d87a, 0x29ad, 0x1f, 0x8, 0x6, 0x9a1, 0xa8, 0x4, 0x80, 0x2, 0x7, 0x3, 0xfffffffffffff001, 0x8, 0x9a0, 0x1f, 0x4, 0x9, 0xffffffffffffffff, 0x1, 0xa4e, 0x45, 0x8, 0x5, 0x7, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0xe103, 0x3ce37998, 0x3, 0x7fff, 0x7, 0x3, 0x5, 0x7, 0x2, 0xffffffffffffff00, 0xfff, 0x7, 0x5, 0x8, 0xff, 0x6, 0x4, 0x0, 0x9, 0x2, 0x6, 0x7fff, 0x8, 0xacb, 0x5, 0xfff, 0x4e7a, 0x7, 0xfffffffffffffffb, 0x1, 0x101, 0x3f, 0x4, 0x2, 0x8, 0x80, 0x80000, 0xdf6, 0x401, 0x5, 0x4, 0x4e47e6ef, 0x7fc, 0x40, 0x5, 0x3, 0x3, 0xf710000000, 0x0, 0x4, 0x26, 0x100000001, 0x4, 0x8, 0x3ff, 0x8, 0x7, 0x4, 0x800, 0x100000001, 0x4, 0x81, 0x9, 0xffff, 0xfffffffffffffffb, 0x81, 0x6, 0x8, 0x200, 0xa8, 0x5, 0x3, 0x2, 0x7, 0x8000000000000000, 0x4, 0x7fffffffffffffff, 0x351a, 0x4, 0xfffffffffffff001, 0x0, 0xa, 0x6, 0x3, 0x5, 0x4, 0x7fffffffffffffff, 0x5, 0x8]}) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x1267, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 07:36:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x80086601, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x5, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @local]}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x5ad445, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1, 0x12) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) 07:36:28 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="df010000f3c50000"]) 07:36:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0xe003}}}, 0x0}, 0x90) 07:36:28 executing program 1: delete_module(&(0x7f0000000000)='\\#\x00', 0x200) r0 = socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000040), 0x8) delete_module(&(0x7f0000000000)='\\#\x00', 0x200) (async) socket$phonet(0x23, 0x2, 0x1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r1, 0x0, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000040), 0x8) (async) 07:36:28 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x80086601, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x5, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @local]}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x5ad445, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x1, 0x12) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x80086601, 0x0) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x5, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @local]}) (async) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x5ad445, 0x0) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) openat$cgroup_int(r1, &(0x7f0000000080)='memory.swap.high\x00', 0x2, 0x0) (async) write$cgroup_int(r2, &(0x7f00000000c0)=0x1, 0x12) (async) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) (async) [ 928.503289][T10112] hsr_slave_0: entered promiscuous mode 07:36:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:28 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="df010000f3c50000"]) [ 928.542881][T10112] hsr_slave_1: entered promiscuous mode 07:36:28 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x2, 0x100, 'syz1\x00', 0x8}, 0x1, [0x80000001, 0x5d, 0x6, 0x2, 0xde8, 0x994, 0xfd7, 0x1980, 0x0, 0x3, 0x84, 0xffff, 0x1, 0x7fffffff, 0x6, 0x3, 0x79e, 0x0, 0xffffffffffffffff, 0xfffffffffffffbad, 0x7f, 0xfffffffffffffffc, 0x400, 0x8000000000000001, 0xf69, 0x1, 0x1, 0x6, 0x3, 0x3ff, 0xfff, 0xffffffffffff4485, 0x1, 0x9, 0x465, 0x3, 0x9000000, 0x3, 0x6, 0x0, 0x7, 0x1, 0x3, 0x8000000000000000, 0xffffffff, 0x17f, 0x7f, 0xfffffffffffffc00, 0x2, 0x8, 0x4, 0x1f, 0xff, 0x7f, 0xc06d, 0x5, 0x0, 0xfd83, 0x7, 0xfffffffffffffff7, 0x1, 0x8001, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffff332, 0x9, 0x7, 0x7275, 0x3, 0x10001, 0x3, 0x8000, 0xffffffff00000000, 0x8, 0x5, 0xf7, 0x0, 0xfffffffffffffff8, 0x2242, 0x7fffffffffffffff, 0x3, 0x6, 0x100000000, 0x2, 0x6, 0x1, 0x200, 0x80000001, 0x2, 0x7, 0x6, 0x1000, 0x40, 0x4, 0x766e, 0x40, 0xfff, 0x8000000000000000, 0x10000, 0x5, 0x80, 0x31c, 0xfffffffffffffff7, 0x934d, 0x9, 0x5, 0x4, 0xffff, 0x400, 0x9, 0x7000000000000000, 0x1, 0x61, 0xfff, 0x1800000000000, 0xcc72, 0x520e, 0x2, 0x2, 0x0, 0x3, 0x8, 0xfffffffffffffdbd, 0xffffffffffffffff, 0x2, 0x7]}) 07:36:28 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x141583, 0x0) read$smackfs_logging(r0, &(0x7f0000000000), 0x14) 07:36:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:28 executing program 2: syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x2, 0x100, 'syz1\x00', 0x8}, 0x1, [0x80000001, 0x5d, 0x6, 0x2, 0xde8, 0x994, 0xfd7, 0x1980, 0x0, 0x3, 0x84, 0xffff, 0x1, 0x7fffffff, 0x6, 0x3, 0x79e, 0x0, 0xffffffffffffffff, 0xfffffffffffffbad, 0x7f, 0xfffffffffffffffc, 0x400, 0x8000000000000001, 0xf69, 0x1, 0x1, 0x6, 0x3, 0x3ff, 0xfff, 0xffffffffffff4485, 0x1, 0x9, 0x465, 0x3, 0x9000000, 0x3, 0x6, 0x0, 0x7, 0x1, 0x3, 0x8000000000000000, 0xffffffff, 0x17f, 0x7f, 0xfffffffffffffc00, 0x2, 0x8, 0x4, 0x1f, 0xff, 0x7f, 0xc06d, 0x5, 0x0, 0xfd83, 0x7, 0xfffffffffffffff7, 0x1, 0x8001, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffff332, 0x9, 0x7, 0x7275, 0x3, 0x10001, 0x3, 0x8000, 0xffffffff00000000, 0x8, 0x5, 0xf7, 0x0, 0xfffffffffffffff8, 0x2242, 0x7fffffffffffffff, 0x3, 0x6, 0x100000000, 0x2, 0x6, 0x1, 0x200, 0x80000001, 0x2, 0x7, 0x6, 0x1000, 0x40, 0x4, 0x766e, 0x40, 0xfff, 0x8000000000000000, 0x10000, 0x5, 0x80, 0x31c, 0xfffffffffffffff7, 0x934d, 0x9, 0x5, 0x4, 0xffff, 0x400, 0x9, 0x7000000000000000, 0x1, 0x61, 0xfff, 0x1800000000000, 0xcc72, 0x520e, 0x2, 0x2, 0x0, 0x3, 0x8, 0xfffffffffffffdbd, 0xffffffffffffffff, 0x2, 0x7]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x2, 0x100, 'syz1\x00', 0x8}, 0x1, [0x80000001, 0x5d, 0x6, 0x2, 0xde8, 0x994, 0xfd7, 0x1980, 0x0, 0x3, 0x84, 0xffff, 0x1, 0x7fffffff, 0x6, 0x3, 0x79e, 0x0, 0xffffffffffffffff, 0xfffffffffffffbad, 0x7f, 0xfffffffffffffffc, 0x400, 0x8000000000000001, 0xf69, 0x1, 0x1, 0x6, 0x3, 0x3ff, 0xfff, 0xffffffffffff4485, 0x1, 0x9, 0x465, 0x3, 0x9000000, 0x3, 0x6, 0x0, 0x7, 0x1, 0x3, 0x8000000000000000, 0xffffffff, 0x17f, 0x7f, 0xfffffffffffffc00, 0x2, 0x8, 0x4, 0x1f, 0xff, 0x7f, 0xc06d, 0x5, 0x0, 0xfd83, 0x7, 0xfffffffffffffff7, 0x1, 0x8001, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0xfffffffffffff332, 0x9, 0x7, 0x7275, 0x3, 0x10001, 0x3, 0x8000, 0xffffffff00000000, 0x8, 0x5, 0xf7, 0x0, 0xfffffffffffffff8, 0x2242, 0x7fffffffffffffff, 0x3, 0x6, 0x100000000, 0x2, 0x6, 0x1, 0x200, 0x80000001, 0x2, 0x7, 0x6, 0x1000, 0x40, 0x4, 0x766e, 0x40, 0xfff, 0x8000000000000000, 0x10000, 0x5, 0x80, 0x31c, 0xfffffffffffffff7, 0x934d, 0x9, 0x5, 0x4, 0xffff, 0x400, 0x9, 0x7000000000000000, 0x1, 0x61, 0xfff, 0x1800000000000, 0xcc72, 0x520e, 0x2, 0x2, 0x0, 0x3, 0x8, 0xfffffffffffffdbd, 0xffffffffffffffff, 0x2, 0x7]}) (async) 07:36:28 executing program 0: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'lo\x00'}) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x10}) 07:36:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x3}}}, 0x0}, 0x90) 07:36:28 executing program 2: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'lo\x00'}) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x10}) 07:36:28 executing program 3: syz_open_dev$sndctrl(0x0, 0x9, 0x0) 07:36:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x141583, 0x0) read$smackfs_logging(r0, &(0x7f0000000000), 0x14) 07:36:28 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0xffffffff, 0x8000, 0xcc39}) 07:36:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:28 executing program 2: syz_open_dev$sndctrl(0x0, 0x9, 0x0) 07:36:28 executing program 1: syz_open_dev$sndctrl(0x0, 0x9, 0x0) syz_open_dev$sndctrl(0x0, 0x9, 0x0) (async) 07:36:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:28 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0xffffffff, 0x8000, 0xcc39}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) (async) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0xffffffff, 0x8000, 0xcc39}) (async) 07:36:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:28 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x4, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x0, 0x1, 0xfff, 0x8717, '\x00', 0x6}, 0x1, [0xf9d, 0x6, 0x0, 0xfffffffffffff23f, 0x6, 0x7f, 0x628, 0x9, 0x7ff, 0x2, 0x6, 0x7ff, 0x0, 0x1, 0x0, 0x2, 0x5, 0x1, 0x100, 0x4, 0x4, 0x7, 0x8480, 0x3, 0x3, 0x4, 0xffff, 0x200, 0x657, 0x4, 0xff, 0xffffffffffffffbd, 0x5e, 0xfffffffffffffffe, 0x86db, 0x4, 0x0, 0xfc, 0x330d, 0x5, 0x8, 0x2, 0x81, 0x0, 0x1000, 0x2, 0x8000, 0x0, 0x2, 0x3d0000, 0x0, 0xfffffffffffffffa, 0x518, 0x80, 0x2, 0x3, 0x29, 0x4, 0x80000000, 0x20, 0x7, 0x8, 0x6cec, 0x10001, 0x9, 0x0, 0x9, 0xfdb, 0x80, 0x1, 0x7fff, 0x2, 0x5, 0x7f2, 0x0, 0x3ff, 0x2, 0x8, 0x5c, 0x9, 0x8, 0xaacd, 0xffffffffffffffff, 0x7662769e, 0x100, 0xff, 0x80000001, 0x8001, 0x9d, 0x7, 0xfffffffffffeffff, 0xffff, 0xbaf8, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0x0, 0x1, 0x4, 0x9, 0x9, 0x8, 0x1000, 0x8, 0x8f7, 0x2, 0x5, 0x7, 0x2, 0x8, 0x0, 0x3, 0x7, 0x2, 0x4, 0x5, 0x68a0, 0x0, 0x2, 0x8, 0x400000000000, 0x9, 0x132, 0x9d1f, 0x94, 0x5, 0x7]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180)='/proc/capi/capi20ncci\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x3, 0x26, 0x9, 'syz0\x00', 0x7}, 0x5, 0x20, 0x8001, r1, 0x1, 0x9, 'syz0\x00', &(0x7f0000000000)=[']Q,/\x00'], 0x5}) 07:36:28 executing program 0: syz_open_dev$sndctrl(0x0, 0x9, 0x0) 07:36:28 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a66879ea14b64860"}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 07:36:28 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) r1 = gettid() (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x4, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000280)={{0x0, 0x1, 0xfff, 0x8717, '\x00', 0x6}, 0x1, [0xf9d, 0x6, 0x0, 0xfffffffffffff23f, 0x6, 0x7f, 0x628, 0x9, 0x7ff, 0x2, 0x6, 0x7ff, 0x0, 0x1, 0x0, 0x2, 0x5, 0x1, 0x100, 0x4, 0x4, 0x7, 0x8480, 0x3, 0x3, 0x4, 0xffff, 0x200, 0x657, 0x4, 0xff, 0xffffffffffffffbd, 0x5e, 0xfffffffffffffffe, 0x86db, 0x4, 0x0, 0xfc, 0x330d, 0x5, 0x8, 0x2, 0x81, 0x0, 0x1000, 0x2, 0x8000, 0x0, 0x2, 0x3d0000, 0x0, 0xfffffffffffffffa, 0x518, 0x80, 0x2, 0x3, 0x29, 0x4, 0x80000000, 0x20, 0x7, 0x8, 0x6cec, 0x10001, 0x9, 0x0, 0x9, 0xfdb, 0x80, 0x1, 0x7fff, 0x2, 0x5, 0x7f2, 0x0, 0x3ff, 0x2, 0x8, 0x5c, 0x9, 0x8, 0xaacd, 0xffffffffffffffff, 0x7662769e, 0x100, 0xff, 0x80000001, 0x8001, 0x9d, 0x7, 0xfffffffffffeffff, 0xffff, 0xbaf8, 0x8000000000000000, 0x0, 0x8000000000000000, 0x4, 0x0, 0x1, 0x4, 0x9, 0x9, 0x8, 0x1000, 0x8, 0x8f7, 0x2, 0x5, 0x7, 0x2, 0x8, 0x0, 0x3, 0x7, 0x2, 0x4, 0x5, 0x68a0, 0x0, 0x2, 0x8, 0x400000000000, 0x9, 0x132, 0x9d1f, 0x94, 0x5, 0x7]}) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180)='/proc/capi/capi20ncci\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x0, 0x3, 0x26, 0x9, 'syz0\x00', 0x7}, 0x5, 0x20, 0x8001, r1, 0x1, 0x9, 'syz0\x00', &(0x7f0000000000)=[']Q,/\x00'], 0x5}) 07:36:29 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x420200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x20, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x163700, 0x0) r2 = getpid() ptrace$setsig(0x4203, r2, 0x3f, &(0x7f0000000080)={0x3e, 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'veth0_macvtap\x00'}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tun(r4, 0x0, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x304) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r1}, 0x30) 07:36:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:29 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000540)=0x8) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) r2 = gettid() r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='sctp_probe_path\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r2, r4, 0x0, 0x5, &(0x7f0000000700)='syz0\x00'}, 0x30) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000071400042cbd7000fedbdf2508004400", @ANYRES32=r1, @ANYBLOB="0800010093feb3f3080001000100000005007dbc008f1b00"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x801c581f, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000500)=0x1000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x7, 0x6, 0x9, 0x5, 'syz0\x00', 0x8000}, 0x1, [0x41, 0xffff, 0x1ff, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x5, 0x80, 0x7, 0x0, 0x7fff, 0x1, 0x10001, 0x6, 0xfff, 0x6, 0xb1c, 0x7, 0x4, 0x6, 0x100, 0x6, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x1, 0x8, 0x8000000000000001, 0xb8d0, 0x8000000ffffffff, 0x3, 0x43f, 0x28a, 0x9, 0x8001, 0x8, 0x4, 0x7fffffff, 0x33e4, 0x8, 0x80000000, 0x8000000000000000, 0x100000000, 0x492c, 0x5, 0x2, 0x4, 0x3, 0x2, 0x7fff, 0x5, 0xffffffffffffffff, 0xda3, 0x54e, 0x8, 0xfffffffffffff6db, 0x10001, 0x9, 0x5, 0x183, 0x4, 0x0, 0xffff, 0x401, 0x1ff, 0x9, 0x8000, 0x7fff, 0x4, 0x7, 0x7, 0x8000000000000001, 0xbbc3, 0x7, 0x81, 0x100000001, 0x7ff, 0x8, 0x8, 0x57, 0x8000, 0x800000008, 0x7, 0x8, 0x3, 0x5, 0x2, 0x2, 0xfffffffffffffeff, 0x6f, 0x400, 0x3, 0x2, 0x8001, 0xfffffffffffff89a, 0x25d, 0x0, 0xfffffffffffff800, 0xff, 0x6, 0x9, 0x1, 0x3, 0x0, 0x80000000, 0x100000000, 0x84e, 0x5, 0x2, 0x0, 0x6d37, 0x8000, 0x7, 0x4, 0x4, 0x8, 0x3, 0x1, 0x10001, 0x7fffffffffffffff, 0x400, 0x4, 0x7fffffff, 0x3f, 0xffffffff, 0x8]}) 07:36:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "a66879ea14b64860"}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 07:36:29 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x420200, 0x0) (async) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x420200, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x20, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x163700, 0x0) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x163700, 0x0) r2 = getpid() ptrace$setsig(0x4203, r2, 0x3f, &(0x7f0000000080)={0x3e, 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'veth0_macvtap\x00'}) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tun(r4, 0x0, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x304) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r1}, 0x30) 07:36:29 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000540)=0x8) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) r2 = gettid() r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r3, 0x0, 0x0, 0x0}, 0x30) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='sctp_probe_path\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r2, r4, 0x0, 0x5, &(0x7f0000000700)='syz0\x00'}, 0x30) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000071400042cbd7000fedbdf2508004400", @ANYRES32=r1, @ANYBLOB="0800010093feb3f3080001000100000005007dbc008f1b00"], 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x801c581f, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000500)=0x1000) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x7, 0x6, 0x9, 0x5, 'syz0\x00', 0x8000}, 0x1, [0x41, 0xffff, 0x1ff, 0x5, 0x8, 0xfffffffffffffffd, 0x6, 0x5, 0x80, 0x7, 0x0, 0x7fff, 0x1, 0x10001, 0x6, 0xfff, 0x6, 0xb1c, 0x7, 0x4, 0x6, 0x100, 0x6, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x1, 0x8, 0x8000000000000001, 0xb8d0, 0x8000000ffffffff, 0x3, 0x43f, 0x28a, 0x9, 0x8001, 0x8, 0x4, 0x7fffffff, 0x33e4, 0x8, 0x80000000, 0x8000000000000000, 0x100000000, 0x492c, 0x5, 0x2, 0x4, 0x3, 0x2, 0x7fff, 0x5, 0xffffffffffffffff, 0xda3, 0x54e, 0x8, 0xfffffffffffff6db, 0x10001, 0x9, 0x5, 0x183, 0x4, 0x0, 0xffff, 0x401, 0x1ff, 0x9, 0x8000, 0x7fff, 0x4, 0x7, 0x7, 0x8000000000000001, 0xbbc3, 0x7, 0x81, 0x100000001, 0x7ff, 0x8, 0x8, 0x57, 0x8000, 0x800000008, 0x7, 0x8, 0x3, 0x5, 0x2, 0x2, 0xfffffffffffffeff, 0x6f, 0x400, 0x3, 0x2, 0x8001, 0xfffffffffffff89a, 0x25d, 0x0, 0xfffffffffffff800, 0xff, 0x6, 0x9, 0x1, 0x3, 0x0, 0x80000000, 0x100000000, 0x84e, 0x5, 0x2, 0x0, 0x6d37, 0x8000, 0x7, 0x4, 0x4, 0x8, 0x3, 0x1, 0x10001, 0x7fffffffffffffff, 0x400, 0x4, 0x7fffffff, 0x3f, 0xffffffff, 0x8]}) 07:36:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x15}}}, 0x0}, 0x90) 07:36:29 executing program 2: ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7f, 0x1, 0x80, 0x10001}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28002, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7ff, 0xe0, 0x3f, 0x7}]}) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x8, 0x7f, 0x90, 0x3ff}, {0x0, 0x51, 0x0, 0x6}, {0x0, 0xfe, 0x2, 0x800}, {0x0, 0x20, 0x1, 0x7}, {0xd4b, 0xa4, 0x40, 0x80000001}, {0x3, 0x40, 0x1f, 0xc85}, {0x3, 0x73, 0x0, 0x2}, {0x7ff, 0x2, 0x5, 0xbb9}]}) 07:36:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) [ 929.281863][ T5744] Bluetooth: hci0: command 0x0409 tx timeout 07:36:29 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x7fff, 0x7fffffff, 0x1}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:29 