ting program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x1800})

03:06:21 executing program 0:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, &(0x7f0000000100))

03:06:21 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:21 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x4000, 0x2, {0x77359400}, {0x1, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:21 executing program 2:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000100))

03:06:21 executing program 1:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0xc0181, 0x0)
ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100)

03:06:21 executing program 0:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, &(0x7f0000000100))

03:06:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x2500})

03:06:21 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:21 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x4000, 0x2, {0x77359400}, {0x1, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:21 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, &(0x7f0000000100))

03:06:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x5c00})

03:06:21 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:21 executing program 2:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000100))

03:06:21 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:21 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x4000, 0x2, {0x77359400}, {0x1, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:21 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:21 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000100))

03:06:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xff00})

03:06:21 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, &(0x7f0000000100))

03:06:21 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x2, @userptr=0x6, 0x2})

03:06:21 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x4000, 0x2, {0x77359400}, {0x1, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:22 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x1000000})

03:06:22 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, &(0x7f0000000100))

03:06:22 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000100))

03:06:22 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr=0x6, 0x2})

03:06:22 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:22 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x2, {0x77359400}, {0x1, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x2000000})

03:06:22 executing program 0:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100))

03:06:22 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, &(0x7f0000000100))

03:06:22 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr, 0x2})

03:06:22 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:22 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:22 executing program 2:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100))

03:06:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x3000000})

03:06:22 executing program 0:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100))

03:06:22 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:22 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:22 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x72ee737fa8533045, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:22 executing program 2:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100))

03:06:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x4000000})

03:06:22 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:22 executing program 0:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100))

03:06:22 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:22 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x1f, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:22 executing program 2:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100))

03:06:22 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:22 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, 0x0)

03:06:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x5000000})

03:06:22 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:22 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, 0x0)

03:06:23 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:23 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:23 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, 0x0)

03:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x6000000})

03:06:23 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:23 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:23 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, 0x0)

03:06:23 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:23 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc4c85512, 0x0)

03:06:23 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:23 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105511, 0x0)

03:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x7000000})

03:06:23 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:23 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:23 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x8000000})

03:06:23 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})

03:06:23 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:23 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&+dx'}, 0x280e, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:23 executing program 1:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x9000000})

03:06:23 executing program 4:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:23 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:23 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:23 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&+dx'}, 0x0, 0x3, @offset=0x7fffffff, 0x7ff})

03:06:23 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xa000000})

03:06:23 executing program 4:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:23 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:23 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&+dx'}, 0x0, 0x0, @offset=0x7fffffff, 0x7ff})

03:06:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xb000000})

03:06:23 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:24 executing program 4:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:24 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:24 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:24 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&+dx'}, 0x0, 0x0, @offset, 0x7ff})

03:06:24 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xc000000})

03:06:24 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:24 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:24 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:24 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:24 executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x100000001, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '&+dx'}})

03:06:24 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xd000000})

03:06:24 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:24 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:24 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:24 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:24 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:24 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xe000000})

03:06:24 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:24 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:24 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:24 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:24 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:24 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x16, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:24 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x10000000})

03:06:24 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:24 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:24 executing program 4:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:24 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:25 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x11000000})

03:06:25 executing program 2:
r0 = syz_open_dev$vim2m(0x0, 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:25 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0xfd, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:25 executing program 3:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405515, &(0x7f0000000100))

03:06:25 executing program 4:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:25 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x453, 0x100, 0x70bd2b, 0x25dfdbfb, "d1456c700559db09db120b2f848bf216234073170158346a202c6e5f360ceaa8e8c48902428782affebd523974f1f9b697687a1b2c9946d574ec61a757db7bd894c7de64a358b708", ["", "", ""]}, 0x58}, 0x1, 0x0, 0x0, 0x59}, 0x20000005)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:25 executing program 2:
r0 = syz_open_dev$vim2m(0x0, 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:25 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x12000000})

03:06:25 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0xa2, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:25 executing program 3:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405515, &(0x7f0000000100))

03:06:25 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socketpair(0x23, 0x1, 0x395a6799, &(0x7f0000000000))
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:25 executing program 2:
r0 = syz_open_dev$vim2m(0x0, 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:25 executing program 4:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:25 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x18000000})

03:06:25 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:25 executing program 3:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405515, &(0x7f0000000100))

03:06:25 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:25 executing program 0:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:25 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:25 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x4, 0x2, @userptr=0x6, 0x2})

03:06:25 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:25 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x25000000})

03:06:25 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:25 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:25 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:25 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:25 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x5c000000})

03:06:25 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x2, @userptr=0x6, 0x2})

03:06:25 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:25 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:26 executing program 3:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:26 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:26 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0xff000000})

03:06:26 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr=0x6, 0x2})

03:06:26 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:26 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:26 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:26 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:26 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr, 0x2})

03:06:26 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:06:26 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:26 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:26 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:26 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:26 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2})

03:06:26 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:26 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, &(0x7f0000000100))

03:06:26 executing program 4:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:26 executing program 0:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:26 executing program 2:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:26 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3})

03:06:26 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:26 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:26 executing program 3:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405515, &(0x7f0000000100))

03:06:26 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:26 executing program 0:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:26 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4})

03:06:26 executing program 1:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c6d4970"}, 0x0, 0x0, @userptr})

03:06:26 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:26 executing program 3:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405515, &(0x7f0000000100))

03:06:26 executing program 0:
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x81f0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:27 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:27 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5})

03:06:27 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:27 executing program 3:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405515, &(0x7f0000000100))

03:06:27 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:27 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:27 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6})

03:06:27 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, 0x0)

03:06:27 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:27 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7})

03:06:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, 0x0)

03:06:27 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, 0x0)

03:06:27 executing program 1:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405514, &(0x7f0000000100))

03:06:27 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405515, 0x0)

03:06:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8})

03:06:27 executing program 1:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405514, &(0x7f0000000100))

03:06:27 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:27 executing program 4:
r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9})