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x22}}}, 0x0}, 0x90) 07:36:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:29 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000540)) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000000)={{0xa, 0x6, 0x3f, 0x6, 'syz0\x00', 0x6}, 0x1, [0x100, 0x9, 0x7, 0x6, 0x400, 0x7fffffffffffffff, 0x4, 0x1f, 0x1, 0x10001, 0x1bc, 0x81, 0xfffffffffffffffe, 0x1, 0x6, 0x80000000, 0x4, 0x0, 0xffffffff, 0x40, 0x1000, 0x3b91, 0xfff, 0x4, 0x8, 0x5, 0x100000000, 0x1c3e, 0x1000, 0x101, 0xffff, 0x6, 0x3aef, 0x20, 0x350000000000000, 0x5, 0x6, 0xffffffffffffff80, 0x57e, 0x8000, 0x8, 0x3, 0x3, 0x1ff, 0x2, 0x89, 0x7f, 0x4, 0x4, 0x9, 0x4, 0x0, 0x4, 0x200, 0x7fffffff, 0x5, 0xffffffffffffff80, 0x0, 0x10001, 0x9, 0x0, 0x3, 0x23, 0x3bad, 0x1, 0x4, 0x9, 0x81, 0x7, 0x6, 0x3, 0x42f, 0x0, 0xb401, 0x7, 0x2, 0x72, 0x8, 0x2, 0xffff, 0x4, 0x10000, 0x0, 0x3, 0x6, 0x7fffffffffffffff, 0x9, 0x7, 0xde, 0x3d93, 0x100000000, 0x6, 0x5, 0x8, 0x3, 0x100, 0xffff, 0x9, 0x10000, 0xf5de, 0x5, 0x9, 0xb2, 0x6b7d, 0xffffffffffffffff, 0x8001, 0xfffffffffffffffd, 0x2, 0x4, 0xffffffff, 0x100000000, 0x0, 0x9, 0x2, 0x2, 0x8, 0x7ff, 0x2, 0x8000, 0xa9b0, 0x0, 0x1, 0x4, 0xfffffffffffffffb, 0x1, 0x7, 0xffffffffffffffff, 0x1]}) 07:36:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x1, 0x0, 0x98, &(0x7f0000000040)={0x7fff, 0x7fffffff, 0x1}}) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) [ 929.423966][T10112] netdevsim netdevsim4 netdevsim0: renamed from eth0 07:36:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) [ 929.463153][T10112] netdevsim netdevsim4 netdevsim1: renamed from eth1 07:36:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x7d}}}, 0x0}, 0x90) 07:36:29 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x270, 0x14, 0x200, 0x70bd2f, 0x25dfdbfe, {0x2f, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x67, 0x1, "92f620c0e9387b370dbf27e19629ca545f724dd8f3bac6298ee80c09a22da676d0b5e12f47e46df2b44ca6f40e038b216edd0954a1e199a285bbaecf0259799f8cb8a5223e7f1eaa3415967f4b127360c14bb404aa8c8a99e69bce8ef07340ca5ff128"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "d17accc4ad9809ec442ab1c080ff3cabff99a396e34f40f2dc75bac40517"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "7b5aa3b31bc8c89deede09726cb1de0cb81820e70f15aaa7993ec6aa1e17ce7561d9551f5c4add45ed612b73c56b9f46248a695b9b84a04254603c969de2aa4a306f2e82ad485c4f8192b8c636866ed69e2f029d5acebc31b9638eb5b52e3d49ed424f4b1137c6e895b36bb0399f3ba5df6d437d1fd57ea781cbb7f7fceb7680818211117111d79d25da"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "6aac5872a003988c56b9592be966d325c7aca8e80a39d3bb3b698bec9702ac09562f4a3a3a5c052dfc309c0e07982e5f89fc5e4f221e8787314ac2462b99631ac094dce230061ea53b59f15b7fe0cc87e006cab09ce494b301b47b98aaf84260457f1f39220d67bc42"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "b8939176aaf4d20dec9ec0caf32fd7c98974082bb5f3ae4d249b7ff93d4b85581ec066dc70919480a45e830e08b473a6624aab9dcbebd0b1cd96e3c3c651f680eeb42ea0b13648cf3d52843b51208030b1ac77b2874ada74d8478d8904b13baa398f8b95309c8caa2d404fdf6675743fd96f8a6d739c24761f521bbd14092170c5d4d95cf08f62cd5a5b2ab877bb15cb72bb716b58f3a7931527447d3f1d66fd6e5d79a968728e5918403f1105fb1ef20f4e8f8991f14c4162bec5da8d90c45755f2f7e6af0771d7a6c5"}]}, 0x270}, 0x1, 0x0, 0x0, 0x6c0e8884}, 0x4000041) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:29 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000540)) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000000)={{0xa, 0x6, 0x3f, 0x6, 'syz0\x00', 0x6}, 0x1, [0x100, 0x9, 0x7, 0x6, 0x400, 0x7fffffffffffffff, 0x4, 0x1f, 0x1, 0x10001, 0x1bc, 0x81, 0xfffffffffffffffe, 0x1, 0x6, 0x80000000, 0x4, 0x0, 0xffffffff, 0x40, 0x1000, 0x3b91, 0xfff, 0x4, 0x8, 0x5, 0x100000000, 0x1c3e, 0x1000, 0x101, 0xffff, 0x6, 0x3aef, 0x20, 0x350000000000000, 0x5, 0x6, 0xffffffffffffff80, 0x57e, 0x8000, 0x8, 0x3, 0x3, 0x1ff, 0x2, 0x89, 0x7f, 0x4, 0x4, 0x9, 0x4, 0x0, 0x4, 0x200, 0x7fffffff, 0x5, 0xffffffffffffff80, 0x0, 0x10001, 0x9, 0x0, 0x3, 0x23, 0x3bad, 0x1, 0x4, 0x9, 0x81, 0x7, 0x6, 0x3, 0x42f, 0x0, 0xb401, 0x7, 0x2, 0x72, 0x8, 0x2, 0xffff, 0x4, 0x10000, 0x0, 0x3, 0x6, 0x7fffffffffffffff, 0x9, 0x7, 0xde, 0x3d93, 0x100000000, 0x6, 0x5, 0x8, 0x3, 0x100, 0xffff, 0x9, 0x10000, 0xf5de, 0x5, 0x9, 0xb2, 0x6b7d, 0xffffffffffffffff, 0x8001, 0xfffffffffffffffd, 0x2, 0x4, 0xffffffff, 0x100000000, 0x0, 0x9, 0x2, 0x2, 0x8, 0x7ff, 0x2, 0x8000, 0xa9b0, 0x0, 0x1, 0x4, 0xfffffffffffffffb, 0x1, 0x7, 0xffffffffffffffff, 0x1]}) [ 929.516616][T10112] netdevsim netdevsim4 netdevsim2: renamed from eth2 07:36:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x155}}}, 0x0}, 0x90) 07:36:29 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x270, 0x14, 0x200, 0x70bd2f, 0x25dfdbfe, {0x2f, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x67, 0x1, "92f620c0e9387b370dbf27e19629ca545f724dd8f3bac6298ee80c09a22da676d0b5e12f47e46df2b44ca6f40e038b216edd0954a1e199a285bbaecf0259799f8cb8a5223e7f1eaa3415967f4b127360c14bb404aa8c8a99e69bce8ef07340ca5ff128"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "d17accc4ad9809ec442ab1c080ff3cabff99a396e34f40f2dc75bac40517"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "7b5aa3b31bc8c89deede09726cb1de0cb81820e70f15aaa7993ec6aa1e17ce7561d9551f5c4add45ed612b73c56b9f46248a695b9b84a04254603c969de2aa4a306f2e82ad485c4f8192b8c636866ed69e2f029d5acebc31b9638eb5b52e3d49ed424f4b1137c6e895b36bb0399f3ba5df6d437d1fd57ea781cbb7f7fceb7680818211117111d79d25da"}, @INET_DIAG_REQ_BYTECODE={0x6d, 0x1, "6aac5872a003988c56b9592be966d325c7aca8e80a39d3bb3b698bec9702ac09562f4a3a3a5c052dfc309c0e07982e5f89fc5e4f221e8787314ac2462b99631ac094dce230061ea53b59f15b7fe0cc87e006cab09ce494b301b47b98aaf84260457f1f39220d67bc42"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "b8939176aaf4d20dec9ec0caf32fd7c98974082bb5f3ae4d249b7ff93d4b85581ec066dc70919480a45e830e08b473a6624aab9dcbebd0b1cd96e3c3c651f680eeb42ea0b13648cf3d52843b51208030b1ac77b2874ada74d8478d8904b13baa398f8b95309c8caa2d404fdf6675743fd96f8a6d739c24761f521bbd14092170c5d4d95cf08f62cd5a5b2ab877bb15cb72bb716b58f3a7931527447d3f1d66fd6e5d79a968728e5918403f1105fb1ef20f4e8f8991f14c4162bec5da8d90c45755f2f7e6af0771d7a6c5"}]}, 0x270}, 0x1, 0x0, 0x0, 0x6c0e8884}, 0x4000041) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 1: getitimer(0x1, &(0x7f0000000000)) getitimer(0x0, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x4, 0x220000) 07:36:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200201, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) 07:36:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x239}}}, 0x0}, 0x90) 07:36:29 executing program 2: getitimer(0x1, &(0x7f0000000000)) getitimer(0x0, &(0x7f0000000040)) syz_open_dev$sndctrl(0x0, 0x4, 0x220000) getitimer(0x1, &(0x7f0000000000)) (async) getitimer(0x0, &(0x7f0000000040)) (async) syz_open_dev$sndctrl(0x0, 0x4, 0x220000) (async) 07:36:29 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 929.696837][T10112] netdevsim netdevsim4 netdevsim3: renamed from eth3 07:36:29 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200201, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200201, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) 07:36:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x249}}}, 0x0}, 0x90) 07:36:29 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000600)=""/39, &(0x7f0000000640)=0x27) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x8c880) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x2, 0x3, 0x551, 'syz0\x00', 0x10000}, 0x0, [0xfd, 0x9, 0x80000000, 0x4, 0x100000001, 0x6, 0xffff, 0x0, 0x0, 0x7f, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x7ff, 0x401, 0x2, 0x1ff, 0x1f, 0xf6c7, 0x100, 0x0, 0x80000000, 0x20, 0x100000000, 0x100, 0x43361808, 0x10000, 0x5, 0x20, 0x100, 0x5, 0x800, 0x4, 0x7c7, 0x2, 0xffffffff, 0x984a, 0x6, 0x8000000000000000, 0x4, 0x2cc6fd32, 0x8, 0xd374, 0x7, 0x6, 0x2, 0x7fffffffffffffff, 0x3d0, 0x6, 0x10, 0x3, 0x4, 0x3, 0xff, 0x6, 0x3f7c, 0x81, 0x100000000, 0x3, 0x4a6, 0x7, 0x7, 0x3, 0x6, 0x1, 0x7db0, 0x4, 0x9, 0x75322713, 0x1f, 0x2, 0xffffffffffff4d27, 0x6c03, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x5, 0x0, 0x31e, 0xffffffff00000001, 0x7f, 0x3, 0x3, 0x7, 0x0, 0x2, 0x101, 0x7, 0xfffffffffffffff8, 0x4, 0xffffffffffffc4b7, 0x0, 0x8000000000000001, 0x7, 0xe98d, 0x8000000000000001, 0x1b9, 0x3, 0x3, 0xe0f, 0x0, 0x8000000000000000, 0x1, 0x59bb, 0x1000, 0x10001, 0x8e9, 0x1, 0x4, 0x0, 0x5, 0x800, 0x100000000, 0x0, 0x7, 0x7fffffffffffffff, 0x7, 0x1, 0x400, 0x1f, 0x9, 0x10001, 0x1000, 0xffffffffffffffc0, 0x0, 0x6]}) 07:36:29 executing program 0: ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7f, 0x1, 0x80, 0x10001}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28002, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7ff, 0xe0, 0x3f, 0x7}]}) (async) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0x8, 0x7f, 0x90, 0x3ff}, {0x0, 0x51, 0x0, 0x6}, {0x0, 0xfe, 0x2, 0x800}, {0x0, 0x20, 0x1, 0x7}, {0xd4b, 0xa4, 0x40, 0x80000001}, {0x3, 0x40, 0x1f, 0xc85}, {0x3, 0x73, 0x0, 0x2}, {0x7ff, 0x2, 0x5, 0xbb9}]}) 07:36:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x300}}}, 0x0}, 0x90) 07:36:29 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000800)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000040)='\x00', 0x0, 0x10}, 0x18) 07:36:29 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) write$cgroup_int(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000600)=""/39, &(0x7f0000000640)=0x27) (async) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x8c880) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000000)={{0x9, 0x2, 0x3, 0x551, 'syz0\x00', 0x10000}, 0x0, [0xfd, 0x9, 0x80000000, 0x4, 0x100000001, 0x6, 0xffff, 0x0, 0x0, 0x7f, 0x1, 0x0, 0xffffffffffffffff, 0x2, 0x7ff, 0x401, 0x2, 0x1ff, 0x1f, 0xf6c7, 0x100, 0x0, 0x80000000, 0x20, 0x100000000, 0x100, 0x43361808, 0x10000, 0x5, 0x20, 0x100, 0x5, 0x800, 0x4, 0x7c7, 0x2, 0xffffffff, 0x984a, 0x6, 0x8000000000000000, 0x4, 0x2cc6fd32, 0x8, 0xd374, 0x7, 0x6, 0x2, 0x7fffffffffffffff, 0x3d0, 0x6, 0x10, 0x3, 0x4, 0x3, 0xff, 0x6, 0x3f7c, 0x81, 0x100000000, 0x3, 0x4a6, 0x7, 0x7, 0x3, 0x6, 0x1, 0x7db0, 0x4, 0x9, 0x75322713, 0x1f, 0x2, 0xffffffffffff4d27, 0x6c03, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x5, 0x0, 0x31e, 0xffffffff00000001, 0x7f, 0x3, 0x3, 0x7, 0x0, 0x2, 0x101, 0x7, 0xfffffffffffffff8, 0x4, 0xffffffffffffc4b7, 0x0, 0x8000000000000001, 0x7, 0xe98d, 0x8000000000000001, 0x1b9, 0x3, 0x3, 0xe0f, 0x0, 0x8000000000000000, 0x1, 0x59bb, 0x1000, 0x10001, 0x8e9, 0x1, 0x4, 0x0, 0x5, 0x800, 0x100000000, 0x0, 0x7, 0x7fffffffffffffff, 0x7, 0x1, 0x400, 0x1f, 0x9, 0x10001, 0x1000, 0xffffffffffffffc0, 0x0, 0x6]}) 07:36:29 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x3c8}}}, 0x0}, 0x90) 07:36:30 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1274, 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x8200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x80000001, 0x1c, [0x80, 0xdc, 0x8000, 0xfffffe00, 0x7ff, 0xffffffff, 0x4]}) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/4096) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = gettid() prlimit64(r3, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x7, 0x0, 0x80, 0x7ff, 'syz1\x00', 0x9}, 0x3, 0x30000009, 0x1, r3, 0x6, 0xfffffff7, 'syz1\x00', &(0x7f0000000000)=[']\\\x00', ':#-\x00', '%\x00', ']-&\xac)!.\x00', '/+\x00', '\x00'], 0x15}) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x9, 0x1, 0x5, 0x0, 'syz1\x00', 0x8000}, 0x0, [0x7, 0x0, 0x1938, 0x5, 0x80000000, 0x1, 0x10000, 0x6, 0x8, 0x8000, 0xfffffffffffff001, 0x6, 0x3, 0xf2, 0x4, 0xb72, 0xdf, 0x1, 0x6, 0x9, 0x8, 0x2, 0x3c76f757, 0xab, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0xffff, 0x7fff, 0x100000000, 0xcef, 0x9, 0xffff, 0x4, 0x73, 0x0, 0x5, 0x0, 0x6, 0x2, 0xe0000000000000, 0xd2, 0x5, 0x9, 0x8, 0x2, 0x4, 0xb0, 0xffffffff00000001, 0x8, 0xb115, 0x7, 0xdd, 0x8, 0xfffffffffffffffb, 0xff, 0x954a, 0x1, 0x2, 0x7, 0x7, 0x8000000000000001, 0x44, 0x2c6, 0x2, 0x2, 0x5, 0xf9, 0x7, 0x3, 0x5, 0x1, 0x6, 0x0, 0x20, 0x2, 0x49, 0x4, 0x8, 0x0, 0x4, 0xdb25, 0x0, 0x35, 0x7, 0x6, 0x3, 0x76, 0x8, 0x0, 0x3f, 0x6a6, 0x103a, 0x1ff, 0x8000, 0x10001, 0x1000000000000, 0x7, 0x6, 0xabd, 0x40001000, 0xa000000, 0xaf14, 0x101, 0x0, 0x3, 0x0, 0x3, 0xe0a, 0x7, 0x7, 0x2, 0x8, 0x3, 0xfffffffffffffffb, 0x6, 0x93bb, 0x6, 0x9e, 0x3, 0x40, 0xfffffffffffffeff, 0x7, 0xfff, 0x7fffffff, 0x229e85bc, 0x3]}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0xfffffeff, 0x4, [0x7]}) 07:36:30 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x3e0}}}, 0x0}, 0x90) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000800)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000040)='\x00', 0x0, 0x10}, 0x18) [ 930.163094][ T600] hsr_slave_0: left promiscuous mode 07:36:30 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0x9, 0x1, 0x5, 0x0, 'syz1\x00', 0x8000}, 0x0, [0x7, 0x0, 0x1938, 0x5, 0x80000000, 0x1, 0x10000, 0x6, 0x8, 0x8000, 0xfffffffffffff001, 0x6, 0x3, 0xf2, 0x4, 0xb72, 0xdf, 0x1, 0x6, 0x9, 0x8, 0x2, 0x3c76f757, 0xab, 0xffffffffffffffff, 0x2, 0x9, 0x6, 0xffff, 0x7fff, 0x100000000, 0xcef, 0x9, 0xffff, 0x4, 0x73, 0x0, 0x5, 0x0, 0x6, 0x2, 0xe0000000000000, 0xd2, 0x5, 0x9, 0x8, 0x2, 0x4, 0xb0, 0xffffffff00000001, 0x8, 0xb115, 0x7, 0xdd, 0x8, 0xfffffffffffffffb, 0xff, 0x954a, 0x1, 0x2, 0x7, 0x7, 0x8000000000000001, 0x44, 0x2c6, 0x2, 0x2, 0x5, 0xf9, 0x7, 0x3, 0x5, 0x1, 0x6, 0x0, 0x20, 0x2, 0x49, 0x4, 0x8, 0x0, 0x4, 0xdb25, 0x0, 0x35, 0x7, 0x6, 0x3, 0x76, 0x8, 0x0, 0x3f, 0x6a6, 0x103a, 0x1ff, 0x8000, 0x10001, 0x1000000000000, 0x7, 0x6, 0xabd, 0x40001000, 0xa000000, 0xaf14, 0x101, 0x0, 0x3, 0x0, 0x3, 0xe0a, 0x7, 0x7, 0x2, 0x8, 0x3, 0xfffffffffffffffb, 0x6, 0x93bb, 0x6, 0x9e, 0x3, 0x40, 0xfffffffffffffeff, 0x7, 0xfff, 0x7fffffff, 0x229e85bc, 0x3]}) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0xfffffeff, 0x4, [0x7]}) (rerun: 64) 07:36:30 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x406}}}, 0x0}, 0x90) 07:36:30 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 930.237075][ T600] hsr_slave_1: left promiscuous mode [ 930.242814][ T5744] Bluetooth: hci4: command 0x0405 tx timeout 07:36:30 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) [ 930.301935][ T600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 07:36:30 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x3, 0x8, '\x00', 0x9}, 0x0, [0x200, 0x7, 0xfffffffffffffff8, 0x6, 0x0, 0x5ef, 0x10001, 0x6, 0x2, 0x3, 0x7, 0x5, 0x8, 0x9, 0x6, 0x5, 0x8, 0x5, 0x3f, 0x7, 0x5, 0x7, 0x10000000000000, 0x0, 0x1, 0x7, 0x5, 0x3564, 0x5, 0x9, 0x7, 0x7, 0x9, 0xe325, 0x2, 0x7fffffffffffffff, 0x200, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x8000000000000000, 0x502, 0x521c, 0x703, 0x7, 0x9, 0x7, 0xa7, 0x3, 0x2, 0x40, 0x1ff, 0x4401, 0x1, 0x2, 0x2, 0x60000, 0xffff, 0x401, 0x2, 0x8, 0x0, 0x4, 0x200, 0xfff, 0x8, 0x1100000000000, 0xffff, 0x5, 0x80000000, 0x3, 0x1, 0xfffffffffffffff8, 0x7ff, 0x7, 0x10001, 0xe1, 0x81, 0x80000000, 0x85c, 0x4, 0x7, 0x800, 0x43800000000, 0x285ef520, 0x9, 0x0, 0x7ff, 0x8, 0x7ff, 0x81, 0x400, 0x4f, 0x5, 0x1, 0x9, 0xfffffffffffffffe, 0x20, 0x3, 0x2400000000, 0x100, 0xff, 0x2670, 0x8, 0x7, 0x4, 0xffffffff, 0x7, 0xfffffffffffffff9, 0x8000000000000000, 0x1, 0x1, 0x7, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x1, 0x8000, 0x1, 0x800, 0x170e, 0x0, 0x2, 0xffffffffffffffff, 0x9]}) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 930.318574][ T600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.334368][ T600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.336341][ T600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.361812][ T600] bridge_slave_1: left allmulticast mode 07:36:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x604}}}, 0x0}, 0x90) [ 930.363333][ T600] bridge_slave_1: left promiscuous mode [ 930.364805][ T600] bridge0: port 2(bridge_slave_1) entered disabled state 07:36:30 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x3, 0x8, '\x00', 0x9}, 0x0, [0x200, 0x7, 0xfffffffffffffff8, 0x6, 0x0, 0x5ef, 0x10001, 0x6, 0x2, 0x3, 0x7, 0x5, 0x8, 0x9, 0x6, 0x5, 0x8, 0x5, 0x3f, 0x7, 0x5, 0x7, 0x10000000000000, 0x0, 0x1, 0x7, 0x5, 0x3564, 0x5, 0x9, 0x7, 0x7, 0x9, 0xe325, 0x2, 0x7fffffffffffffff, 0x200, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x8000000000000000, 0x502, 0x521c, 0x703, 0x7, 0x9, 0x7, 0xa7, 0x3, 0x2, 0x40, 0x1ff, 0x4401, 0x1, 0x2, 0x2, 0x60000, 0xffff, 0x401, 0x2, 0x8, 0x0, 0x4, 0x200, 0xfff, 0x8, 0x1100000000000, 0xffff, 0x5, 0x80000000, 0x3, 0x1, 0xfffffffffffffff8, 0x7ff, 0x7, 0x10001, 0xe1, 0x81, 0x80000000, 0x85c, 0x4, 0x7, 0x800, 0x43800000000, 0x285ef520, 0x9, 0x0, 0x7ff, 0x8, 0x7ff, 0x81, 0x400, 0x4f, 0x5, 0x1, 0x9, 0xfffffffffffffffe, 0x20, 0x3, 0x2400000000, 0x100, 0xff, 0x2670, 0x8, 0x7, 0x4, 0xffffffff, 0x7, 0xfffffffffffffff9, 0x8000000000000000, 0x1, 0x1, 0x7, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x1, 0x8000, 0x1, 0x800, 0x170e, 0x0, 0x2, 0xffffffffffffffff, 0x9]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x2, 0x3, 0x8, '\x00', 0x9}, 0x0, [0x200, 0x7, 0xfffffffffffffff8, 0x6, 0x0, 0x5ef, 0x10001, 0x6, 0x2, 0x3, 0x7, 0x5, 0x8, 0x9, 0x6, 0x5, 0x8, 0x5, 0x3f, 0x7, 0x5, 0x7, 0x10000000000000, 0x0, 0x1, 0x7, 0x5, 0x3564, 0x5, 0x9, 0x7, 0x7, 0x9, 0xe325, 0x2, 0x7fffffffffffffff, 0x200, 0x4, 0x1, 0x8, 0xffff, 0x8, 0x6, 0x8000000000000000, 0x502, 0x521c, 0x703, 0x7, 0x9, 0x7, 0xa7, 0x3, 0x2, 0x40, 0x1ff, 0x4401, 0x1, 0x2, 0x2, 0x60000, 0xffff, 0x401, 0x2, 0x8, 0x0, 0x4, 0x200, 0xfff, 0x8, 0x1100000000000, 0xffff, 0x5, 0x80000000, 0x3, 0x1, 0xfffffffffffffff8, 0x7ff, 0x7, 0x10001, 0xe1, 0x81, 0x80000000, 0x85c, 0x4, 0x7, 0x800, 0x43800000000, 0x285ef520, 0x9, 0x0, 0x7ff, 0x8, 0x7ff, 0x81, 0x400, 0x4f, 0x5, 0x1, 0x9, 0xfffffffffffffffe, 0x20, 0x3, 0x2400000000, 0x100, 0xff, 0x2670, 0x8, 0x7, 0x4, 0xffffffff, 0x7, 0xfffffffffffffff9, 0x8000000000000000, 0x1, 0x1, 0x7, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x1, 0x8000, 0x1, 0x800, 0x170e, 0x0, 0x2, 0xffffffffffffffff, 0x9]}) (async) [ 930.407251][ T600] bridge_slave_0: left allmulticast mode [ 930.408709][ T600] bridge_slave_0: left promiscuous mode [ 930.410198][ T600] bridge0: port 1(bridge_slave_0) entered disabled state 07:36:30 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xc00}}}, 0x0}, 0x90) 07:36:30 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x9, 0x0, 0x8, 0x6, 'syz1\x00', 0x80000000}, 0x1, 0x30, 0x8001, r1, 0x1, 0x6, 'syz1\x00', &(0x7f0000000000)=['%\'\xed\x00'], 0x4}) [ 930.551702][ T600] veth1_macvtap: left promiscuous mode 07:36:30 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 930.553399][ T600] veth0_macvtap: left promiscuous mode [ 930.554974][ T600] veth1_vlan: left promiscuous mode [ 930.558678][ T600] veth0_vlan: left promiscuous mode 07:36:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x1100}}}, 0x0}, 0x90) 07:36:30 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x1500}}}, 0x0}, 0x90) 07:36:30 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x9, 0x0, 0x8, 0x6, 'syz1\x00', 0x80000000}, 0x1, 0x30, 0x8001, r1, 0x1, 0x6, 'syz1\x00', &(0x7f0000000000)=['%\'\xed\x00'], 0x4}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) gettid() (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000040)={{0x9, 0x0, 0x8, 0x6, 'syz1\x00', 0x80000000}, 0x1, 0x30, 0x8001, r1, 0x1, 0x6, 'syz1\x00', &(0x7f0000000000)=['%\'\xed\x00'], 0x4}) (async) 07:36:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 07:36:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x2000}}}, 0x0}, 0x90) 07:36:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 07:36:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14040, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x503441, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)={'geneve1\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'wlan1\x00'}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x0) r3 = getpid() ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000240)={'lo\x00', 0x200}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x9, 0x5, 0x5, 0x8, 'syz1\x00', 0x9}, 0x1, 0x1, 0x2, r3, 0x3, 0x3f, 'syz1\x00', &(0x7f0000000040)=['\x00', '/+\x00', '@.\x00'], 0x7}) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 07:36:30 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x2200}}}, 0x0}, 0x90) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 07:36:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 07:36:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14040, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x503441, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)={'geneve1\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'wlan1\x00'}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x0) r3 = getpid() ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000240)={'lo\x00', 0x200}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x9, 0x5, 0x5, 0x8, 'syz1\x00', 0x9}, 0x1, 0x1, 0x2, r3, 0x3, 0x3f, 'syz1\x00', &(0x7f0000000040)=['\x00', '/+\x00', '@.\x00'], 0x7}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x14040, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x503441, 0x0) (async) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000002c0)={'geneve1\x00', 0x400}) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'wlan1\x00'}) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x0) (async) getpid() (async) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000240)={'lo\x00', 0x200}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x9, 0x5, 0x5, 0x8, 'syz1\x00', 0x9}, 0x1, 0x1, 0x2, r3, 0x3, 0x3f, 'syz1\x00', &(0x7f0000000040)=['\x00', '/+\x00', '@.\x00'], 0x7}) (async) 07:36:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x3902}}}, 0x0}, 0x90) 07:36:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) 07:36:31 executing program 0: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0x9, 0x4, 0x2}, {0x1, 0x3, 0xff, 0x7ff}, {0x0, 0x5, 0xcb, 0x3}, {0xfff8, 0x8, 0x4, 0x80}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x4000}}}, 0x0}, 0x90) [ 931.104181][ T600] team0 (unregistering): Port device team_slave_1 removed 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 931.145489][ T600] team0 (unregistering): Port device team_slave_0 removed 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 931.174712][ T600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.218681][ T600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x4902}}}, 0x0}, 0x90) 07:36:31 executing program 3: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x7, 0x9, 0x4, 0x2}, {0x1, 0x3, 0xff, 0x7ff}, {0x0, 0x5, 0xcb, 0x3}, {0xfff8, 0x8, 0x4, 0x80}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) (async) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000), 0x8) 07:36:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x5501}}}, 0x0}, 0x90) 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x0, 0x0, 0x3, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 1: syz_open_dev$sndctrl(0x0, 0x0, 0x0) [ 931.361980][ T5744] Bluetooth: hci0: command 0x041b tx timeout 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x1274, 0xffffffffffffffff) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x8200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x80000001, 0x1c, [0x80, 0xdc, 0x8000, 0xfffffe00, 0x7ff, 0xffffffff, 0x4]}) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/4096) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) r3 = gettid() prlimit64(r3, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x7, 0x0, 0x80, 0x7ff, 'syz1\x00', 0x9}, 0x3, 0x30000009, 0x1, r3, 0x6, 0xfffffff7, 'syz1\x00', &(0x7f0000000000)=[']\\\x00', ':#-\x00', '%\x00', ']-&\xac)!.\x00', '/+\x00', '\x00'], 0x15}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x1274, 0xffffffffffffffff) (async) syz_open_dev$sndctrl(0x0, 0xa57, 0x8200) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)={0x80000001, 0x1c, [0x80, 0xdc, 0x8000, 0xfffffe00, 0x7ff, 0xffffffff, 0x4]}) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000001c0)=""/4096) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, 0x0) (async) gettid() (async) prlimit64(r3, 0x8, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x7, 0x0, 0x80, 0x7ff, 'syz1\x00', 0x9}, 0x3, 0x30000009, 0x1, r3, 0x6, 0xfffffff7, 'syz1\x00', &(0x7f0000000000)=[']\\\x00', ':#-\x00', '%\x00', ']-&\xac)!.\x00', '/+\x00', '\x00'], 0x15}) (async) 07:36:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x7d00}}}, 0x0}, 0x90) 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x401, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) [ 931.457194][ T600] bond0 (unregistering): Released all slaves 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xa02) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) 07:36:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xc803}}}, 0x0}, 0x90) 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00', 0x1}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xe003}}}, 0x0}, 0x90) 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a, 0x9]}) 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a]}) [ 931.619583][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xa02) (async) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) [ 931.645197][T10112] 8021q: adding VLAN 0 to HW filter on device team0 07:36:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x200000}}}, 0x0}, 0x90) 07:36:31 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x383140, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) [ 931.680048][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.681955][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.698916][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.700790][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188, 0xe64a]}) 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188]}) 07:36:31 executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0240, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) syz_open_dev$sndctrl(0x0, 0xa59, 0x0) 07:36:31 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xf0ff1f}}}, 0x0}, 0x90) 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3, 0xc188]}) 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3]}) [ 931.869556][T10112] 8021q: adding VLAN 0 to HW filter on device batadv0 07:36:31 executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0240, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) syz_open_dev$sndctrl(0x0, 0xa59, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x48) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0240, 0x0) (async) ioctl$PPPIOCDISCONN(r1, 0x7439) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(r2, 0x541b, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) (async) syz_open_dev$sndctrl(0x0, 0xa59, 0x0) (async) 07:36:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x1000000}}}, 0x0}, 0x90) 07:36:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff]}) 07:36:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff, 0x3]}) 07:36:31 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x2000000}}}, 0x0}, 0x90) 07:36:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7]}) [ 932.150421][T10112] veth0_vlan: entered promiscuous mode [ 932.161307][T10112] veth1_vlan: entered promiscuous mode 07:36:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b]}) 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x646, 0x4c840) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x4, 0x4, 0xe8d, 0x7ff, 'syz1\x00', 0x7fffffff}, 0x0, [0x6, 0x8000000000000000, 0x7, 0x7f, 0x6, 0x4, 0x5, 0x80, 0xafc, 0x3, 0x401, 0x400, 0xc27c, 0xacf, 0x3, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffb, 0xd43a, 0xe9, 0x8, 0xffff, 0xb67a, 0x10001, 0x1, 0x10000, 0x1, 0x80000001, 0x7f, 0x400, 0x800, 0x1, 0xffffffffffff7fff, 0x2d, 0x2, 0x1e, 0x7, 0x80000001, 0x80, 0xa3, 0x96a6, 0x1, 0xc932, 0xb5a, 0xffff, 0xa, 0x3, 0xffffffffffffffe0, 0x100, 0x5, 0x0, 0x9, 0x4, 0x7fffffffffffffff, 0x80c4, 0x4, 0x9, 0xfffffffffffffff8, 0x8, 0x0, 0xf3ab, 0x7, 0x8, 0x1, 0xa0db, 0x9, 0xfffffffffffffa0b, 0x5, 0x4, 0x80, 0x7, 0x5, 0x0, 0x9, 0xfffffffffffffffb, 0x1f, 0x5, 0x6, 0x5ac, 0x0, 0x9, 0x7fff, 0x9, 0x1, 0x43, 0x80000001, 0x2, 0x0, 0x4, 0x100000001, 0xfffffffffffffff8, 0x9, 0x7, 0x100000001, 0x7fffffff, 0x5, 0x5, 0x5, 0x7, 0x9, 0x7, 0x6, 0x8, 0x7, 0x2, 0x6, 0x1, 0x3, 0xffffffffffffb245, 0xfffffffffffffffe, 0x3, 0x7, 0x2, 0x5e000000, 0x200, 0xffffffffffffffff, 0x9, 0x0, 0x80000000, 0x3, 0xfff, 0x0, 0x7, 0xc5ba, 0x878, 0x7, 0x2]}) 07:36:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7, 0x7ff]}) 07:36:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x3000000}}}, 0x0}, 0x90) [ 932.185486][T10112] veth0_macvtap: entered promiscuous mode [ 932.198017][T10112] veth1_macvtap: entered promiscuous mode [ 932.221409][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 07:36:32 executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x200}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) [ 932.228444][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.231092][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b, 0x7]}) [ 932.239467][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.249553][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.261010][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.265690][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 932.274793][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 07:36:32 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x646, 0x4c840) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x9) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000040)={{0x4, 0x4, 0xe8d, 0x7ff, 'syz1\x00', 0x7fffffff}, 0x0, [0x6, 0x8000000000000000, 0x7, 0x7f, 0x6, 0x4, 0x5, 0x80, 0xafc, 0x3, 0x401, 0x400, 0xc27c, 0xacf, 0x3, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffb, 0xd43a, 0xe9, 0x8, 0xffff, 0xb67a, 0x10001, 0x1, 0x10000, 0x1, 0x80000001, 0x7f, 0x400, 0x800, 0x1, 0xffffffffffff7fff, 0x2d, 0x2, 0x1e, 0x7, 0x80000001, 0x80, 0xa3, 0x96a6, 0x1, 0xc932, 0xb5a, 0xffff, 0xa, 0x3, 0xffffffffffffffe0, 0x100, 0x5, 0x0, 0x9, 0x4, 0x7fffffffffffffff, 0x80c4, 0x4, 0x9, 0xfffffffffffffff8, 0x8, 0x0, 0xf3ab, 0x7, 0x8, 0x1, 0xa0db, 0x9, 0xfffffffffffffa0b, 0x5, 0x4, 0x80, 0x7, 0x5, 0x0, 0x9, 0xfffffffffffffffb, 0x1f, 0x5, 0x6, 0x5ac, 0x0, 0x9, 0x7fff, 0x9, 0x1, 0x43, 0x80000001, 0x2, 0x0, 0x4, 0x100000001, 0xfffffffffffffff8, 0x9, 0x7, 0x100000001, 0x7fffffff, 0x5, 0x5, 0x5, 0x7, 0x9, 0x7, 0x6, 0x8, 0x7, 0x2, 0x6, 0x1, 0x3, 0xffffffffffffb245, 0xfffffffffffffffe, 0x3, 0x7, 0x2, 0x5e000000, 0x200, 0xffffffffffffffff, 0x9, 0x0, 0x80000000, 0x3, 0xfff, 0x0, 0x7, 0xc5ba, 0x878, 0x7, 0x2]}) 07:36:32 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x383140, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x383140, 0x0) (async) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000000)) (async) [ 932.289117][T10112] batman_adv: batadv0: Interface activated: batadv_slave_0 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6]}) [ 932.305489][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.315695][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.320589][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.323509][ T5744] Bluetooth: hci4: command 0x0405 tx timeout [ 932.330381][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.335747][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 932.338669][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.341326][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 07:36:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6, 0x9b]}) [ 932.347071][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 932.350680][T10112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 932.359739][T10112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 07:36:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x4000000}}}, 0x0}, 0x90) 07:36:32 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'pim6reg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) bind$bt_sco(r0, 0x0, 0x0) (async) bind$bt_sco(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x200}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) [ 932.370089][T10112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.375281][T10112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.379814][T10112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x9) 07:36:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6]}) [ 932.479582][ T6235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.485583][ T6235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:36:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6, 0x6]}) 07:36:32 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x10}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 07:36:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x6040000}}}, 0x0}, 0x90) 07:36:32 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) [ 932.547591][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.549621][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:36:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3]}) 