03:06:27 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:27 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={[], 0x11}}, 0x8)

03:06:27 executing program 1:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405514, &(0x7f0000000100))

03:06:27 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:27 executing program 4:
r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:28 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:28 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa})

03:06:28 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:28 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb})

03:06:28 executing program 4:
r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:28 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:28 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x0, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:28 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:28 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc})

03:06:28 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:28 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x10001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x0, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993"})

03:06:28 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x70000, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:28 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:28 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
recvfrom$netrom(r3, &(0x7f00000002c0)=""/52, 0x34, 0x40012026, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x8e8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x8c4, 0x8, 0x0, 0x1, [{0x778, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f514c68ccbf76b19bdd3eace4f6348e7412340f3ac526f163ff95a237006600f"}, @WGPEER_A_ALLOWEDIPS={0x4e8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1b}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x200, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3219cc52a2565f73b1407a4f84841bcb5db594eac1fac981fc0d2dded05697d2"}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82289bd1ad37affb48f232f2e1bd0ba7eaf2534e760bb5f67b80693e0f0e65bf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local, 0x80}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "efc7908f97f4f91d1dfa303b22b87027c838493640e028f12a7ca3664c21a5da"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9de7306b0a4900b6983fcd8be6b91299c252a0212e56f61caa006b2ab01cc981"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}]}]}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x8000}, 0x11)

03:06:28 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:28 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:28 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd})

03:06:28 executing program 2:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4)
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))

03:06:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x4, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:29 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
recvfrom$netrom(r3, &(0x7f00000002c0)=""/52, 0x34, 0x40012026, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x8e8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x8c4, 0x8, 0x0, 0x1, [{0x778, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f514c68ccbf76b19bdd3eace4f6348e7412340f3ac526f163ff95a237006600f"}, @WGPEER_A_ALLOWEDIPS={0x4e8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1b}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x200, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3219cc52a2565f73b1407a4f84841bcb5db594eac1fac981fc0d2dded05697d2"}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82289bd1ad37affb48f232f2e1bd0ba7eaf2534e760bb5f67b80693e0f0e65bf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local, 0x80}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "efc7908f97f4f91d1dfa303b22b87027c838493640e028f12a7ca3664c21a5da"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9de7306b0a4900b6983fcd8be6b91299c252a0212e56f61caa006b2ab01cc981"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}]}]}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x8000}, 0x11)

03:06:29 executing program 4:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:29 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe})

03:06:29 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:29 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', <r2=>0x0})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
recvfrom$netrom(r3, &(0x7f00000002c0)=""/52, 0x34, 0x40012026, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)
sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000bc0)={0x8e8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x2}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x8c4, 0x8, 0x0, 0x1, [{0x778, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f514c68ccbf76b19bdd3eace4f6348e7412340f3ac526f163ff95a237006600f"}, @WGPEER_A_ALLOWEDIPS={0x4e8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1b}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x200, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3219cc52a2565f73b1407a4f84841bcb5db594eac1fac981fc0d2dded05697d2"}]}, {0xb8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "82289bd1ad37affb48f232f2e1bd0ba7eaf2534e760bb5f67b80693e0f0e65bf"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local, 0x80}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "efc7908f97f4f91d1dfa303b22b87027c838493640e028f12a7ca3664c21a5da"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9de7306b0a4900b6983fcd8be6b91299c252a0212e56f61caa006b2ab01cc981"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}]}]}]}, 0x8e8}, 0x1, 0x0, 0x0, 0x8000}, 0x11)

03:06:29 executing program 2:
socketpair(0x2c, 0x3, 0x2, &(0x7f0000000000))

03:06:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x1, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:29 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:29 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10})

03:06:29 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
recvfrom$netrom(r2, &(0x7f00000002c0)=""/52, 0x34, 0x40012026, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg1\x00'})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:29 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x44002, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r1, 0xc0045406)

03:06:29 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, &(0x7f0000000100))

03:06:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x2, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:29 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11})

03:06:29 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:29 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})
r2 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffd0, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"9cc7b440a186d4923b7471cc45e4316a", 0x0, r3, {0x6}, {0x6, 0x36f}, 0xd91, [0x1000, 0x1, 0x6, 0x9, 0x62a, 0x100000001, 0x1, 0x7ff, 0x6, 0x4, 0x0, 0x12, 0xfffffffffffeffff, 0x79f]})
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)

03:06:29 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
recvfrom$netrom(r2, &(0x7f00000002c0)=""/52, 0x34, 0x40012026, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x1, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:29 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405514, &(0x7f0000000100))

03:06:29 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12})

03:06:29 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:29 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})
r2 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffd0, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"9cc7b440a186d4923b7471cc45e4316a", 0x0, r3, {0x6}, {0x6, 0x36f}, 0xd91, [0x1000, 0x1, 0x6, 0x9, 0x62a, 0x100000001, 0x1, 0x7ff, 0x6, 0x4, 0x0, 0x12, 0xfffffffffffeffff, 0x79f]})
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)

03:06:29 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
recvfrom$netrom(r2, &(0x7f00000002c0)=""/52, 0x34, 0x40012026, &(0x7f0000000300)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:29 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x81, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:29 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405514, &(0x7f0000000100))

03:06:29 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:29 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18})

03:06:29 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})
r2 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffd0, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"9cc7b440a186d4923b7471cc45e4316a", 0x0, r3, {0x6}, {0x6, 0x36f}, 0xd91, [0x1000, 0x1, 0x6, 0x9, 0x62a, 0x100000001, 0x1, 0x7ff, 0x6, 0x4, 0x0, 0x12, 0xfffffffffffeffff, 0x79f]})
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)

03:06:29 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0x40405514, &(0x7f0000000100))

03:06:29 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f00000003c0)={@my=0x0})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51600f94"}, 0x1, 0x4, @offset=0x2, 0x7})

03:06:30 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x25})

03:06:30 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})
r2 = syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffd0, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000140)={"9cc7b440a186d4923b7471cc45e4316a", 0x0, r3, {0x6}, {0x6, 0x36f}, 0xd91, [0x1000, 0x1, 0x6, 0x9, 0x62a, 0x100000001, 0x1, 0x7ff, 0x6, 0x4, 0x0, 0x12, 0xfffffffffffeffff, 0x79f]})

03:06:30 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, 0x0)

03:06:30 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x402000, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51600f94"}, 0x0, 0x4, @offset=0x2, 0x7})

03:06:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c})

03:06:30 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, 0x0)

03:06:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})
syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffd0, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100))

03:06:30 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51600f94"}, 0x0, 0x0, @offset=0x2, 0x7})

03:06:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300})

03:06:30 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0x40405514, 0x0)

03:06:30 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51600f94"}, 0x0, 0x0, @offset, 0x7})

03:06:30 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x500})

03:06:30 executing program 1:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})
syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0xffffffffffffffd0, 0x2)

03:06:30 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 0:
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x0, 0x4, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51600f94"}})

03:06:30 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x600})

03:06:30 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x0, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:30 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x400000, 0x0)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:30 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:31 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:31 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x700})

03:06:31 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:31 executing program 4:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x7, 0x1, 0x0, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993"})

03:06:31 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:31 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:31 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x900})

03:06:31 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:31 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:31 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:31 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:31 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:31 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:31 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa00})

03:06:31 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:31 executing program 3:
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:31 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:31 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:31 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb00})

03:06:31 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0xffff, &(0x7f0000000280)=0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:31 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:31 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:31 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040))

03:06:31 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:31 executing program 2:
socketpair(0x5, 0xa, 0x2, &(0x7f0000000040))
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:31 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc00})

03:06:31 executing program 3:
syz_emit_vhci(0x0, 0x0)

03:06:32 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:06:32 executing program 1:
r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:32 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040))

03:06:32 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd00})

03:06:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:32 executing program 3:
syz_emit_vhci(0x0, 0x0)

03:06:32 executing program 1:
r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:32 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:06:32 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe00})

03:06:32 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040))

03:06:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:32 executing program 1:
r0 = syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:32 executing program 3:
syz_emit_vhci(0x0, 0x0)

03:06:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:32 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1100})

03:06:32 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:06:32 executing program 4:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000040))

03:06:32 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:32 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:32 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1200})

[ 2146.814308][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:32 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:32 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1800})

03:06:32 executing program 0:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:06:32 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:32 executing program 4:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000040))

03:06:32 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:32 executing program 1:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:32 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2500})

[ 2147.071827][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:33 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c00})

03:06:33 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0x3, 0x3}}]}}, 0x4b)

03:06:33 executing program 0:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:06:33 executing program 4:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000040))

03:06:33 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:33 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:33 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff00})

[ 2147.356481][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:33 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:33 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x3e}, @l2cap_cid_signaling={{0x3a}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}, @l2cap_conf_req={{0x4, 0x6, 0xc}, {0xe6, 0x6, [@l2cap_conf_flushto={0x2, 0x2, 0x2}, @l2cap_conf_flushto={0x2, 0x2, 0x3}]}}]}}, 0x43)

03:06:33 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:33 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000})

03:06:33 executing program 0:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:06:33 executing program 4:
socketpair(0xa, 0x2, 0x0, 0x0)

[ 2147.605274][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:33 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x2e}, @l2cap_cid_signaling={{0x2a}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}, @l2cap_create_chan_req={{0xc, 0xd1, 0x5}, {0xf0ac, 0x5, 0x81}}]}}, 0x33)

03:06:33 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:33 executing program 4:
socketpair(0xa, 0x2, 0x0, 0x0)

03:06:33 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000000})

03:06:33 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x25}, @l2cap_cid_signaling={{0x21}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x20, 0x2}, {0x1}}]}}, 0x2a)

[ 2147.783372][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:33 executing program 0:
socketpair(0xa, 0x3, 0x0, 0x0)

03:06:33 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:33 executing program 4:
socketpair(0xa, 0x2, 0x0, 0x0)

[ 2147.924934][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:33 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3000000})

03:06:33 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000000c0)={0x9, 0x0, 0x101, 0x7fff, '\x00', 0xac2})

03:06:33 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:33 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x1f}, @l2cap_cid_signaling={{0x1b}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0xfffd, 0x101}}]}}, 0x24)

03:06:33 executing program 4 (fault-call:0 fault-nth:0):
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:33 executing program 0:
socketpair(0xa, 0x3, 0x0, 0x0)

03:06:34 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000})

03:06:34 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

[ 2148.188291][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2148.195860][T21663] FAULT_INJECTION: forcing a failure.
[ 2148.195860][T21663] name failslab, interval 1, probability 0, space 0, times 0
03:06:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2148.234621][T21663] CPU: 0 PID: 21663 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
[ 2148.243446][T21663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2148.253615][T21663] Call Trace:
[ 2148.256915][T21663]  dump_stack+0x183/0x22e
[ 2148.261278][T21663]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2148.267046][T21663]  ? show_regs_print_info+0x12/0x12
[ 2148.272278][T21663]  ? __might_sleep+0x100/0x100
[ 2148.277092][T21663]  ? __lock_acquire+0x5e40/0x5e40
[ 2148.282194][T21663]  should_fail+0x384/0x4b0
[ 2148.286647][T21663]  ? __anon_vma_prepare+0x61/0x470
[ 2148.291791][T21663]  should_failslab+0x5/0x20
[ 2148.296351][T21663]  kmem_cache_alloc+0x62/0x2e0
[ 2148.301156][T21663]  __anon_vma_prepare+0x61/0x470
[ 2148.306131][T21663]  do_huge_pmd_anonymous_page+0xc6f/0xd60
[ 2148.311890][T21663]  ? count_memcg_event_mm+0x270/0x2b0
[ 2148.317377][T21663]  ? thp_get_unmapped_area+0x2a0/0x2a0
[ 2148.322881][T21663]  handle_mm_fault+0x1c2c/0x24f0
[ 2148.327876][T21663]  ? finish_fault+0x210/0x210
03:06:34 executing program 0:
socketpair(0xa, 0x3, 0x0, 0x0)