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3, 0x6]}) 07:36:32 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x9) 07:36:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x8000000}}}, 0x0}, 0x90) 07:36:32 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x6000000) 07:36:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3]}) 07:36:32 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x751800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/210) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/189) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x81, 0x5, 'syz1\x00', 0x7f}, 0x1, [0x400, 0x7, 0x5, 0x1fa, 0x6, 0x0, 0x7, 0x3, 0x7, 0xffffffffffffffff, 0x100000000, 0x84, 0xffff, 0x0, 0x569d, 0xff, 0x1, 0xffffffffffffffff, 0x64, 0x5, 0x5, 0x80000000, 0x9, 0x0, 0x7, 0xffffffff, 0x1e08c843, 0x5, 0x6, 0x0, 0x1, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x6, 0x3, 0x80, 0x7fff, 0x1, 0xffffffff, 0x9, 0x100000001, 0x1, 0x4, 0x100000000, 0x200, 0xffffffffffff10e2, 0x3, 0xb9, 0x6, 0x1, 0x7, 0x7, 0x500000000000000, 0x1000, 0x8000000000000000, 0x5cf6, 0x2, 0x100000001, 0xb0e1, 0x5, 0xf0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x100, 0x1, 0x7, 0x100000001, 0x20, 0x81, 0x7, 0x2, 0x9, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x1d9800000, 0x8, 0x8000, 0x0, 0x100000000, 0x80000000, 0x5, 0x81, 0x6, 0x6, 0x3, 0x6, 0x0, 0x5, 0xf103, 0x1ff, 0xce9, 0xfff, 0x200, 0x400, 0x800, 0x3, 0x1, 0x7ff, 0x1, 0x5, 0x7, 0x1, 0x81, 0x55, 0x7, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7f, 0x2, 0xffff, 0xfffffffffffffffa, 0x0, 0x8000, 0x6, 0x7f, 0x100000000, 0x200, 0x9]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0xa, 0x3, 0x6, 0x99, 'syz0\x00', 0x7ff}, 0x1, [0x8, 0x0, 0x2, 0x7fff, 0x0, 0x100000001, 0x2, 0x4, 0x10000, 0x6, 0x218000, 0x2, 0x80000001, 0x77, 0xfff, 0x8f47, 0x800, 0xfffffffffffffbff, 0x2, 0x6, 0x91, 0xfb, 0x6c, 0x8000000000000000, 0x1f, 0x2, 0x2, 0xfff, 0x3, 0x3f, 0x32c, 0x1000, 0xee, 0x9, 0xffffffffffffffff, 0x80, 0x8000000000000001, 0x7fffffff, 0xffc0000000000000, 0xfffffffffffffff7, 0x7f, 0x247, 0x46, 0x8, 0x3c, 0x9, 0x7, 0x80000001, 0x5, 0x2, 0x6, 0xbb, 0xfffffffffffffff7, 0x2, 0x5, 0x3, 0x0, 0x0, 0x3, 0x80, 0x3fffffff80, 0x59eca154, 0x9, 0x0, 0x0, 0x800, 0x8000000000000000, 0x10001, 0x4, 0x9, 0x1, 0x7, 0xac1, 0x3, 0x8000, 0x7, 0x9, 0x7fff, 0x3, 0x2bda98c0, 0x9623, 0x6, 0xc79d, 0x5, 0x2, 0xfff, 0x7, 0xffffffff, 0xa0, 0xffffffffffffffff, 0x0, 0x8000000000000001, 0x6a, 0x3159b6c8, 0x2, 0x9, 0x7fff, 0x3, 0x7, 0xffffffffffffffc0, 0x9, 0x8000000000000001, 0xfffffffffffffffd, 0x3ff, 0x8, 0x8, 0x5d, 0x7, 0xa3e, 0x0, 0x8000, 0x636b, 0x7, 0x80, 0x8, 0xffff, 0x3, 0x0, 0x3ff, 0x5, 0x8, 0x1, 0x1, 0x7f, 0xc02, 0x9, 0x5, 0x1]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000c00)={{0x8, 0x0, 0xfffffffe, 0x0, '\x00', 0x93ba}, 0x0, [0xffff, 0x7, 0x3, 0xe9, 0x3, 0x8, 0x1, 0x80, 0x9, 0x3, 0x7ff, 0x1, 0x2, 0x8, 0x0, 0x4, 0x8001, 0x261, 0x1ff, 0x2, 0x4e425ec3, 0x26, 0x80000000, 0x8c, 0x6, 0xff, 0x9, 0x6, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x7fff, 0x6, 0xd74, 0x3, 0x0, 0x0, 0x4, 0x8, 0x3, 0x7ff, 0x7f, 0x4, 0x8000000000000001, 0x2, 0xf5, 0xffffffffffffffe0, 0xa25, 0x40, 0x9, 0xcea3, 0x9, 0x2, 0x3, 0x4, 0x0, 0x321, 0x334d, 0xb9ae, 0x2de8, 0x185cebe7, 0x200, 0x8, 0x5, 0x5, 0x0, 0x0, 0x2, 0x724, 0x2, 0x0, 0x1ff, 0x8000, 0x7, 0x0, 0xf96c, 0x6, 0xfffffffffffffe00, 0xfff, 0x5, 0x7fff, 0x2, 0x401, 0x80, 0x2, 0x2, 0xa34, 0x3, 0x9, 0x9, 0x5, 0x7ff, 0x7fffffff, 0x9, 0xfffffffffffffff8, 0x8000000000000000, 0x6, 0x81, 0x1, 0xe63, 0x7ff, 0xd, 0x0, 0xc9, 0x6, 0x40, 0x1, 0x9, 0x2b4, 0x3, 0x96, 0x2, 0xfffffffffffffff7, 0x7, 0xffffffffffffffff, 0x2, 0xf03a, 0x26, 0x4, 0x7ff, 0x7fff, 0x3f, 0x5, 0xfffffffffffffffa, 0x20, 0x63, 0x6]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)) 07:36:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3, 0x3]}) 07:36:32 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x6040000) 07:36:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xc000000}}}, 0x0}, 0x90) 07:36:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2]}) 07:36:32 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) 07:36:32 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2, 0x3]}) 07:36:32 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) (async) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x751800) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/210) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/210) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/189) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x2, 0x0, 0x81, 0x5, 'syz1\x00', 0x7f}, 0x1, [0x400, 0x7, 0x5, 0x1fa, 0x6, 0x0, 0x7, 0x3, 0x7, 0xffffffffffffffff, 0x100000000, 0x84, 0xffff, 0x0, 0x569d, 0xff, 0x1, 0xffffffffffffffff, 0x64, 0x5, 0x5, 0x80000000, 0x9, 0x0, 0x7, 0xffffffff, 0x1e08c843, 0x5, 0x6, 0x0, 0x1, 0x8000000000000000, 0x7, 0xffffffff, 0x5, 0x6, 0x3, 0x80, 0x7fff, 0x1, 0xffffffff, 0x9, 0x100000001, 0x1, 0x4, 0x100000000, 0x200, 0xffffffffffff10e2, 0x3, 0xb9, 0x6, 0x1, 0x7, 0x7, 0x500000000000000, 0x1000, 0x8000000000000000, 0x5cf6, 0x2, 0x100000001, 0xb0e1, 0x5, 0xf0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x100, 0x1, 0x7, 0x100000001, 0x20, 0x81, 0x7, 0x2, 0x9, 0x0, 0x3, 0x0, 0x200000000, 0x0, 0x1d9800000, 0x8, 0x8000, 0x0, 0x100000000, 0x80000000, 0x5, 0x81, 0x6, 0x6, 0x3, 0x6, 0x0, 0x5, 0xf103, 0x1ff, 0xce9, 0xfff, 0x200, 0x400, 0x800, 0x3, 0x1, 0x7ff, 0x1, 0x5, 0x7, 0x1, 0x81, 0x55, 0x7, 0x0, 0x9, 0x9, 0x2, 0x0, 0x7f, 0x2, 0xffff, 0xfffffffffffffffa, 0x0, 0x8000, 0x6, 0x7f, 0x100000000, 0x200, 0x9]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000700)={{0xa, 0x3, 0x6, 0x99, 'syz0\x00', 0x7ff}, 0x1, [0x8, 0x0, 0x2, 0x7fff, 0x0, 0x100000001, 0x2, 0x4, 0x10000, 0x6, 0x218000, 0x2, 0x80000001, 0x77, 0xfff, 0x8f47, 0x800, 0xfffffffffffffbff, 0x2, 0x6, 0x91, 0xfb, 0x6c, 0x8000000000000000, 0x1f, 0x2, 0x2, 0xfff, 0x3, 0x3f, 0x32c, 0x1000, 0xee, 0x9, 0xffffffffffffffff, 0x80, 0x8000000000000001, 0x7fffffff, 0xffc0000000000000, 0xfffffffffffffff7, 0x7f, 0x247, 0x46, 0x8, 0x3c, 0x9, 0x7, 0x80000001, 0x5, 0x2, 0x6, 0xbb, 0xfffffffffffffff7, 0x2, 0x5, 0x3, 0x0, 0x0, 0x3, 0x80, 0x3fffffff80, 0x59eca154, 0x9, 0x0, 0x0, 0x800, 0x8000000000000000, 0x10001, 0x4, 0x9, 0x1, 0x7, 0xac1, 0x3, 0x8000, 0x7, 0x9, 0x7fff, 0x3, 0x2bda98c0, 0x9623, 0x6, 0xc79d, 0x5, 0x2, 0xfff, 0x7, 0xffffffff, 0xa0, 0xffffffffffffffff, 0x0, 0x8000000000000001, 0x6a, 0x3159b6c8, 0x2, 0x9, 0x7fff, 0x3, 0x7, 0xffffffffffffffc0, 0x9, 0x8000000000000001, 0xfffffffffffffffd, 0x3ff, 0x8, 0x8, 0x5d, 0x7, 0xa3e, 0x0, 0x8000, 0x636b, 0x7, 0x80, 0x8, 0xffff, 0x3, 0x0, 0x3ff, 0x5, 0x8, 0x1, 0x1, 0x7f, 0xc02, 0x9, 0x5, 0x1]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000c00)={{0x8, 0x0, 0xfffffffe, 0x0, '\x00', 0x93ba}, 0x0, [0xffff, 0x7, 0x3, 0xe9, 0x3, 0x8, 0x1, 0x80, 0x9, 0x3, 0x7ff, 0x1, 0x2, 0x8, 0x0, 0x4, 0x8001, 0x261, 0x1ff, 0x2, 0x4e425ec3, 0x26, 0x80000000, 0x8c, 0x6, 0xff, 0x9, 0x6, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x7fff, 0x6, 0xd74, 0x3, 0x0, 0x0, 0x4, 0x8, 0x3, 0x7ff, 0x7f, 0x4, 0x8000000000000001, 0x2, 0xf5, 0xffffffffffffffe0, 0xa25, 0x40, 0x9, 0xcea3, 0x9, 0x2, 0x3, 0x4, 0x0, 0x321, 0x334d, 0xb9ae, 0x2de8, 0x185cebe7, 0x200, 0x8, 0x5, 0x5, 0x0, 0x0, 0x2, 0x724, 0x2, 0x0, 0x1ff, 0x8000, 0x7, 0x0, 0xf96c, 0x6, 0xfffffffffffffe00, 0xfff, 0x5, 0x7fff, 0x2, 0x401, 0x80, 0x2, 0x2, 0xa34, 0x3, 0x9, 0x9, 0x5, 0x7ff, 0x7fffffff, 0x9, 0xfffffffffffffff8, 0x8000000000000000, 0x6, 0x81, 0x1, 0xe63, 0x7ff, 0xd, 0x0, 0xc9, 0x6, 0x40, 0x1, 0x9, 0x2b4, 0x3, 0x96, 0x2, 0xfffffffffffffff7, 0x7, 0xffffffffffffffff, 0x2, 0xf03a, 0x26, 0x4, 0x7ff, 0x7fff, 0x3f, 0x5, 0xfffffffffffffffa, 0x20, 0x63, 0x6]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f00000001c0)) 07:36:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xc000000}}}, 0x0}, 0x90) 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4]}) 07:36:32 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x11000000}}}, 0x0}, 0x90) 07:36:32 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4, 0x2]}) 07:36:32 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x5, 0x0, 0x5, 0x6, 'syz1\x00', 0x4}, 0x1, [0xf9, 0x3afd, 0x4, 0xa8, 0xfff, 0x4, 0x7f, 0x100000000000000, 0x100000001, 0x5d35, 0x10000, 0x8, 0x8001, 0x3, 0x400, 0x6, 0xb4f, 0x40, 0x5, 0x80, 0x1000, 0x7, 0x64ed99e1, 0x9, 0x662e, 0x3, 0xa7, 0xce7, 0x9c26, 0x5, 0xfff, 0x0, 0xe0, 0x9, 0x5, 0x678, 0x4, 0x80b, 0x8000000000000001, 0x0, 0x1, 0x100000001, 0x3, 0x3, 0x0, 0x7, 0x400, 0x22e2, 0x4, 0x1, 0x3, 0x7ff, 0x100000000, 0x100, 0x7, 0x78c, 0x9, 0xfffffffffffffff9, 0x81, 0x9, 0x0, 0x1, 0x11, 0x24, 0x8000, 0xffffffffffff683b, 0x0, 0x2, 0x6, 0x8000000000000001, 0x9, 0x8, 0x10001, 0x7, 0x3, 0x2, 0xe3, 0x1, 0xfffffffffffffff9, 0x3f, 0x81, 0xb890, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x7, 0x1, 0x4, 0x7, 0x7d7f, 0x1, 0x9, 0x1, 0x7fffffff, 0x8e, 0x94, 0x3, 0xd4b0000000, 0x7, 0x8, 0xa7d, 0xffff, 0x0, 0x1, 0xc8a, 0x100000001, 0x6, 0x3, 0x40, 0xdb9, 0x7, 0xef4, 0x0, 0x7, 0x8001, 0x100000000, 0x2, 0x5, 0xfff, 0x2, 0x7fffffff, 0x3, 0x100000001, 0x100000001, 0x6, 0x4]}) 07:36:32 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9]}) 07:36:32 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x8100000) 07:36:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x15000000}}}, 0x0}, 0x90) 07:36:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9, 0x4]}) 07:36:33 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x5, 0x0, 0x5, 0x6, 'syz1\x00', 0x4}, 0x1, [0xf9, 0x3afd, 0x4, 0xa8, 0xfff, 0x4, 0x7f, 0x100000000000000, 0x100000001, 0x5d35, 0x10000, 0x8, 0x8001, 0x3, 0x400, 0x6, 0xb4f, 0x40, 0x5, 0x80, 0x1000, 0x7, 0x64ed99e1, 0x9, 0x662e, 0x3, 0xa7, 0xce7, 0x9c26, 0x5, 0xfff, 0x0, 0xe0, 0x9, 0x5, 0x678, 0x4, 0x80b, 0x8000000000000001, 0x0, 0x1, 0x100000001, 0x3, 0x3, 0x0, 0x7, 0x400, 0x22e2, 0x4, 0x1, 0x3, 0x7ff, 0x100000000, 0x100, 0x7, 0x78c, 0x9, 0xfffffffffffffff9, 0x81, 0x9, 0x0, 0x1, 0x11, 0x24, 0x8000, 0xffffffffffff683b, 0x0, 0x2, 0x6, 0x8000000000000001, 0x9, 0x8, 0x10001, 0x7, 0x3, 0x2, 0xe3, 0x1, 0xfffffffffffffff9, 0x3f, 0x81, 0xb890, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x8, 0x7, 0x1, 0x4, 0x7, 0x7d7f, 0x1, 0x9, 0x1, 0x7fffffff, 0x8e, 0x94, 0x3, 0xd4b0000000, 0x7, 0x8, 0xa7d, 0xffff, 0x0, 0x1, 0xc8a, 0x100000001, 0x6, 0x3, 0x40, 0xdb9, 0x7, 0xef4, 0x0, 0x7, 0x8001, 0x100000000, 0x2, 0x5, 0xfff, 0x2, 0x7fffffff, 0x3, 0x100000001, 0x100000001, 0x6, 0x4]}) 07:36:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa]}) 07:36:33 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x9000000) 07:36:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x1fffefff}}}, 0x0}, 0x90) 07:36:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa, 0xe9]}) 07:36:33 executing program 2: getegid() getegid() [ 933.420357][ T28] kauditd_printk_skb: 34588 callbacks suppressed [ 933.420370][ T28] audit: type=1400 audit(5470593.390:1959234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=3054 comm="syz-executor.1" name="syzkaller.xT7q9j" dev="nvme0n1p2" ino=1742 [ 933.431224][ T3054] audit: audit_backlog=65 > audit_backlog_limit=64 07:36:33 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0xc000000) [ 933.434468][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.435445][ T28] audit: type=1400 audit(5470593.410:1959235): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5771 comm="syslogd" name="/" dev="nvme0n1p2" ino=2 [ 933.436094][ C0] audit: audit_lost=494333 audit_rate_limit=0 audit_backlog_limit=64 [ 933.440669][ T28] audit: type=1400 audit(5470593.410:1959236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5771 comm="syslogd" name="var" dev="nvme0n1p2" ino=1718 [ 933.442666][ C0] audit: backlog limit exceeded [ 933.442979][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 933.450465][ C0] audit: audit_lost=494334 audit_rate_limit=0 audit_backlog_limit=64 [ 933.451425][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 933.452400][ C0] audit: backlog limit exceeded 07:36:33 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x701400, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) write$ppp(r0, &(0x7f0000000040)="28a24305a3ecb6bf857eb64a2a75eb6e69188eb35c04046e751db9c54fcc9a9d190e36f8f1ae189e0e6bd779ab4c2616a1bb6f88145b4fdd470d3068cd1f0d50477ffba3b3583a2d7459d19b6ac4fb574fe3b58da35898fe350bdd4a844536376d690168b90003b38abf74faa0b43ddc285e6a605e175ebfcd847c3be90306fb9a26dcdc48bc3f8ceb4657abbbd21e1a91caf320e110c68766120bab77ef8a987f2b656cd81a4cf952ed8d2c2a7c9722a49ea32af61f5dd56c2700fc7b647e6f", 0xc0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3]}) 07:36:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3, 0xaa]}) 07:36:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x1ffff000}}}, 0x0}, 0x90) 07:36:33 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@generic={0x0, 0x0, 0x10}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040), 0x8) 07:36:33 executing program 1: getegid() (async) getegid() 07:36:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x20000000}}}, 0x0}, 0x90) 07:36:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100]}) 07:36:33 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x11000000) 07:36:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100, 0x3]}) 07:36:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x22000000}}}, 0x0}, 0x90) 07:36:33 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x1fffefff) 07:36:33 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x39020000}}}, 0x0}, 0x90) 07:36:33 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xf2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x57bb5611) 07:36:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000, 0x0, 0x100]}) 07:36:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000]}) 07:36:33 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x1ffff000) 07:36:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1]}) 07:36:33 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xf2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x57bb5611) 07:36:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x40000000}}}, 0x0}, 0x90) 07:36:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1, 0xc0000000000]}) 07:36:33 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x20000000) 07:36:33 executing program 3: syz_open_dev$sndctrl(0x0, 0x8000000000000000, 0x50400) 07:36:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x49020000}}}, 0x0}, 0x90) 07:36:33 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337]}) 07:36:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337, 0xe1]}) 07:36:33 executing program 1: syz_open_dev$sndctrl(0x0, 0x8000000000000000, 0x50400) syz_open_dev$sndctrl(0x0, 0x8000000000000000, 0x50400) (async) 07:36:33 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x40000000) 07:36:33 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x55010000}}}, 0x0}, 0x90) 07:36:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e]}) 07:36:33 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e, 0x337]}) 07:36:33 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x7f000000) 07:36:33 executing program 2: syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) 07:36:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0x7d000000}}}, 0x0}, 0x90) 07:36:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800]}) 07:36:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800, 0x55e]}) 07:36:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65]}) 07:36:34 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0xffefff1f) 07:36:34 executing program 3: syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0xffffffffffffffff, 0x0) (async) 07:36:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65, 0x800]}) 07:36:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xc8030000}}}, 0x0}, 0x90) [ 934.401769][ T5744] Bluetooth: hci4: command 0x0405 tx timeout 07:36:34 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x64) 07:36:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xe0030000}}}, 0x0}, 0x90) 07:36:34 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x701400, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) (async, rerun: 64) write$ppp(r0, &(0x7f0000000040)="28a24305a3ecb6bf857eb64a2a75eb6e69188eb35c04046e751db9c54fcc9a9d190e36f8f1ae189e0e6bd779ab4c2616a1bb6f88145b4fdd470d3068cd1f0d50477ffba3b3583a2d7459d19b6ac4fb574fe3b58da35898fe350bdd4a844536376d690168b90003b38abf74faa0b43ddc285e6a605e175ebfcd847c3be90306fb9a26dcdc48bc3f8ceb4657abbbd21e1a91caf320e110c68766120bab77ef8a987f2b656cd81a4cf952ed8d2c2a7c9722a49ea32af61f5dd56c2700fc7b647e6f", 0xc0) (rerun: 64) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001, 0x3a65]}) 07:36:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'dummy0\x00'}) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001]}) 07:36:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000, 0x8001]}) 07:36:34 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x64) 07:36:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {{}, {0x95, 0x0, 0x0, 0xffefff1f}}}, 0x0}, 0x90) 07:36:34 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x2000000000) 07:36:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000]}) 07:36:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'dummy0\x00'}) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) 07:36:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2, 0x8000]}) 07:36:34 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10140, 0x0) r1 = gettid() r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r2) 07:36:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x2}}}, 0x0}, 0x90) 07:36:34 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0xffff871fffff) 07:36:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2]}) 07:36:34 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x541b, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000680)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x1403, 0x8, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x5421, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000007c0)={{0x2, 0x4d943e91794ee35f, 0xbec, 0xfffffe01, 'syz0\x00', 0x8}, 0x5, 0x153, 0xf463, 0xffffffffffffffff, 0x1, 0x3ff, 'syz1\x00', &(0x7f00000006c0)=['K]\x00'], 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000000)={{0x1, 0x2, 0x7fff, 0x100, 'syz1\x00', 0x2}, 0x0, [0x8, 0x7f, 0x3, 0x1, 0xfff, 0xfffffffffffffffd, 0x3ff, 0x79, 0x1, 0x2, 0x5, 0x1, 0x11a387ff, 0x8, 0x101, 0x8, 0x200, 0x5, 0x6, 0x7, 0x100010000, 0x638, 0x9, 0x2, 0xffff, 0x0, 0x2, 0x4, 0x3, 0x2, 0x4, 0x4, 0x10001, 0xa9f, 0x0, 0x8, 0x7, 0x8, 0xffffffffffff77d2, 0xd12a, 0xa99e, 0x3f, 0x4, 0x1, 0x4, 0x2562, 0x3, 0x2, 0xfffffffffffffc00, 0x7, 0x5, 0x6, 0x5, 0x7f, 0x2fba, 0x8, 0x7ff, 0x2, 0x1, 0x7, 0x0, 0x80000001, 0x2, 0x7f, 0x1f, 0x9, 0x4, 0xffffffffffffffff, 0x6, 0xfff, 0x9, 0x0, 0x10000, 0xffffffff, 0xf8b9, 0x8, 0x7ff, 0x101, 0x0, 0x20000, 0x7fff, 0x1000, 0x8, 0x80, 0x5f55fbde, 0x1f, 0xfffffffffffffffb, 0x3, 0x2, 0x10000, 0x2e4f, 0x8, 0x3, 0x6, 0xad8, 0x5, 0x0, 0x5, 0x101, 0x8, 0xfffffffffffffffc, 0x5, 0xffffffff, 0x2a, 0x8, 0x4, 0xdc2b, 0x7f, 0x18a, 0x3f, 0x101, 0x7, 0xd2, 0xfffffffffffffff7, 0x4, 0x4, 0x4, 0xfffffffffffffffb, 0x8, 0x2, 0x3, 0x6, 0xa, 0xffffffff, 0xffff, 0x4, 0x4, 0x6]}) 07:36:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x3}}}, 0x0}, 0x90) 07:36:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5, 0x2]}) 07:36:34 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0xffff87c55a0c) 07:36:34 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10140, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10140, 0x0) r1 = gettid() openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)=r2) 07:36:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x5}}}, 0x0}, 0x90) 07:36:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5]}) 07:36:34 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x541b, 0x0) (async) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000680)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x88, 0x1403, 0x8, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x5421, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000007c0)={{0x2, 0x4d943e91794ee35f, 0xbec, 0xfffffe01, 'syz0\x00', 0x8}, 0x5, 0x153, 0xf463, 0xffffffffffffffff, 0x1, 0x3ff, 'syz1\x00', &(0x7f00000006c0)=['K]\x00'], 0x3}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000000)={{0x1, 0x2, 0x7fff, 0x100, 'syz1\x00', 0x2}, 0x0, [0x8, 0x7f, 0x3, 0x1, 0xfff, 0xfffffffffffffffd, 0x3ff, 0x79, 0x1, 0x2, 0x5, 0x1, 0x11a387ff, 0x8, 0x101, 0x8, 0x200, 0x5, 0x6, 0x7, 0x100010000, 0x638, 0x9, 0x2, 0xffff, 0x0, 0x2, 0x4, 0x3, 0x2, 0x4, 0x4, 0x10001, 0xa9f, 0x0, 0x8, 0x7, 0x8, 0xffffffffffff77d2, 0xd12a, 0xa99e, 0x3f, 0x4, 0x1, 0x4, 0x2562, 0x3, 0x2, 0xfffffffffffffc00, 0x7, 0x5, 0x6, 0x5, 0x7f, 0x2fba, 0x8, 0x7ff, 0x2, 0x1, 0x7, 0x0, 0x80000001, 0x2, 0x7f, 0x1f, 0x9, 0x4, 0xffffffffffffffff, 0x6, 0xfff, 0x9, 0x0, 0x10000, 0xffffffff, 0xf8b9, 0x8, 0x7ff, 0x101, 0x0, 0x20000, 0x7fff, 0x1000, 0x8, 0x80, 0x5f55fbde, 0x1f, 0xfffffffffffffffb, 0x3, 0x2, 0x10000, 0x2e4f, 0x8, 0x3, 0x6, 0xad8, 0x5, 0x0, 0x5, 0x101, 0x8, 0xfffffffffffffffc, 0x5, 0xffffffff, 0x2a, 0x8, 0x4, 0xdc2b, 0x7f, 0x18a, 0x3f, 0x101, 0x7, 0xd2, 0xfffffffffffffff7, 0x4, 0x4, 0x4, 0xfffffffffffffffb, 0x8, 0x2, 0x3, 0x6, 0xa, 0xffffffff, 0xffff, 0x4, 0x4, 0x6]}) 07:36:34 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x1000000000000) 07:36:34 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) 07:36:34 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x7}}}, 0x0}, 0x90) 07:36:34 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1, 0x5]}) 07:36:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1]}) 07:36:34 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x20000000000000) 07:36:34 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x8}}}, 0x0}, 0x90) 07:36:34 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x1233, 0xdc2b5d7420257947) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/236) 07:36:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff]}) 07:36:34 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x8000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) 07:36:34 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff, 0x1]}) 07:36:34 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x40000000000000) 07:36:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x9}}}, 0x0}, 0x90) 07:36:34 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3]}) 07:36:34 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x1233, 0xdc2b5d7420257947) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/236) 07:36:34 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3, 0x7ff]}) 07:36:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0xb}}}, 0x0}, 0x90) 07:36:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000]}) 07:36:35 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0xf0ff1f00000000) 07:36:35 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x800) 07:36:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000, 0x3]}) 07:36:35 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9]}) 07:36:35 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x100000000000000) 07:36:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0xc}}}, 0x0}, 0x90) 07:36:35 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x800) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000]}) 07:36:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400]}) 07:36:35 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 07:36:35 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42683, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:35 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x200000000000000) 07:36:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:35 executing program 1: r0 = shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) syz_open_dev$sndctrl(0x0, 0x52a, 0x1fd000) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50]}) 07:36:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9]}) 07:36:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400, 0x9b9, 0x100000000]}) 07:36:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x2}}}, 0x0}, 0x90) 07:36:35 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42683, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f]}) 07:36:35 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) socket$phonet(0x23, 0x2, 0x1) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async) 07:36:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50, 0x400]}) 07:36:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x3}}}, 0x0}, 0x90) 07:36:35 executing program 0: r0 = shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_RMID(r0, 0x0) (async) syz_open_dev$sndctrl(0x0, 0x52a, 0x1fd000) 07:36:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f, 0x50]}) 07:36:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x4}}}, 0x0}, 0x90) 07:36:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9]}) 07:36:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9, 0x1f]}) 07:36:35 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x4100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x1) 07:36:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x8}}}, 0x0}, 0x90) [ 935.521703][ T50] Bluetooth: hci0: command 0x0419 tx timeout 07:36:35 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x300000000000000) 07:36:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x6, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x600) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000240)={{0x6, 0x6, 0x4, 0x2, 'syz0\x00', 0xe0}, 0x1, [0x800, 0xc1c, 0x5, 0xfffffffffffffffd, 0x1, 0x1, 0xfffffffffffffc00, 0x5, 0x1, 0x4, 0x7fff, 0x8000000000000001, 0x7, 0x1ff, 0x20, 0x1, 0x80000001, 0x3, 0x9, 0x1000, 0x3ff, 0x9, 0x8001, 0x0, 0x1fa, 0x9, 0x1, 0x8a, 0x80000001, 0x4000000000000000, 0x3, 0xfffffffffffffffd, 0xfff, 0x8, 0xfffffffffffffff8, 0x7, 0x100, 0x9, 0x1, 0x5, 0xffff, 0x6, 0xf2d, 0x4a04af61, 0x0, 0x1, 0x0, 0x5, 0x5, 0x4, 0x9, 0xfffffffffffffff9, 0x47, 0x5, 0x5, 0x7, 0x5, 0x2, 0x100000001, 0x9, 0x6, 0x80000001, 0x8000000000000000, 0x9e51, 0x72, 0xa22a, 0x6, 0x100, 0x7fffffff, 0x80000001, 0x61, 0x800, 0x6, 0x3718, 0x8, 0x5, 0x20, 0x8, 0xc15, 0xd8, 0x5, 0x4, 0x6, 0x5, 0x5, 0x2, 0x81, 0x6, 0xcca1, 0x38, 0x5, 0x8000000000000001, 0x310, 0x1, 0x4, 0x9, 0x3, 0x7, 0x74b2, 0x8, 0x8, 0x6, 0xf77, 0x5b0, 0x5, 0x3, 0x7, 0x8000000000000001, 0x4, 0x3, 0x6, 0x4, 0x7, 0xfffffffffffffff9, 0x5, 0x3a590783, 0xffffffffffff07fa, 0x1, 0x7, 0x2, 0x6, 0x1, 0xfffffffffffffffa, 0x7, 0x80, 0x800, 0x81, 0x22c0]}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x0, r3}, 0x18) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x4100) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x1) 07:36:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0xc}}}, 0x0}, 0x90) 07:36:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000]}) 07:36:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000, 0x46c9]}) 07:36:35 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x400000000000000) 07:36:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x6, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x600) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000240)={{0x6, 0x6, 0x4, 0x2, 'syz0\x00', 0xe0}, 0x1, [0x800, 0xc1c, 0x5, 0xfffffffffffffffd, 0x1, 0x1, 0xfffffffffffffc00, 0x5, 0x1, 0x4, 0x7fff, 0x8000000000000001, 0x7, 0x1ff, 0x20, 0x1, 0x80000001, 0x3, 0x9, 0x1000, 0x3ff, 0x9, 0x8001, 0x0, 0x1fa, 0x9, 0x1, 0x8a, 0x80000001, 0x4000000000000000, 0x3, 0xfffffffffffffffd, 0xfff, 0x8, 0xfffffffffffffff8, 0x7, 0x100, 0x9, 0x1, 0x5, 0xffff, 0x6, 0xf2d, 0x4a04af61, 0x0, 0x1, 0x0, 0x5, 0x5, 0x4, 0x9, 0xfffffffffffffff9, 0x47, 0x5, 0x5, 0x7, 0x5, 0x2, 0x100000001, 0x9, 0x6, 0x80000001, 0x8000000000000000, 0x9e51, 0x72, 0xa22a, 0x6, 0x100, 0x7fffffff, 0x80000001, 0x61, 0x800, 0x6, 0x3718, 0x8, 0x5, 0x20, 0x8, 0xc15, 0xd8, 0x5, 0x4, 0x6, 0x5, 0x5, 0x2, 0x81, 0x6, 0xcca1, 0x38, 0x5, 0x8000000000000001, 0x310, 0x1, 0x4, 0x9, 0x3, 0x7, 0x74b2, 0x8, 0x8, 0x6, 0xf77, 0x5b0, 0x5, 0x3, 0x7, 0x8000000000000001, 0x4, 0x3, 0x6, 0x4, 0x7, 0xfffffffffffffff9, 0x5, 0x3a590783, 0xffffffffffff07fa, 0x1, 0x7, 0x2, 0x6, 0x1, 0xfffffffffffffffa, 0x7, 0x80, 0x800, 0x81, 0x22c0]}) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./file0/file0/file0\x00', 0x0, 0x0, r3}, 0x18) 07:36:35 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x11}}}, 0x0}, 0x90) 07:36:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3]}) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3, 0x1000]}) 07:36:35 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x401c5820, &(0x7f0000001e80)='\f') syz_open_dev$sndctrl(0x0, 0x2, 0xb8002) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)="8932843778424f1353e2b34c826ee1f8a0b25e159462a96237cc56e4a4f676d1b261bd1d7a83f00d4cc7eae5154997606ff0ec0c82ce53f8eb205b82d89a0ae68ff713dfd41be8908e2a6a3060379c9e0c88e5b589c6fbf8ab2980baf8df6c83d3fd58245a290bd0965cc9b329af42352082b8fa63d39db2bd186c38d4a774ec8aaaa3e1c7d5453e80a73fca0c1f18505f5a12da18f4db2a95ecb0db2a9ea0e36e62a221985abf8404cc450a59e04d0867511457725c3be0abcc1647103f6748cb98ef37") ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000100)="bce17407875da1ac3e494becd46c28049593f8ba7ab8ef784229b4082f06e831c38d04cfbee885ff03d6fe8be4e91944efeaea4efce9676204fc4efbdd17b61efa892b8b8f53fea839a73c05b85e07260ca1b04571e3ec576ea90f0f76bc8a176ecee5019ad85aedbdd6201a2d3d8f934ea6526af5ecd519692fde53e75f0827dfce2c45b83a7328dc58464ab736220e2a010b8fc5cf58ebad83b1fbb0fed94e6361ffa2bdf814ab39e6fd4c84e27dcc2368604c06a980f9411e7565ab4fe5a8a9c50a46919cc3a941bbf4de86d2480f8895692081b8bab1c9026ee7f678ed") 07:36:35 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x101182, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) 07:36:35 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x600000000000000) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6]}) 07:36:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6, 0x3]}) 07:36:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x15}}}, 0x0}, 0x90) 07:36:35 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x604000000000000) 07:36:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff]}) 07:36:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x401c5820, &(0x7f0000001e80)='\f') (async) syz_open_dev$sndctrl(0x0, 0x2, 0xb8002) (async) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)="8932843778424f1353e2b34c826ee1f8a0b25e159462a96237cc56e4a4f676d1b261bd1d7a83f00d4cc7eae5154997606ff0ec0c82ce53f8eb205b82d89a0ae68ff713dfd41be8908e2a6a3060379c9e0c88e5b589c6fbf8ab2980baf8df6c83d3fd58245a290bd0965cc9b329af42352082b8fa63d39db2bd186c38d4a774ec8aaaa3e1c7d5453e80a73fca0c1f18505f5a12da18f4db2a95ecb0db2a9ea0e36e62a221985abf8404cc450a59e04d0867511457725c3be0abcc1647103f6748cb98ef37") (async) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000100)="bce17407875da1ac3e494becd46c28049593f8ba7ab8ef784229b4082f06e831c38d04cfbee885ff03d6fe8be4e91944efeaea4efce9676204fc4efbdd17b61efa892b8b8f53fea839a73c05b85e07260ca1b04571e3ec576ea90f0f76bc8a176ecee5019ad85aedbdd6201a2d3d8f934ea6526af5ecd519692fde53e75f0827dfce2c45b83a7328dc58464ab736220e2a010b8fc5cf58ebad83b1fbb0fed94e6361ffa2bdf814ab39e6fd4c84e27dcc2368604c06a980f9411e7565ab4fe5a8a9c50a46919cc3a941bbf4de86d2480f8895692081b8bab1c9026ee7f678ed") 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff, 0x6]}) 07:36:35 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x810000000000000) 07:36:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x22}}}, 0x0}, 0x90) 07:36:35 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4]}) 07:36:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4, 0x1ff]}) 07:36:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x7d}}}, 0x0}, 0x90) 07:36:35 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x900000000000000) 07:36:35 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff]}) 07:36:36 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 07:36:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x155}}}, 0x0}, 0x90) 07:36:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8]}) 07:36:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff, 0x4]}) 07:36:36 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0xc00000000000000) 07:36:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x239}}}, 0x0}, 0x90) 07:36:36 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 07:36:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8, 0xffffffffffffffff]}) 07:36:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001]}) 07:36:36 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0xc5ac587ffff0000) 07:36:36 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/156) 07:36:36 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x249}}}, 0x0}, 0x90) 07:36:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4]}) 