[ 2148.332591][T21663]  ? vmacache_find+0x4ef/0x5d0
[ 2148.337386][T21663]  ? vmacache_update+0x9f/0xf0
[ 2148.342206][T21663]  do_user_addr_fault+0x60f/0xb20
[ 2148.347279][T21663]  exc_page_fault+0xa1/0x1e0
[ 2148.351911][T21663]  asm_exc_page_fault+0x1e/0x30
[ 2148.356796][T21663] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[ 2148.362553][T21663] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f
[ 2148.382182][T21663] RSP: 0018:ffffc90002887e18 EFLAGS: 00010293
[ 2148.388281][T21663] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040
[ 2148.397224][T21663] RDX: 1ffff92000510fb0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2148.405197][T21663] RBP: ffffc90002887f08 R08: dffffc0000000000 R09: fffffbfff1ae726e
[ 2148.413168][T21663] R10: fffffbfff1ae726e R11: 0000000000000000 R12: 0000000020000040
[ 2148.421132][T21663] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000005
[ 2148.429132][T21663]  __sys_socketpair+0x138/0xde0
[ 2148.434004][T21663]  ? __ia32_sys_socket+0x80/0x80
[ 2148.438955][T21663]  ? print_irqtrace_events+0x220/0x220
[ 2148.444414][T21663]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2148.450422][T21663]  __x64_sys_socketpair+0x97/0xb0
[ 2148.455443][T21663]  do_syscall_64+0x2d/0x70
[ 2148.459855][T21663]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2148.465743][T21663] RIP: 0033:0x45e219
[ 2148.469632][T21663] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2148.489319][T21663] RSP: 002b:00007f8595759c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 2148.497896][T21663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
[ 2148.505865][T21663] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
[ 2148.513924][T21663] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2148.521915][T21663] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000
[ 2148.529922][T21663] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
03:06:34 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x2, 0x6}}]}}, 0x1c)

03:06:34 executing program 4 (fault-call:0 fault-nth:1):
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:34 executing program 0 (fault-call:0 fault-nth:0):
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:34 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5000000})

03:06:34 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x0, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993", 0x32344d59})

03:06:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2148.725986][T21680] FAULT_INJECTION: forcing a failure.
[ 2148.725986][T21680] name failslab, interval 1, probability 0, space 0, times 0
[ 2148.747420][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2148.791419][T21684] FAULT_INJECTION: forcing a failure.
[ 2148.791419][T21684] name failslab, interval 1, probability 0, space 0, times 0
[ 2148.808098][T21684] CPU: 0 PID: 21684 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0
[ 2148.816923][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2148.827679][T21684] Call Trace:
[ 2148.830978][T21684]  dump_stack+0x183/0x22e
[ 2148.835337][T21684]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2148.841087][T21684]  ? show_regs_print_info+0x12/0x12
[ 2148.846306][T21684]  ? __might_sleep+0x100/0x100
[ 2148.851090][T21684]  ? __lock_acquire+0x5e40/0x5e40
[ 2148.856139][T21684]  should_fail+0x384/0x4b0
[ 2148.860584][T21684]  ? __anon_vma_prepare+0x61/0x470
[ 2148.865729][T21684]  should_failslab+0x5/0x20
[ 2148.870263][T21684]  kmem_cache_alloc+0x62/0x2e0
[ 2148.875079][T21684]  __anon_vma_prepare+0x61/0x470
[ 2148.880146][T21684]  do_huge_pmd_anonymous_page+0xc6f/0xd60
[ 2148.885901][T21684]  ? count_memcg_event_mm+0x270/0x2b0
[ 2148.892533][T21684]  ? thp_get_unmapped_area+0x2a0/0x2a0
[ 2148.898038][T21684]  handle_mm_fault+0x1c2c/0x24f0
[ 2148.903143][T21684]  ? finish_fault+0x210/0x210
[ 2148.908946][T21684]  ? vmacache_find+0x4ef/0x5d0
[ 2148.913879][T21684]  ? vmacache_update+0x9f/0xf0
[ 2148.918786][T21684]  do_user_addr_fault+0x60f/0xb20
[ 2148.923878][T21684]  exc_page_fault+0xa1/0x1e0
[ 2148.928638][T21684]  asm_exc_page_fault+0x1e/0x30
[ 2148.933535][T21684] RIP: 0010:__put_user_nocheck_4+0x3/0x11
03:06:34 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0x1, 0x0, "dc18a4ff5a13e2d7de5d2e493d08506d1ce6cf8dc22a9e186439c9d812558993"})

[ 2148.939902][T21684] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f
[ 2148.959772][T21684] RSP: 0018:ffffc900068c7e18 EFLAGS: 00010297
[ 2148.966202][T21684] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000000
[ 2148.974201][T21684] RDX: 1ffff92000d18fb0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2148.982201][T21684] RBP: ffffc900068c7f08 R08: dffffc0000000000 R09: fffffbfff1ae726e
[ 2148.990191][T21684] R10: fffffbfff1ae726e R11: 0000000000000000 R12: 0000000020000000
[ 2148.998176][T21684] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000005
[ 2149.006179][T21684]  __sys_socketpair+0x138/0xde0
[ 2149.011071][T21684]  ? __ia32_sys_socket+0x80/0x80
[ 2149.016043][T21684]  ? print_irqtrace_events+0x220/0x220
[ 2149.021526][T21684]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2149.028635][T21684]  __x64_sys_socketpair+0x97/0xb0
[ 2149.033700][T21684]  do_syscall_64+0x2d/0x70
[ 2149.038135][T21684]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2149.044943][T21684] RIP: 0033:0x45e219
[ 2149.049329][T21684] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2149.069184][T21684] RSP: 002b:00007fb099de1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 2149.077622][T21684] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
03:06:34 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x7, 0x8}, {0x9, 0x51, 0x4, 0x7ff}}]}}, 0x15)