07:36:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001, 0x8]}) 07:36:36 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x1100000000000000) 07:36:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6]}) [ 936.481573][ T50] Bluetooth: hci4: command 0x0405 tx timeout 07:36:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01]}) 07:36:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4, 0x10001]}) 07:36:36 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x300}}}, 0x0}, 0x90) 07:36:36 executing program 2: syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/156) syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/156) (async) 07:36:36 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x2000000000000000) 07:36:36 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x101182, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x101182, 0x0) (async) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async) 07:36:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6, 0x4]}) 07:36:36 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x4000000000000000) 07:36:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x300}}}, 0x0}, 0x90) 07:36:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x3c8}}}, 0x0}, 0x90) 07:36:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000]}) 07:36:36 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x7dc7, 0x161a05) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x1, 0x3f, 0x1, 'syz1\x00'}, 0x1, [0x1000, 0x1, 0x4, 0x1, 0x6, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x89b6, 0x7, 0x6, 0x3fc1, 0xfffffffffffffffd, 0x1, 0x3, 0x2, 0xfffffffffffffffd, 0x2, 0x101, 0x3d, 0x7f, 0x7ff, 0x6, 0x40, 0xffff, 0x5, 0x4, 0x1000, 0x1000, 0x0, 0x7000000000000, 0x7, 0xfffffffffffffffe, 0x401, 0x6, 0x1ff, 0x1000, 0x0, 0x100000001, 0x300000000, 0x2, 0x2d4, 0x4, 0x0, 0x7, 0x5, 0x1000, 0x1, 0x1, 0xb67df6e, 0x6, 0x7, 0x380000000000, 0x7fffffff, 0x8, 0xfffffffffffffeff, 0x7fff, 0x8, 0x401, 0x1000, 0x2, 0x31, 0x2, 0x3, 0x4, 0x401, 0x70, 0x1, 0x91df, 0x3, 0x5, 0x8, 0x20, 0x1, 0x7, 0x1, 0xac2f, 0x5, 0x4, 0xe31e0, 0x5e, 0x6, 0xfffffffffffffffc, 0x8, 0x200000000000007, 0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1, 0x63, 0x1, 0x1, 0x1f, 0x100000001, 0x3, 0x1, 0x7fffffff, 0x100000000, 0x8001, 0x2, 0xffffffff80000001, 0x7943, 0xc626, 0x7, 0x7fff, 0x3, 0x67, 0x3ff, 0x7fff, 0x6, 0x3ff, 0x7fffffff, 0xf7c8, 0x6, 0x0, 0x0, 0x7, 0x6, 0x4, 0x9, 0x9, 0x4e, 0x40000000000, 0x9, 0x6, 0x8000000000000000]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x4) 07:36:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x3e0}}}, 0x0}, 0x90) 07:36:36 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x7f00000000000000) 07:36:36 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42683, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0x0) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 07:36:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e]}) 07:36:36 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01, 0x6]}) 07:36:36 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x406}}}, 0x0}, 0x90) 07:36:36 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140b, 0x820, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004025}, 0x4040854) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000b14000828bd7000fbdbdf25080001000100000008000300010000000800011e02000000080001000200000008003f00000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140e, 0x901, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0x4008804) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:36 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x7dc7, 0x161a05) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000040)={{0xa, 0x1, 0x3f, 0x1, 'syz1\x00'}, 0x1, [0x1000, 0x1, 0x4, 0x1, 0x6, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x89b6, 0x7, 0x6, 0x3fc1, 0xfffffffffffffffd, 0x1, 0x3, 0x2, 0xfffffffffffffffd, 0x2, 0x101, 0x3d, 0x7f, 0x7ff, 0x6, 0x40, 0xffff, 0x5, 0x4, 0x1000, 0x1000, 0x0, 0x7000000000000, 0x7, 0xfffffffffffffffe, 0x401, 0x6, 0x1ff, 0x1000, 0x0, 0x100000001, 0x300000000, 0x2, 0x2d4, 0x4, 0x0, 0x7, 0x5, 0x1000, 0x1, 0x1, 0xb67df6e, 0x6, 0x7, 0x380000000000, 0x7fffffff, 0x8, 0xfffffffffffffeff, 0x7fff, 0x8, 0x401, 0x1000, 0x2, 0x31, 0x2, 0x3, 0x4, 0x401, 0x70, 0x1, 0x91df, 0x3, 0x5, 0x8, 0x20, 0x1, 0x7, 0x1, 0xac2f, 0x5, 0x4, 0xe31e0, 0x5e, 0x6, 0xfffffffffffffffc, 0x8, 0x200000000000007, 0xffffffffffffffff, 0x2, 0x9, 0x3, 0x1, 0x63, 0x1, 0x1, 0x1f, 0x100000001, 0x3, 0x1, 0x7fffffff, 0x100000000, 0x8001, 0x2, 0xffffffff80000001, 0x7943, 0xc626, 0x7, 0x7fff, 0x3, 0x67, 0x3ff, 0x7fff, 0x6, 0x3ff, 0x7fffffff, 0xf7c8, 0x6, 0x0, 0x0, 0x7, 0x6, 0x4, 0x9, 0x9, 0x4e, 0x40000000000, 0x9, 0x6, 0x8000000000000000]}) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x4) 07:36:36 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x604}}}, 0x0}, 0x90) 07:36:36 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4]}) 07:36:36 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0xffefff1f00000000) 07:36:36 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140b, 0x820, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004025}, 0x4040854) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000b14000828bd7000fbdbdf25080001000100000008000300010000000800011e02000000080001000200000008003f00000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x800) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140e, 0x901, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0x4008804) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x140b, 0x820, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004025}, 0x4040854) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000b14000828bd7000fbdbdf25080001000100000008000300010000000800011e02000000080001000200000008003f00000000000800010002000000"], 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x140e, 0x901, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}}, 0x4008804) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) (async) 07:36:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000, 0xffffffffffffff01]}) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000500)={{0x8, 0x3, 0x7fffffff, 0x15, 'syz0\x00', 0x9e7c}, 0x1, [0x9, 0x0, 0x8, 0x0, 0x7, 0x3ff, 0x8, 0x80000000, 0x0, 0x9, 0x3, 0x2d, 0x0, 0x0, 0x8001, 0x8, 0x8a, 0x1, 0x5b57, 0x67, 0x5, 0x37, 0xe9c, 0x9, 0x7ff, 0x3, 0xffffffff, 0x2, 0x4, 0xb81, 0x6, 0x81, 0x10000, 0x0, 0x9, 0xa656, 0x8, 0x101, 0x0, 0x6, 0xfffffffffffff800, 0x20, 0xfff, 0x2, 0x1000, 0xdf13, 0xd2, 0x61e, 0x2, 0xffffffffffffff26, 0xe85f, 0x1, 0x2, 0x6, 0x3, 0x8, 0x2, 0x4, 0x8, 0x2, 0x0, 0x2, 0x4, 0x2, 0xfe, 0xfb, 0xfffffffffffffffd, 0x9fd, 0x4, 0xffffffffffffffc0, 0x4, 0x3f, 0x0, 0x80, 0x2, 0x0, 0xe719, 0xaa, 0x4, 0x4, 0x6, 0x6, 0x76, 0x1ff, 0x1ff, 0x5d, 0x4, 0xffffffffffffffc0, 0x0, 0x7, 0x401, 0x1, 0x8, 0x2, 0x0, 0x1, 0x8, 0x9, 0x9, 0xfcf, 0x1f3b, 0x8001, 0x1, 0x1000, 0x8000000000000000, 0x0, 0x2, 0x80000000, 0x8000, 0x400, 0x4b4f, 0x4, 0x40, 0xc5e5, 0x3, 0x5, 0x6, 0xcbf, 0x5, 0x6, 0x400, 0x20000000000, 0x0, 0x1, 0xffffffff, 0x5, 0x9, 0x7]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000c00), 0x4, 0x2000) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000c80)={{0x9, 0x0, 0x80000000, 0xf6b5, 'syz0\x00', 0x9}, 0x6, 0x10, 0x4, r2, 0x7, 0x2, 'syz0\x00', &(0x7f0000000c40)=['syz0\x00', '\x00', 'syz0\x00', '.]\x00', '-%\x00', '\x00', '^#\x00'], 0x15}) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000a40)={{0x1, 0x1, 0x200, 0x9, '\x00', 0x4a}, 0x4, 0x200, 0x3, r3, 0x3, 0x2, 'syz0\x00', &(0x7f0000000a00)=['\x00', 'syz0\x00', '-%\x00'], 0x9}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0xa, 0x5, 0x7, 0x7, 'syz0\x00', 0xffffffff}, 0x0, [0x2, 0x3, 0x2, 0x7fffffff, 0x9, 0xffffffffffff43f2, 0x2, 0x10001, 0x100000000, 0x6, 0x100000001, 0x100, 0x1, 0x2, 0x9, 0xffffffffffff0000, 0x9, 0xffff, 0xfa9, 0x3, 0x8, 0x8, 0x7, 0x7, 0x9, 0xfffffffffffffffa, 0x4, 0x693, 0x3022, 0x2, 0x53a, 0x3, 0xf08, 0x7fffffffffffffff, 0x8, 0x6, 0x0, 0x11c1776c, 0x6, 0x6, 0x100000001, 0x4, 0x100000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa8, 0x6, 0x3, 0xfffffffffffff459, 0x4455, 0x20, 0x2, 0x2, 0x99, 0x3, 0xf11, 0x2714b12f, 0x4, 0x7, 0x66affae0, 0x0, 0x0, 0x6, 0x800, 0x5, 0xfff, 0xe131, 0x1, 0x4, 0x6, 0x8, 0x0, 0x9c0, 0x5, 0x5, 0xa85, 0xff, 0x1b7, 0x10000, 0x81, 0x61, 0x0, 0x9, 0x3, 0x7fffffff, 0x6, 0x8000000000000001, 0xf0b, 0x7, 0x10001, 0x2, 0x0, 0x200, 0x8000, 0x329, 0x9, 0x5b2, 0x3f, 0x101, 0x8, 0xb2d, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0x3, 0x4, 0x100000000, 0x0, 0x3f, 0x9, 0x4a, 0x49, 0x3ff, 0x8, 0x3, 0x2, 0x10000, 0xfffffffffffffbd7, 0xfffffffffffffffe, 0x2bb4, 0x81, 0x133]}) ptrace$setsig(0x4203, r3, 0xfff, &(0x7f0000000b80)={0x24, 0x4}) 07:36:37 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff]}) 07:36:37 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) 07:36:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0xc00}}}, 0x0}, 0x90) 07:36:37 executing program 1: gettid() bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e, 0x80000000]}) 07:36:37 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000500)={{0x8, 0x3, 0x7fffffff, 0x15, 'syz0\x00', 0x9e7c}, 0x1, [0x9, 0x0, 0x8, 0x0, 0x7, 0x3ff, 0x8, 0x80000000, 0x0, 0x9, 0x3, 0x2d, 0x0, 0x0, 0x8001, 0x8, 0x8a, 0x1, 0x5b57, 0x67, 0x5, 0x37, 0xe9c, 0x9, 0x7ff, 0x3, 0xffffffff, 0x2, 0x4, 0xb81, 0x6, 0x81, 0x10000, 0x0, 0x9, 0xa656, 0x8, 0x101, 0x0, 0x6, 0xfffffffffffff800, 0x20, 0xfff, 0x2, 0x1000, 0xdf13, 0xd2, 0x61e, 0x2, 0xffffffffffffff26, 0xe85f, 0x1, 0x2, 0x6, 0x3, 0x8, 0x2, 0x4, 0x8, 0x2, 0x0, 0x2, 0x4, 0x2, 0xfe, 0xfb, 0xfffffffffffffffd, 0x9fd, 0x4, 0xffffffffffffffc0, 0x4, 0x3f, 0x0, 0x80, 0x2, 0x0, 0xe719, 0xaa, 0x4, 0x4, 0x6, 0x6, 0x76, 0x1ff, 0x1ff, 0x5d, 0x4, 0xffffffffffffffc0, 0x0, 0x7, 0x401, 0x1, 0x8, 0x2, 0x0, 0x1, 0x8, 0x9, 0x9, 0xfcf, 0x1f3b, 0x8001, 0x1, 0x1000, 0x8000000000000000, 0x0, 0x2, 0x80000000, 0x8000, 0x400, 0x4b4f, 0x4, 0x40, 0xc5e5, 0x3, 0x5, 0x6, 0xcbf, 0x5, 0x6, 0x400, 0x20000000000, 0x0, 0x1, 0xffffffff, 0x5, 0x9, 0x7]}) r1 = syz_open_dev$sndctrl(&(0x7f0000000c00), 0x4, 0x2000) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000c80)={{0x9, 0x0, 0x80000000, 0xf6b5, 'syz0\x00', 0x9}, 0x6, 0x10, 0x4, r2, 0x7, 0x2, 'syz0\x00', &(0x7f0000000c40)=['syz0\x00', '\x00', 'syz0\x00', '.]\x00', '-%\x00', '\x00', '^#\x00'], 0x15}) (async, rerun: 32) r3 = gettid() (rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000a40)={{0x1, 0x1, 0x200, 0x9, '\x00', 0x4a}, 0x4, 0x200, 0x3, r3, 0x3, 0x2, 'syz0\x00', &(0x7f0000000a00)=['\x00', 'syz0\x00', '-%\x00'], 0x9}) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000000)={{0xa, 0x5, 0x7, 0x7, 'syz0\x00', 0xffffffff}, 0x0, [0x2, 0x3, 0x2, 0x7fffffff, 0x9, 0xffffffffffff43f2, 0x2, 0x10001, 0x100000000, 0x6, 0x100000001, 0x100, 0x1, 0x2, 0x9, 0xffffffffffff0000, 0x9, 0xffff, 0xfa9, 0x3, 0x8, 0x8, 0x7, 0x7, 0x9, 0xfffffffffffffffa, 0x4, 0x693, 0x3022, 0x2, 0x53a, 0x3, 0xf08, 0x7fffffffffffffff, 0x8, 0x6, 0x0, 0x11c1776c, 0x6, 0x6, 0x100000001, 0x4, 0x100000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa8, 0x6, 0x3, 0xfffffffffffff459, 0x4455, 0x20, 0x2, 0x2, 0x99, 0x3, 0xf11, 0x2714b12f, 0x4, 0x7, 0x66affae0, 0x0, 0x0, 0x6, 0x800, 0x5, 0xfff, 0xe131, 0x1, 0x4, 0x6, 0x8, 0x0, 0x9c0, 0x5, 0x5, 0xa85, 0xff, 0x1b7, 0x10000, 0x81, 0x61, 0x0, 0x9, 0x3, 0x7fffffff, 0x6, 0x8000000000000001, 0xf0b, 0x7, 0x10001, 0x2, 0x0, 0x200, 0x8000, 0x329, 0x9, 0x5b2, 0x3f, 0x101, 0x8, 0xb2d, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0x3, 0x4, 0x100000000, 0x0, 0x3f, 0x9, 0x4a, 0x49, 0x3ff, 0x8, 0x3, 0x2, 0x10000, 0xfffffffffffffbd7, 0xfffffffffffffffe, 0x2bb4, 0x81, 0x133]}) (async, rerun: 32) ptrace$setsig(0x4203, r3, 0xfff, &(0x7f0000000b80)={0x24, 0x4}) 07:36:37 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x1100}}}, 0x0}, 0x90) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7]}) 07:36:37 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0xffff1f87ffff0000) 07:36:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4, 0x52fe988e]}) 07:36:37 executing program 2: gettid() (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:37 executing program 4: syz_open_dev$sndctrl(0x0, 0xa57, 0x50d00) 07:36:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x1500}}}, 0x0}, 0x90) 07:36:37 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0xffffffff00000000) 07:36:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1]}) 07:36:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff, 0x4]}) 07:36:37 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x224100, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1000}]}) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000001c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:36:37 executing program 1: syz_open_dev$sndctrl(0x0, 0xa57, 0x50d00) syz_open_dev$sndctrl(0x0, 0xa57, 0x50d00) (async) 07:36:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1]}) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7, 0xfff]}) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1]}) 07:36:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x2000}}}, 0x0}, 0x90) 07:36:37 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000640)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x6, 0xf77, 0xffff2a98, '\x00', 0x3e}, 0x6, 0x2, 0x100, r2, 0x9, 0x800, 'syz0\x00', &(0x7f0000000280)=['}+/-^n(!$.(+.\x00', '\x00\xe1', '&/\x00', '\x96+ \x00', 'q\x00', '/&\x00', '+r:])\x00\x1d\xb6\xe8Q\x9eX\xd9\xb3\t\xe7?[\xddJ\x11A4$\x9e\xf8aR\xb1#r9b\x12\x8d\xf4\x8e\xdd\x174n\v\x80\xb4\a\xd9\x9e\x100\xc7m\xe6\xea(\xdf\xb2\xd3\x02\xd0\xdd\xa51\xee2\xa0\xbcj\xf0\xfb\xf2\r-\x83C\xb2:\x96\rH\x12h', '\xaeR\xa4\xf3\xdeH\xc8\x90m\xef\xf5\x12\xf1\x9b\xd2.\x90\x1c\x94J\x1cn(\x16\x04\x00\xc4VR`\xcc\xf8\xa17\xb6 \x11\x1fD\x9e\x067\xbfI&\x97\x91*DuL\x87\xc3\xed\x1e\v\xaa\x18\x90\x17\xa1.\xbf,\x15\x1b\xc2\xd50\xa7/\xebf\xa8\xd8l\xfe\xb9\xbd\xa5\xbe\xfc\xed\xa8\\\x97=\xb3\xa8KU\x8d.\x98\xab\x12r}}\xb3\xc9\x8d\x17s\xdc\xee\x85\x15?)\xa7f\x11', '\x00'], 0xfffffffffffffe1d}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000018000000d60500007ffcfffffe030000090000000900000005000000"]) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x140e, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 07:36:37 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x8400, 0x0) (async, rerun: 32) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (rerun: 32) ioctl$TUNGETDEVNETNS(r1, 0x5450, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9]}) 07:36:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1, 0x7]}) 07:36:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x2200}}}, 0x0}, 0x90) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff]}) 07:36:37 executing program 2: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:37 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000640)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async, rerun: 32) r2 = gettid() (rerun: 32) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000040)={{0x0, 0x6, 0xf77, 0xffff2a98, '\x00', 0x3e}, 0x6, 0x2, 0x100, r2, 0x9, 0x800, 'syz0\x00', &(0x7f0000000280)=['}+/-^n(!$.(+.\x00', '\x00\xe1', '&/\x00', '\x96+ \x00', 'q\x00', '/&\x00', '+r:])\x00\x1d\xb6\xe8Q\x9eX\xd9\xb3\t\xe7?[\xddJ\x11A4$\x9e\xf8aR\xb1#r9b\x12\x8d\xf4\x8e\xdd\x174n\v\x80\xb4\a\xd9\x9e\x100\xc7m\xe6\xea(\xdf\xb2\xd3\x02\xd0\xdd\xa51\xee2\xa0\xbcj\xf0\xfb\xf2\r-\x83C\xb2:\x96\rH\x12h', '\xaeR\xa4\xf3\xdeH\xc8\x90m\xef\xf5\x12\xf1\x9b\xd2.\x90\x1c\x94J\x1cn(\x16\x04\x00\xc4VR`\xcc\xf8\xa17\xb6 \x11\x1fD\x9e\x067\xbfI&\x97\x91*DuL\x87\xc3\xed\x1e\v\xaa\x18\x90\x17\xa1.\xbf,\x15\x1b\xc2\xd50\xa7/\xebf\xa8\xd8l\xfe\xb9\xbd\xa5\xbe\xfc\xed\xa8\\\x97=\xb3\xa8KU\x8d.\x98\xab\x12r}}\xb3\xc9\x8d\x17s\xdc\xee\x85\x15?)\xa7f\x11', '\x00'], 0xfffffffffffffe1d}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000018000000d60500007ffcfffffe030000090000000900000005000000"]) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x140e, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9, 0x1]}) [ 937.601945][ T5744] Bluetooth: hci0: command 0x0405 tx timeout 07:36:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x3902}}}, 0x0}, 0x90) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7]}) 07:36:37 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff, 0x9]}) 07:36:37 executing program 1: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:37 executing program 2: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7, 0x7ff]}) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3]}) 07:36:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x4000}}}, 0x0}, 0x90) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3, 0x7]}) 07:36:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x4902}}}, 0x0}, 0x90) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40]}) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40, 0x3]}) 07:36:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x5501}}}, 0x0}, 0x90) 07:36:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4, 0x40]}) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4]}) 07:36:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x7d00}}}, 0x0}, 0x90) 07:36:37 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3, 0x4]}) 07:36:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3]}) 07:36:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0xc803}}}, 0x0}, 0x90) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff, 0x3]}) 07:36:38 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) connect$bt_sco(r2, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x224100, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x1000}]}) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f00000001c0)={0x1f, @none}, 0x8) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff]}) 07:36:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0xe003}}}, 0x0}, 0x90) 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7, 0x7fffffff]}) 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7]}) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80, 0xfffffffffffffff7]}) 07:36:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf, 0x0}, 0x90) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80]}) 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5, 0x80]}) 07:36:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2}}}, 0x0}, 0x90) 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5]}) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4, 0x5]}) 07:36:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x3}}}, 0x0}, 0x90) [ 938.428342][ T28] kauditd_printk_skb: 44656 callbacks suppressed [ 938.428355][ T28] audit: type=1400 audit(5470598.400:1987516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11258 comm="syz-executor.3" name="syzkaller.PHX9em" dev="nvme0n1p2" ino=1762 [ 938.440804][ T28] audit: type=1400 audit(5470598.400:1987517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11257 comm="syz-executor.0" name="syzkaller.YeGlZY" dev="nvme0n1p2" ino=1751 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4]}) [ 938.449175][T25601] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.450019][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.451469][ T28] audit: type=1400 audit(5470598.400:1987518): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=11257 comm="syz-executor.0" name="syzkaller.YeGlZY" dev="nvme0n1p2" ino=1751 [ 938.457848][ C0] audit: audit_lost=499863 audit_rate_limit=0 audit_backlog_limit=64 [ 938.457867][ C0] audit: backlog limit exceeded [ 938.458111][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 938.461268][T25601] audit: audit_lost=499864 audit_rate_limit=0 audit_backlog_limit=64 [ 938.462547][ C0] audit: audit_lost=499865 audit_rate_limit=0 audit_backlog_limit=64 07:36:38 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x4}}}, 0x0}, 0x90) 07:36:38 executing program 3: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7, 0x0, 0x4]}) 07:36:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x8}}}, 0x0}, 0x90) 07:36:38 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7]}) [ 938.561615][ T50] Bluetooth: hci4: command 0x0407 tx timeout 07:36:38 executing program 0: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8, 0x7]}) 07:36:38 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x2, 0x0, 0x2}, 0x48) 07:36:38 executing program 1: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8]}) 07:36:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001, 0x8]}) 07:36:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xc}}}, 0x0}, 0x90) 07:36:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001]}) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770, 0x100000001]}) 07:36:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x11}}}, 0x0}, 0x90) 07:36:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770]}) 07:36:38 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5, 0x770]}) 07:36:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x15}}}, 0x0}, 0x90) 07:36:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x22}}}, 0x0}, 0x90) 07:36:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5]}) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9, 0x0, 0x5]}) 07:36:39 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0xfff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9]}) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff, 0x9]}) 07:36:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x7d}}}, 0x0}, 0x90) 07:36:39 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000000)=0xfff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff]}) 07:36:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x155}}}, 0x0}, 0x90) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8, 0x7fff]}) 07:36:39 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8]}) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7, 0x8]}) 07:36:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x239}}}, 0x0}, 0x90) 07:36:39 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7]}) 07:36:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9, 0x7]}) 07:36:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x249}}}, 0x0}, 0x90) 07:36:39 executing program 4: socket$pptp(0x18, 0x1, 0x2) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9]}) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3, 0x9]}) 07:36:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3]}) 07:36:39 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r0, 0x2, 0x0, 0x2}, 0x48) 07:36:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x300}}}, 0x0}, 0x90) 07:36:39 executing program 0: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) 07:36:39 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000, 0x3]}) 07:36:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x3c8}}}, 0x0}, 0x90) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000]}) 07:36:39 executing program 0: syz_open_dev$sndctrl(0x0, 0xa57, 0x424400) 07:36:39 executing program 4: syslog(0x3, &(0x7f0000000000)=""/132, 0x84) 07:36:39 executing program 2: socket$pptp(0x18, 0x1, 0x2) (async) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000, 0x8000]}) 07:36:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x3e0}}}, 0x0}, 0x90) 07:36:39 executing program 3: syz_open_dev$sndctrl(0x0, 0xa57, 0x424400) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000]}) 07:36:39 executing program 1: syslog(0x0, &(0x7f0000000000)=""/132, 0x84) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6, 0x10000]}) [ 939.681626][ T5744] Bluetooth: hci0: command 0x0405 tx timeout 07:36:39 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000001000)=""/4102) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/247) 07:36:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x406}}}, 0x0}, 0x90) 07:36:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6]}) 07:36:39 executing program 2: syslog(0x0, &(0x7f0000000000)=""/132, 0x84) 07:36:39 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x6}, 0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4abec5ee1241d090, r0}, 0x18) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0xa57, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000001000)=""/4102) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/247) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101, 0x6]}) 07:36:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x604}}}, 0x0}, 0x90) 07:36:39 executing program 1: syslog(0x0, &(0x7f0000000000)=""/132, 0x84) 07:36:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101]}) 07:36:39 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x6}, 0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4abec5ee1241d090, r0}, 0x18) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x6}, 0x8) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4abec5ee1241d090, r0}, 0x18) (async) 07:36:39 executing program 4: syz_open_dev$sndctrl(0x0, 0x3fb, 0x8040) 07:36:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000, 0xffffffffffff3101]}) 07:36:39 executing program 2: syslog(0x3, 0x0, 0x0) 07:36:39 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xc00}}}, 0x0}, 0x90) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000]}) 07:36:39 executing program 3: syz_open_dev$sndctrl(0x0, 0x3fb, 0x8040) 07:36:39 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x4008, r0}, 0x2f) 07:36:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2, 0x20000]}) 07:36:39 executing program 0: syslog(0x0, 0x0, 0x0) syslog(0x3, &(0x7f0000000000)=""/132, 0x84) syslog(0x1, 0x0, 0x0) syslog(0x2, &(0x7f00000000c0)=""/40, 0x28) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x1100}}}, 0x0}, 0x90) 07:36:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2]}) 07:36:40 executing program 2: syslog(0x3, 0x0, 0x0) 07:36:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x1500}}}, 0x0}, 0x90) 07:36:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff, 0x2]}) 07:36:40 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000000)=@o_path={&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x4008, r0}, 0x2f) 07:36:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff]}) 07:36:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6, 0x7fff]}) 07:36:40 executing program 4: syslog(0x3, 0x0, 0x0) 07:36:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2000}}}, 0x0}, 0x90) 07:36:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6]}) 07:36:40 executing program 1: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x404202, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x401, 0x1, 0x0, 0x6}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9, 0x6]}) 07:36:40 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9]}) 07:36:40 executing program 1: syz_open_dev$sndctrl(0x0, 0xa56, 0x101800) 07:36:40 executing program 2: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0x14) (async) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x404202, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x401, 0x1, 0x0, 0x6}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) 07:36:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2200}}}, 0x0}, 0x90) 07:36:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9]}) 07:36:40 executing program 3: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x2, r1, r2, 0xffffffffffffffff, r3, 0x0, 0xfff8}, 0x7, 0x0, 0x4, 0x200, 0x0, r4, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r5 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000300)=""/42) 07:36:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9, 0x9]}) 07:36:40 executing program 4: syz_open_dev$sndctrl(0x0, 0xa56, 0x101800) syz_open_dev$sndctrl(0x0, 0xa56, 0x101800) (async) 07:36:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x3902}}}, 0x0}, 0x90) 07:36:40 executing program 2: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x2, r1, r2, 0xffffffffffffffff, r3, 0x0, 0xfff8}, 0x7, 0x0, 0x4, 0x200, 0x0, r4, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r5 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000300)=""/42) 07:36:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8]}) 07:36:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8, 0x9]}) 07:36:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x4000}}}, 0x0}, 0x90) 07:36:40 executing program 3: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) (async) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) (async) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x2, r1, r2, 0xffffffffffffffff, r3, 0x0, 0xfff8}, 0x7, 0x0, 0x4, 0x200, 0x0, r4, 0x1}) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) (async) r5 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x7000) (async) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000300)=""/42) 07:36:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff]}) 07:36:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff, 0x8]}) 07:36:40 executing program 4: r0 = shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000280)={{0x2, r1, r2, 0xffffffffffffffff, r3, 0x0, 0xfff8}, 0x7, 0x0, 0x4, 0x200, 0x0, r4, 0x1}) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r5 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x7000) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000300)=""/42) 07:36:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x4902}}}, 0x0}, 0x90) [ 940.642063][ T5744] Bluetooth: hci4: command 0x0407 tx timeout 07:36:40 executing program 1: syz_open_dev$sndctrl(0x0, 0x1, 0x400) 07:36:40 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x47) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x7ff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230, 0x1ff]}) 07:36:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230]}) 07:36:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x5501}}}, 0x0}, 0x90) 07:36:40 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@broadcast, @broadcast]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x4a0000, 0x0) 07:36:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff]}) 07:36:40 executing program 2: syz_open_dev$sndctrl(0x0, 0x1, 0x400) 07:36:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x7d00}}}, 0x0}, 0x90) 07:36:40 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x47) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000000)=0x7ff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:36:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff, 0xb230]}) 07:36:40 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x5460, 0x0) (async, rerun: 32) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'vcan0\x00'}) (async, rerun: 32) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x1, 0x2, [@broadcast, @broadcast]}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) (async) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x4a0000, 0x0) 07:36:40 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x3, 0x0) 07:36:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9, 0x3ff]}) 07:36:40 executing program 4: socket$phonet(0x23, 0x2, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) 07:36:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xc803}}}, 0x0}, 0x90) 07:36:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101, 0x0, 0x9]}) 07:36:41 executing program 2: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={r0, r1, 0x0, 0x5, 0x29, 0xfffffff9, 0x759, 0xad000000, 0x2, 0x3, 0x3, 0x7fe}) r2 = syz_open_dev$sndctrl(0x0, 0x1, 0x12141) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200000) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 07:36:41 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) read$smackfs_logging(r0, &(0x7f00000000c0), 0xffffff91) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0xc223, 0x2}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$smackfs_logging(r1, &(0x7f0000000040), 0x14) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x1) 07:36:41 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0xc, 0x0) 07:36:41 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9, 0x101]}) 07:36:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xe003}}}, 0x0}, 0x90) 07:36:41 executing program 0: socket$phonet(0x23, 0x2, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) socket$phonet(0x23, 0x2, 0x1) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) (async) 07:36:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={r0, r1, 0x0, 0x5, 0x29, 0xfffffff9, 0x759, 0xad000000, 0x2, 0x3, 0x3, 0x7fe}) (async) r2 = syz_open_dev$sndctrl(0x0, 0x1, 0x12141) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x200000) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 07:36:41 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (async) read$smackfs_logging(r0, &(0x7f00000000c0), 0xffffff91) (async, rerun: 32) read$smackfs_logging(r0, &(0x7f0000000080), 0x14) (async, rerun: 32) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0xc223, 0x2}) (async, rerun: 32) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) read$smackfs_logging(r1, &(0x7f0000000040), 0x14) (async) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000100)=0x1) 07:36:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000, 0x9]}) [ 941.269846][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 941.274058][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 941.277735][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 07:36:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x200000}}}, 0x0}, 0x90) 07:36:41 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2c81c3) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x8000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000200)=""/220) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/91) [ 941.302585][T20679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 941.305205][T20679] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 941.307484][T20679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 07:36:41 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x80040, 0x0) 07:36:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0xf0ff1f}}}, 0x0}, 0x90) 07:36:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5, 0x80000000]}) 07:36:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x1000000}}}, 0x0}, 0x90) 07:36:41 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x18}, 0x18) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080), 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:36:41 executing program 2: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x80040, 0x0) [ 941.429753][T11541] chnl_net:caif_netlink_parms(): no params data found 07:36:41 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2c81c3) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x8000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000200)=""/220) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/91) syz_open_dev$sndctrl(0x0, 0x0, 0x2c81c3) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x8000) (async) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000200)=""/220) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000080)=""/91) (async) 07:36:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x111000) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x4, 0x5, 0x4, 0x3, '\x00', 0x18}, 0x5, 0x10000000, 0x2, r2, 0x3, 0x9, 'syz1\x00', &(0x7f0000000040)=['\'\'#&\x00', '!