[ 2149.085699][T21684] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a
[ 2149.094022][T21684] RBP: 00007fb099de1ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2149.102184][T21684] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[ 2149.110189][T21684] R13: 00007fffc2f64d8f R14: 00007fb099de29c0 R15: 000000000119bf8c
03:06:35 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6000000})

[ 2149.163423][T21680] CPU: 1 PID: 21680 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
[ 2149.172338][T21680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2149.182514][T21680] Call Trace:
[ 2149.185810][T21680]  dump_stack+0x183/0x22e
[ 2149.190161][T21680]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2149.195894][T21680]  ? show_regs_print_info+0x12/0x12
[ 2149.201210][T21680]  ? __might_sleep+0x100/0x100
[ 2149.206282][T21680]  ? __lock_acquire+0x5e40/0x5e40
[ 2149.212347][T21680]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2149.218016][T21680]  should_fail+0x384/0x4b0
[ 2149.222467][T21680]  ? __anon_vma_prepare+0xaa/0x470
[ 2149.227600][T21680]  should_failslab+0x5/0x20
[ 2149.232130][T21680]  kmem_cache_alloc+0x62/0x2e0
[ 2149.236939][T21680]  __anon_vma_prepare+0xaa/0x470
[ 2149.242877][T21680]  do_huge_pmd_anonymous_page+0xc6f/0xd60
[ 2149.249303][T21680]  ? count_memcg_event_mm+0x270/0x2b0
[ 2149.254706][T21680]  ? thp_get_unmapped_area+0x2a0/0x2a0
[ 2149.260204][T21680]  handle_mm_fault+0x1c2c/0x24f0
[ 2149.265235][T21680]  ? finish_fault+0x210/0x210
[ 2149.270243][T21680]  ? vmacache_find+0x4ef/0x5d0
[ 2149.275133][T21680]  ? vmacache_update+0x9f/0xf0
[ 2149.279940][T21680]  do_user_addr_fault+0x60f/0xb20
[ 2149.285565][T21680]  exc_page_fault+0xa1/0x1e0
[ 2149.290324][T21680]  asm_exc_page_fault+0x1e/0x30
[ 2149.295210][T21680] RIP: 0010:__put_user_nocheck_4+0x3/0x11
[ 2149.301930][T21680] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f
[ 2149.323531][T21680] RSP: 0018:ffffc90006827e18 EFLAGS: 00010293
[ 2149.329951][T21680] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020000040
[ 2149.338030][T21680] RDX: 1ffff92000d04fb0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2149.346776][T21680] RBP: ffffc90006827f08 R08: dffffc0000000000 R09: fffffbfff1ae726e
[ 2149.354919][T21680] R10: fffffbfff1ae726e R11: 0000000000000000 R12: 0000000020000040
[ 2149.363474][T21680] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000005
[ 2149.372746][T21680]  __sys_socketpair+0x138/0xde0
[ 2149.378105][T21680]  ? __ia32_sys_socket+0x80/0x80
[ 2149.383062][T21680]  ? print_irqtrace_events+0x220/0x220
[ 2149.389364][T21680]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2149.395369][T21680]  __x64_sys_socketpair+0x97/0xb0
[ 2149.400423][T21680]  do_syscall_64+0x2d/0x70
[ 2149.405565][T21680]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2149.412487][T21680] RIP: 0033:0x45e219
[ 2149.416393][T21680] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2149.436010][T21680] RSP: 002b:00007f8595759c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[ 2149.444760][T21680] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219
[ 2149.453774][T21680] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a
03:06:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:35 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2149.462688][T21680] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2149.471718][T21680] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001
[ 2149.479791][T21680] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
[ 2149.553378][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:35 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:35 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7000000})

[ 2149.706660][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:35 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:35 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x0, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:35 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:35 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000})

03:06:35 executing program 3 (fault-call:0 fault-nth:0):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2149.854491][T21711] FAULT_INJECTION: forcing a failure.
[ 2149.854491][T21711] name failslab, interval 1, probability 0, space 0, times 0
[ 2149.917382][T21711] CPU: 0 PID: 21711 Comm: syz-executor.3 Not tainted 5.11.0-rc4-syzkaller #0
[ 2149.926206][T21711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2149.936284][T21711] Call Trace:
[ 2149.939679][T21711]  dump_stack+0x183/0x22e
[ 2149.944036][T21711]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2149.949779][T21711]  ? show_regs_print_info+0x12/0x12
[ 2149.955003][T21711]  ? __might_sleep+0x100/0x100
[ 2149.959800][T21711]  ? __lock_acquire+0x5e40/0x5e40
[ 2149.964864][T21711]  should_fail+0x384/0x4b0
[ 2149.969403][T21711]  ? __alloc_skb+0x7b/0x500
[ 2149.973948][T21711]  should_failslab+0x5/0x20
[ 2149.978485][T21711]  kmem_cache_alloc_node+0x65/0x330
[ 2149.983742][T21711]  __alloc_skb+0x7b/0x500
[ 2149.988117][T21711]  vhci_write+0xb7/0x400
[ 2149.992497][T21711]  ? iov_iter_init+0x37/0x110
[ 2149.997271][T21711]  vfs_write+0xa39/0xc90
[ 2150.001557][T21711]  ? file_end_write+0x220/0x220
[ 2150.006462][T21711]  ? __fdget_pos+0x1d8/0x2f0
[ 2150.011080][T21711]  ? ksys_write+0x72/0x2a0
[ 2150.015535][T21711]  ksys_write+0x171/0x2a0
[ 2150.019901][T21711]  ? __ia32_sys_read+0x80/0x80
[ 2150.024696][T21711]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2150.030704][T21711]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2150.036719][T21711]  do_syscall_64+0x2d/0x70
[ 2150.041172][T21711]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2150.047219][T21711] RIP: 0033:0x417ab1
[ 2150.051143][T21711] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2150.070784][T21711] RSP: 002b:00007f0c59099c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2150.082881][T21711] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1
[ 2150.090879][T21711] RDX: 0000000000000009 RSI: 0000000020000240 RDI: 00000000000000f1
[ 2150.098885][T21711] RBP: 00007f0c59099ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2150.106972][T21711] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000
03:06:35 executing program 4:
socketpair(0x2, 0x2, 0x0, &(0x7f0000000040))

03:06:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x0, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:35 executing program 4:
socketpair(0x2c, 0x2, 0x0, &(0x7f0000000040))

03:06:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x0, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:35 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:36 executing program 4:
socketpair(0x2e, 0x2, 0x0, &(0x7f0000000040))

[ 2150.114970][T21711] R13: 00007ffd362f165f R14: 00007f0c5909a9c0 R15: 000000000119bf8c
03:06:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:36 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000})

03:06:36 executing program 0:
socketpair(0x2, 0x3, 0x0, &(0x7f0000000000))

03:06:36 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:36 executing program 4:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040))

03:06:36 executing program 3 (fault-call:0 fault-nth:1):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:36 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xa000000})

03:06:36 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:36 executing program 4:
socketpair(0xa, 0x4, 0x0, &(0x7f0000000040))

03:06:36 executing program 0:
socketpair(0x3, 0x3, 0x0, &(0x7f0000000000))

03:06:36 executing program 2 (fault-call:1 fault-nth:0):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:36 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:36 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))

03:06:36 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb000000})

[ 2150.814339][T21768] FAULT_INJECTION: forcing a failure.
[ 2150.814339][T21768] name failslab, interval 1, probability 0, space 0, times 0
[ 2150.887785][T21768] CPU: 1 PID: 21768 Comm: syz-executor.3 Not tainted 5.11.0-rc4-syzkaller #0
[ 2150.896603][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2150.906687][T21768] Call Trace:
[ 2150.909988][T21768]  dump_stack+0x183/0x22e
[ 2150.914340][T21768]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2150.920077][T21768]  ? show_regs_print_info+0x12/0x12
[ 2150.925316][T21768]  ? __lock_acquire+0x5e40/0x5e40
[ 2150.930370][T21768]  ? __alloc_skb+0x7b/0x500
[ 2150.934897][T21768]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2150.940550][T21768]  should_fail+0x384/0x4b0
[ 2150.945026][T21768]  ? vhci_write+0xb7/0x400
[ 2150.950248][T21768]  should_failslab+0x5/0x20
[ 2150.954772][T21768]  __kmalloc_node_track_caller+0x89/0x3d0
[ 2150.960515][T21768]  ? trace_kmem_cache_alloc_node+0x43/0xf0
[ 2150.966385][T21768]  ? kmem_cache_alloc_node+0x216/0x330
[ 2150.972422][T21768]  ? __alloc_skb+0x7b/0x500
[ 2150.977343][T21768]  ? vhci_write+0xb7/0x400
[ 2150.982801][T21768]  __alloc_skb+0xbd/0x500
[ 2150.987167][T21768]  vhci_write+0xb7/0x400
[ 2150.991419][T21768]  ? iov_iter_init+0x37/0x110
[ 2150.996103][T21768]  vfs_write+0xa39/0xc90
[ 2151.000363][T21768]  ? file_end_write+0x220/0x220
[ 2151.005246][T21768]  ? __fdget_pos+0x1d8/0x2f0
[ 2151.009847][T21768]  ? ksys_write+0x72/0x2a0
[ 2151.014327][T21768]  ksys_write+0x171/0x2a0
[ 2151.019399][T21768]  ? __ia32_sys_read+0x80/0x80
[ 2151.024385][T21768]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2151.030396][T21768]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2151.036606][T21768]  do_syscall_64+0x2d/0x70
[ 2151.041048][T21768]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2151.046959][T21768] RIP: 0033:0x417ab1
[ 2151.050866][T21768] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2151.071287][T21768] RSP: 002b:00007f0c59099c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2151.080747][T21768] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1
[ 2151.089631][T21768] RDX: 0000000000000009 RSI: 0000000020000240 RDI: 00000000000000f1
[ 2151.097998][T21768] RBP: 00007f0c59099ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2151.107003][T21768] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001
[ 2151.115497][T21768] R13: 00007ffd362f165f R14: 00007f0c5909a9c0 R15: 000000000119bf8c
03:06:37 executing program 4:
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040))

[ 2151.225139][T21778] FAULT_INJECTION: forcing a failure.
[ 2151.225139][T21778] name failslab, interval 1, probability 0, space 0, times 0
[ 2151.282224][T21778] CPU: 0 PID: 21778 Comm: syz-executor.2 Not tainted 5.11.0-rc4-syzkaller #0
[ 2151.291044][T21778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2151.301124][T21778] Call Trace:
[ 2151.304441][T21778]  dump_stack+0x183/0x22e
[ 2151.308816][T21778]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2151.314590][T21778]  ? show_regs_print_info+0x12/0x12
[ 2151.319837][T21778]  ? __might_sleep+0x100/0x100
[ 2151.324639][T21778]  ? __lock_acquire+0x5e40/0x5e40
[ 2151.329785][T21778]  should_fail+0x384/0x4b0
[ 2151.334265][T21778]  ? tomoyo_realpath_from_path+0xd8/0x610
[ 2151.340038][T21778]  should_failslab+0x5/0x20
[ 2151.344587][T21778]  __kmalloc+0x84/0x330
[ 2151.348780][T21778]  ? trace_kfree+0x43/0xd0
[ 2151.353339][T21778]  ? kfree+0x2f/0x2a0
[ 2151.357369][T21778]  tomoyo_realpath_from_path+0xd8/0x610
[ 2151.362963][T21778]  tomoyo_path_number_perm+0x1fb/0x790
[ 2151.368471][T21778]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2151.374146][T21778]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2151.379773][T21778]  ? __fget_files+0x34f/0x380
[ 2151.384497][T21778]  security_file_ioctl+0x55/0xb0
[ 2151.389475][T21778]  __se_sys_ioctl+0x48/0x170
[ 2151.394103][T21778]  do_syscall_64+0x2d/0x70
[ 2151.398561][T21778]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2151.404493][T21778] RIP: 0033:0x45e219
[ 2151.408416][T21778] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:06:37 executing program 0:
socketpair(0x64, 0x3, 0x0, &(0x7f0000000000))