\x00', '+\x00'], 0x9}) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) 07:36:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1, 0x5]}) [ 941.473468][ T5034] ================================================================== [ 941.475687][ T5034] BUG: KASAN: slab-use-after-free in sco_conn_del+0x9c/0x498 [ 941.477554][ T5034] Write of size 4 at addr ffff0000f4d10080 by task syz-executor.3/5034 [ 941.479649][ T5034] [ 941.480250][ T5034] CPU: 1 PID: 5034 Comm: syz-executor.3 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 941.482782][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 941.485457][ T5034] Call trace: [ 941.486355][ T5034] dump_backtrace+0x1b8/0x1e4 [ 941.487528][ T5034] show_stack+0x2c/0x3c [ 941.488605][ T5034] dump_stack_lvl+0xd0/0x124 [ 941.489769][ T5034] print_report+0x178/0x518 [ 941.490983][ T5034] kasan_report+0xd8/0x138 [ 941.492165][ T5034] kasan_check_range+0x254/0x294 [ 941.493518][ T5034] __kasan_check_write+0x20/0x30 [ 941.494856][ T5034] sco_conn_del+0x9c/0x498 [ 941.496090][ T5034] sco_disconn_cfm+0x8c/0xdc [ 941.497257][ T5034] hci_conn_hash_flush+0x100/0x220 [ 941.498614][ T5034] hci_dev_close_sync+0x7d8/0xf20 [ 941.499948][ T5034] hci_unregister_dev+0x1e4/0x4a8 [ 941.501301][ T5034] vhci_release+0x7c/0xd0 [ 941.502531][ T5034] __fput+0x30c/0x738 [ 941.503617][ T5034] ____fput+0x20/0x30 [ 941.504701][ T5034] task_work_run+0x230/0x2e0 [ 941.505936][ T5034] do_exit+0x618/0x1f64 [ 941.507066][ T5034] do_group_exit+0x194/0x22c [ 941.508298][ T5034] get_signal+0x1500/0x15ec [ 941.509514][ T5034] do_signal+0x238/0x3e8c [ 941.510611][ T5034] do_notify_resume+0x74/0x1f4 [ 941.511958][ T5034] el0_svc+0xac/0x168 [ 941.513056][ T5034] el0t_64_sync_handler+0x84/0xfc [ 941.514453][ T5034] el0t_64_sync+0x190/0x194 [ 941.515678][ T5034] [ 941.516295][ T5034] Allocated by task 20141: [ 941.517548][ T5034] kasan_save_track+0x40/0x78 [ 941.518786][ T5034] kasan_save_alloc_info+0x40/0x50 [ 941.520139][ T5034] __kasan_kmalloc+0xac/0xc4 [ 941.521375][ T5034] __kmalloc_node_track_caller+0x2f8/0x620 [ 941.523009][ T5034] kmalloc_reserve+0x11c/0x23c [ 941.524362][ T5034] __alloc_skb+0x1c8/0x3d8 [ 941.525616][ T5034] audit_log_start+0x154/0x894 [ 941.526865][ T5034] common_lsm_audit+0xd0/0x1744 [ 941.528185][ T5034] smack_log+0x35c/0x48c [ 941.529279][ T5034] smk_tskacc+0x250/0x320 [ 941.530383][ T5034] smk_curacc+0xa8/0xe8 [ 941.531536][ T5034] smack_inode_permission+0x280/0x318 [ 941.533045][ T5034] security_inode_permission+0xac/0xfc [ 941.534509][ T5034] inode_permission+0xd0/0x3b4 [ 941.535814][ T5034] link_path_walk+0x284/0xc78 [ 941.537085][ T5034] path_lookupat+0x90/0x3d0 [ 941.538275][ T5034] filename_lookup+0x1d4/0x4e0 [ 941.539559][ T5034] user_path_at_empty+0x5c/0x84 [ 941.540907][ T5034] __arm64_sys_umount+0xf8/0x17c [ 941.542265][ T5034] invoke_syscall+0x98/0x2b8 [ 941.543533][ T5034] el0_svc_common+0x130/0x23c [ 941.544866][ T5034] do_el0_svc+0x48/0x58 [ 941.546033][ T5034] el0_svc+0x54/0x168 [ 941.547134][ T5034] el0t_64_sync_handler+0x84/0xfc [ 941.548508][ T5034] el0t_64_sync+0x190/0x194 [ 941.549695][ T5034] [ 941.550305][ T5034] Freed by task 28: [ 941.551352][ T5034] kasan_save_track+0x40/0x78 [ 941.552640][ T5034] kasan_save_free_info+0x54/0x6c [ 941.554006][ T5034] poison_slab_object+0x124/0x18c [ 941.555376][ T5034] __kasan_slab_free+0x3c/0x70 [ 941.556592][ T5034] kfree+0x144/0x3cc [ 941.557665][ T5034] skb_free_head+0xd0/0x19c [ 941.558865][ T5034] skb_release_data+0x444/0x5c8 [ 941.560197][ T5034] kfree_skb_reason+0x238/0x6f4 [ 941.561534][ T5034] kauditd_hold_skb+0x11c/0x200 [ 941.562832][ T5034] kauditd_send_queue+0x27c/0x2e4 [ 941.564231][ T5034] kauditd_thread+0x778/0xa00 [ 941.565542][ T5034] kthread+0x288/0x310 [ 941.566651][ T5034] ret_from_fork+0x10/0x20 [ 941.567860][ T5034] [ 941.568449][ T5034] The buggy address belongs to the object at ffff0000f4d10000 07:36:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2000000}}}, 0x0}, 0x90) 07:36:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9, 0x1]}) [ 941.568449][ T5034] which belongs to the cache kmalloc-2k of size 2048 [ 941.572292][ T5034] The buggy address is located 128 bytes inside of [ 941.572292][ T5034] freed 2048-byte region [ffff0000f4d10000, ffff0000f4d10800) [ 941.576003][ T5034] [ 941.576668][ T5034] The buggy address belongs to the physical page: [ 941.578406][ T5034] page:00000000b1b78682 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x134d10 [ 941.581148][ T5034] head:00000000b1b78682 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 941.583549][ T5034] flags: 0x5ffc00000000840(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 941.585696][ T5034] page_type: 0xffffffff() [ 941.586880][ T5034] raw: 05ffc00000000840 ffff0000c0002000 dead000000000100 dead000000000122 [ 941.589198][ T5034] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 941.591568][ T5034] page dumped because: kasan: bad access detected [ 941.593317][ T5034] [ 941.593953][ T5034] Memory state around the buggy address: [ 941.595449][ T5034] ffff0000f4d0ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 941.597680][ T5034] ffff0000f4d10000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 941.599816][ T5034] >ffff0000f4d10080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 941.602070][ T5034] ^ [ 941.603177][ T5034] ffff0000f4d10100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 941.605277][ T5034] ffff0000f4d10180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 941.607476][ T5034] ================================================================== [ 941.610369][ T5034] Disabling lock debugging due to kernel taint [ 941.616160][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.617963][T11541] bridge0: port 1(bridge_slave_0) entered disabled state 07:36:41 executing program 0: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x18, 0x0) [ 941.630667][T11541] bridge_slave_0: entered allmulticast mode [ 941.635924][T11541] bridge_slave_0: entered promiscuous mode 07:36:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2000000}}}, 0x0}, 0x90) 07:36:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x3000000}}}, 0x0}, 0x90) [ 941.651081][ T5034] ------------[ cut here ]------------ [ 941.651123][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.652631][ T5034] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 941.652646][ T5034] index 7452 is out of range for type 'unsigned long[8]' [ 941.652655][ T5034] CPU: 1 PID: 5034 Comm: syz-executor.3 Tainted: G B 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 941.652668][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 941.652675][ T5034] Call trace: [ 941.652678][ T5034] dump_backtrace+0x1b8/0x1e4 [ 941.652693][ T5034] show_stack+0x2c/0x3c [ 941.652701][ T5034] dump_stack_lvl+0xd0/0x124 [ 941.652711][ T5034] dump_stack+0x1c/0x28 [ 941.656451][T11541] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.656573][ T5034] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 941.659829][T11541] bridge_slave_1: entered allmulticast mode [ 941.661203][ T5034] queued_spin_lock_slowpath+0x944/0xcf8 [ 941.661224][ T5034] do_raw_spin_lock+0x320/0x348 07:36:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20, 0x9]}) [ 941.670665][T11541] bridge_slave_1: entered promiscuous mode [ 941.672058][ T5034] _raw_spin_lock_bh+0x50/0x60 [ 941.672078][ T5034] lock_sock_nested+0x74/0x11c [ 941.672090][ T5034] sco_conn_del+0xec/0x498 [ 941.672102][ T5034] sco_disconn_cfm+0x8c/0xdc [ 941.672113][ T5034] hci_conn_hash_flush+0x100/0x220 [ 941.683602][ T5034] hci_dev_close_sync+0x7d8/0xf20 [ 941.684912][ T5034] hci_unregister_dev+0x1e4/0x4a8 [ 941.686233][ T5034] vhci_release+0x7c/0xd0 [ 941.687341][ T5034] __fput+0x30c/0x738 [ 941.688386][ T5034] ____fput+0x20/0x30 [ 941.689413][ T5034] task_work_run+0x230/0x2e0 [ 941.690608][ T5034] do_exit+0x618/0x1f64 [ 941.691673][ T5034] do_group_exit+0x194/0x22c [ 941.692963][ T5034] get_signal+0x1500/0x15ec [ 941.694098][ T5034] do_signal+0x238/0x3e8c 07:36:41 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2000000}}}, 0x0}, 0x90) [ 941.695267][ T5034] do_notify_resume+0x74/0x1f4 [ 941.696495][ T5034] el0_svc+0xac/0x168 [ 941.697438][ T5034] el0t_64_sync_handler+0x84/0xfc [ 941.698687][ T5034] el0t_64_sync+0x190/0x194 [ 941.699933][ T5034] ---[ end trace ]--- [ 941.700958][ T5034] Unable to handle kernel paging request at virtual address ffff80008ec00db8 [ 941.703205][ T5034] KASAN: probably user-memory-access in range [0x0000000476006dc0-0x0000000476006dc7] [ 941.705584][ T5034] Mem abort info: [ 941.706473][ T5034] ESR = 0x0000000096000047 [ 941.707613][ T5034] EC = 0x25: DABT (current EL), IL = 32 bits [ 941.709180][ T5034] SET = 0, FnV = 0 [ 941.710082][ T5034] EA = 0, S1PTW = 0 [ 941.711108][ T5034] FSC = 0x07: level 3 translation fault [ 941.712568][ T5034] Data abort info: [ 941.713478][ T5034] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 07:36:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3, 0x20]}) [ 941.715034][ T5034] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 941.716566][ T5034] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 941.718119][ T5034] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001adbd5000 [ 941.719957][ T5034] [ffff80008ec00db8] pgd=10000001b2c71003, p4d=10000001b2c71003, pud=10000001b2c72003, pmd=10000001b2c77003, pte=0000000000000000 [ 941.723314][ T5034] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 941.725051][ T5034] Modules linked in: [ 941.725960][ T5034] CPU: 1 PID: 5034 Comm: syz-executor.3 Tainted: G B 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 941.728802][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 941.731280][ T5034] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 941.733301][ T5034] pc : queued_spin_lock_slowpath+0x3c8/0xcf8 [ 941.734808][ T5034] lr : queued_spin_lock_slowpath+0x944/0xcf8 [ 941.736340][ T5034] sp : ffff80009e0f7240 [ 941.737377][ T5034] x29: ffff80009e0f72e0 x28: 0000000000007475 x27: 1ffff00013c1ee54 [ 941.739374][ T5034] x26: dfff800000000000 x25: 1fffe0001e9a2013 x24: 0000000000080000 [ 941.741364][ T5034] x23: ffff0001b4036d88 x22: ffff80008ec00db8 x21: ffff0001b4036d80 [ 941.743460][ T5034] x20: 1fffe00036806db0 x19: ffff0000f4d10098 x18: 1fffe00036804396 [ 941.745519][ T5034] x17: 0000000000000000 x16: ffff80008ad6b09c x15: ffff7000123e3bf0 [ 941.747529][ T5034] x14: 1ffff000123e3bf0 x13: 0000000000000004 x12: ffffffffffffffff [ 941.749585][ T5034] x11: ffff7000123e3bf0 x10: ffff80008ec00d80 x9 : 0000000000000001 [ 941.751527][ T5034] x8 : 0000000000000000 x7 : fffffffffffd5d80 x6 : fffffffffffd5d50 [ 941.753625][ T5034] x5 : ffff80009e0f6af8 x4 : ffff80008ed5a390 x3 : ffff8000801c14f0 [ 941.755757][ T5034] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b4036d88 [ 941.757839][ T5034] Call trace: [ 941.758668][ T5034] queued_spin_lock_slowpath+0x3c8/0xcf8 [ 941.760070][ T5034] do_raw_spin_lock+0x320/0x348 [ 941.761308][ T5034] _raw_spin_lock_bh+0x50/0x60 [ 941.761595][ T5744] Bluetooth: hci0: command 0x0405 tx timeout [ 941.762470][ T5034] lock_sock_nested+0x74/0x11c [ 941.765360][ T5034] sco_conn_del+0xec/0x498 [ 941.766442][ T5034] sco_disconn_cfm+0x8c/0xdc [ 941.767568][ T5034] hci_conn_hash_flush+0x100/0x220 [ 941.768900][ T5034] hci_dev_close_sync+0x7d8/0xf20 [ 941.770200][ T5034] hci_unregister_dev+0x1e4/0x4a8 [ 941.771436][ T5034] vhci_release+0x7c/0xd0 [ 941.772608][ T5034] __fput+0x30c/0x738 [ 941.773573][ T5034] ____fput+0x20/0x30 [ 941.774554][ T5034] task_work_run+0x230/0x2e0 [ 941.775729][ T5034] do_exit+0x618/0x1f64 [ 941.776734][ T5034] do_group_exit+0x194/0x22c 07:36:41 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x18, 0xf, &(0x7f0000001180)=@ringbuf={{}, {}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x2000000}}}, 0x0}, 0x90) 07:36:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x111000) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x4, 0x5, 0x4, 0x3, '\x00', 0x18}, 0x5, 0x10000000, 0x2, r2, 0x3, 0x9, 'syz1\x00', &(0x7f0000000040)=['\'\'#&\x00', '!\x00', '+\x00'], 0x9}) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 941.777947][ T5034] get_signal+0x1500/0x15ec [ 941.779110][ T5034] do_signal+0x238/0x3e8c [ 941.780183][ T5034] do_notify_resume+0x74/0x1f4 [ 941.781470][ T5034] el0_svc+0xac/0x168 [ 941.782466][ T5034] el0t_64_sync_handler+0x84/0xfc [ 941.783759][ T5034] el0t_64_sync+0x190/0x194 [ 941.784930][ T5034] Code: aa1603e0 97431587 aa1703e0 52800081 (f90002d5) [ 941.786700][ T5034] ---[ end trace 0000000000000000 ]--- 07:36:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3]}) 07:36:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 07:36:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x111000) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x4, 0x5, 0x4, 0x3, '\x00', 0x18}, 0x5, 0x10000000, 0x2, r2, 0x3, 0x9, 'syz1\x00', &(0x7f0000000040)=['\'\'#&\x00', '!\x00', '+\x00'], 0x9}) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 941.905545][T20679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 941.907602][T20679] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 941.909770][T20679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 941.913560][T20679] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 941.915956][T20679] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 941.918143][T20679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 07:36:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000, 0x3]}) 07:36:41 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 07:36:41 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000000)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x1f, 0x8, 0x5d, 0x4, 0x80000001, 0x1fe0000000000, 0x64, 0x6, 0x8000000000000000, 0x2, 0x6, 0x72, 0x6, 0x3, 0x401, 0x2, 0x655, 0x1, 0x1, 0x80, 0x0, 0x1, 0x9, 0x7fff, 0x80000000]}) [ 941.987805][ T5034] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 941.989688][ T5034] SMP: stopping secondary CPUs [ 941.990925][ T5034] Kernel Offset: disabled [ 941.992001][ T5034] CPU features: 0x0,00000081,c0080094,42017203 [ 941.993547][ T5034] Memory Limit: none [ 942.185094][ T5034] Rebooting in 86400 seconds..