[ 2151.428047][T21778] RSP: 002b:00007f3a4f754c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2151.436492][T21778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2151.444667][T21778] RDX: 0000000020000080 RSI: 00000000c0405602 RDI: 0000000000000003
[ 2151.452673][T21778] RBP: 00007f3a4f754ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2151.460669][T21778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2151.468670][T21778] R13: 00007ffc8caac78f R14: 00007f3a4f7559c0 R15: 000000000119bf8c
[ 2151.576583][T21778] ERROR: Out of memory at tomoyo_realpath_from_path.
03:06:37 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:37 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:37 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xc000000})

03:06:37 executing program 4:
socketpair(0xa, 0xc, 0x0, &(0x7f0000000040))

03:06:37 executing program 0:
socketpair(0x5f5e0ff, 0x3, 0x0, &(0x7f0000000000))

03:06:37 executing program 2 (fault-call:1 fault-nth:1):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2151.796200][T21802] FAULT_INJECTION: forcing a failure.
[ 2151.796200][T21802] name failslab, interval 1, probability 0, space 0, times 0
[ 2151.819854][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2151.837596][T21802] CPU: 1 PID: 21802 Comm: syz-executor.2 Not tainted 5.11.0-rc4-syzkaller #0
03:06:37 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd000000})

[ 2151.846405][T21802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2151.856488][T21802] Call Trace:
[ 2151.859797][T21802]  dump_stack+0x183/0x22e
[ 2151.864158][T21802]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2151.869993][T21802]  ? show_regs_print_info+0x12/0x12
[ 2151.875224][T21802]  ? __might_sleep+0x100/0x100
[ 2151.880021][T21802]  ? __lock_acquire+0x5e40/0x5e40
[ 2151.885079][T21802]  should_fail+0x384/0x4b0
[ 2151.889618][T21802]  ? tomoyo_encode2+0x25a/0x560
03:06:37 executing program 4:
socketpair(0xa, 0xf, 0x0, &(0x7f0000000040))

03:06:37 executing program 0:
socketpair(0xa, 0x4, 0x0, &(0x7f0000000000))

03:06:37 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2151.894505][T21802]  should_failslab+0x5/0x20
[ 2151.899041][T21802]  __kmalloc+0x84/0x330
[ 2151.903235][T21802]  tomoyo_encode2+0x25a/0x560
[ 2151.907947][T21802]  tomoyo_realpath_from_path+0x5c3/0x610
[ 2151.913746][T21802]  tomoyo_path_number_perm+0x1fb/0x790
[ 2151.919298][T21802]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2151.924966][T21802]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2151.930521][T21802]  ? __fget_files+0x34f/0x380
[ 2151.935235][T21802]  security_file_ioctl+0x55/0xb0
[ 2151.940201][T21802]  __se_sys_ioctl+0x48/0x170
[ 2151.944829][T21802]  do_syscall_64+0x2d/0x70
[ 2151.949289][T21802]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2151.955213][T21802] RIP: 0033:0x45e219
[ 2151.959125][T21802] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2151.979795][T21802] RSP: 002b:00007f3a4f754c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2151.988242][T21802] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
03:06:37 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2151.996254][T21802] RDX: 0000000020000080 RSI: 00000000c0405602 RDI: 0000000000000003
[ 2152.004255][T21802] RBP: 00007f3a4f754ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2152.012254][T21802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2152.020253][T21802] R13: 00007ffc8caac78f R14: 00007f3a4f7559c0 R15: 000000000119bf8c
03:06:38 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe000000})

03:06:38 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2152.136209][T21802] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2152.148563][ T8469] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 2152.157709][ T8469] Bluetooth: hci3: SCO packet for unknown connection handle 0
03:06:38 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:38 executing program 2 (fault-call:1 fault-nth:2):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:38 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x4, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2152.298896][T21824] FAULT_INJECTION: forcing a failure.
[ 2152.298896][T21824] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2152.352545][T21824] CPU: 0 PID: 21824 Comm: syz-executor.2 Not tainted 5.11.0-rc4-syzkaller #0
[ 2152.361367][T21824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2152.371447][T21824] Call Trace:
[ 2152.374745][T21824]  dump_stack+0x183/0x22e
[ 2152.379104][T21824]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2152.384860][T21824]  ? show_regs_print_info+0x12/0x12
[ 2152.390103][T21824]  ? __lock_acquire+0x5e40/0x5e40
[ 2152.395170][T21824]  should_fail+0x384/0x4b0
[ 2152.399632][T21824]  _copy_from_user+0x2d/0x170
[ 2152.404343][T21824]  video_usercopy+0x3cb/0x2330
[ 2152.409256][T21824]  ? tomoyo_path_number_perm+0x5c1/0x790
[ 2152.414925][T21824]  ? video_ioctl2+0x30/0x30
[ 2152.419464][T21824]  ? v4l_printk_ioctl+0x130/0x130
[ 2152.424622][T21824]  ? do_vfs_ioctl+0x82a/0x1a70
[ 2152.429422][T21824]  ? smack_log+0xe3/0x4e0
[ 2152.433854][T21824]  ? __x32_compat_sys_ioctl+0x80/0x80
[ 2152.439257][T21824]  ? smk_access+0x480/0x480
[ 2152.443781][T21824]  ? smk_access+0x44b/0x480
[ 2152.448323][T21824]  ? smk_tskacc+0x300/0x370
[ 2152.452858][T21824]  ? smack_file_ioctl+0x2e3/0x390
[ 2152.457919][T21824]  ? smack_file_alloc_security+0xd0/0xd0
[ 2152.463608][T21824]  v4l2_ioctl+0x181/0x1d0
[ 2152.467977][T21824]  ? v4l2_poll+0x290/0x290
[ 2152.472596][T21824]  __se_sys_ioctl+0xfb/0x170
[ 2152.477222][T21824]  do_syscall_64+0x2d/0x70
[ 2152.481667][T21824]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2152.487597][T21824] RIP: 0033:0x45e219
[ 2152.491524][T21824] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2152.511386][T21824] RSP: 002b:00007f3a4f754c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2152.519830][T21824] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2152.527831][T21824] RDX: 0000000020000080 RSI: 00000000c0405602 RDI: 0000000000000003
[ 2152.535828][T21824] RBP: 00007f3a4f754ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2152.543824][T21824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
03:06:38 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:38 executing program 4:
socketpair(0xa, 0x2, 0x2, &(0x7f0000000040))

03:06:38 executing program 0:
socketpair(0xa, 0xa, 0x0, &(0x7f0000000000))

03:06:38 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:38 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x5, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2152.551820][T21824] R13: 00007ffc8caac78f R14: 00007f3a4f7559c0 R15: 000000000119bf8c
[ 2152.561088][ T8469] Bluetooth: hci3: Received unexpected HCI Event 00000000
[ 2152.568258][ T8469] Bluetooth: hci3: Received unexpected HCI Event 00000000
03:06:38 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10000000})

03:06:38 executing program 2 (fault-call:1 fault-nth:3):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:38 executing program 0:
socketpair(0xa, 0xc, 0x0, &(0x7f0000000000))

03:06:38 executing program 4:
socketpair(0xa, 0x2, 0x3, &(0x7f0000000040))

03:06:38 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x8, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2152.846967][T21855] FAULT_INJECTION: forcing a failure.
[ 2152.846967][T21855] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:06:38 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11000000})

[ 2152.891057][T21855] CPU: 0 PID: 21855 Comm: syz-executor.2 Not tainted 5.11.0-rc4-syzkaller #0
[ 2152.899874][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2152.909957][T21855] Call Trace:
[ 2152.913256][T21855]  dump_stack+0x183/0x22e
[ 2152.917615][T21855]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2152.923377][T21855]  ? show_regs_print_info+0x12/0x12
[ 2152.928607][T21855]  ? __lock_acquire+0x5e40/0x5e40
[ 2152.933666][T21855]  ? snprintf+0xc0/0x110
[ 2152.937954][T21855]  should_fail+0x384/0x4b0
[ 2152.942409][T21855]  _copy_to_user+0x2d/0x130
[ 2152.946953][T21855]  simple_read_from_buffer+0xd9/0x160
[ 2152.952366][T21855]  proc_fail_nth_read+0x195/0x210
[ 2152.957428][T21855]  ? proc_fault_inject_write+0x370/0x370
[ 2152.963104][T21855]  ? rw_verify_area+0x1b8/0x370
[ 2152.967985][T21855]  ? fsnotify_perm+0x2fd/0x4d0
[ 2152.972768][T21855]  ? proc_fault_inject_write+0x370/0x370
[ 2152.978439][T21855]  vfs_read+0x294/0xc20
[ 2152.982631][T21855]  ? mutex_lock_io_nested+0x60/0x60
[ 2152.988971][T21855]  ? kernel_read+0x70/0x70
[ 2152.994151][T21855]  ? __fget_files+0x34f/0x380
[ 2152.999245][T21855]  ? mutex_lock_nested+0x1a/0x20
[ 2153.004695][T21855]  ? __fdget_pos+0x24e/0x2f0
[ 2153.009313][T21855]  ? ksys_read+0x72/0x2a0
[ 2153.014205][T21855]  ksys_read+0x171/0x2a0
[ 2153.019457][T21855]  ? vfs_write+0xc90/0xc90
[ 2153.024425][T21855]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2153.031308][T21855]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2153.038113][T21855]  do_syscall_64+0x2d/0x70
[ 2153.043478][T21855]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2153.050341][T21855] RIP: 0033:0x417b11
[ 2153.055118][T21855] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2153.075027][T21855] RSP: 002b:00007f3a4f754c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2153.083641][T21855] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11
03:06:38 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2153.092522][T21855] RDX: 000000000000000f RSI: 00007f3a4f754cb0 RDI: 0000000000000004
[ 2153.100998][T21855] RBP: 00007f3a4f754ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2153.110028][T21855] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[ 2153.118173][T21855] R13: 00007ffc8caac78f R14: 00007f3a4f7559c0 R15: 000000000119bf8c
03:06:39 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:39 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x12000000})

03:06:39 executing program 0:
socketpair(0xa, 0xf, 0x0, &(0x7f0000000000))

03:06:39 executing program 4:
socketpair(0xa, 0x2, 0x4, &(0x7f0000000040))

[ 2153.301731][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2153.310368][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:39 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:39 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x2, 0x0, 0x0, 0x4}}, 0x9)

03:06:39 executing program 4:
socketpair(0xa, 0x2, 0xf, &(0x7f0000000040))

03:06:39 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x18000000})

[ 2153.574703][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 2
[ 2153.585743][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 2
03:06:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:39 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x3, 0x0, 0x0, 0x4}}, 0x9)

03:06:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:39 executing program 0:
socketpair(0xa, 0x3, 0x2, &(0x7f0000000000))

03:06:39 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x25000000})

03:06:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:39 executing program 4:
socketpair(0xa, 0x2, 0x10, &(0x7f0000000040))

03:06:39 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x4, 0x0, 0x0, 0x4}}, 0x9)

[ 2153.862372][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3
[ 2153.871990][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3
03:06:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:39 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5c000000})

03:06:39 executing program 0:
socketpair(0xa, 0x3, 0x3, &(0x7f0000000000))

[ 2154.044386][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 4
[ 2154.055034][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 4
03:06:40 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x5, 0x0, 0x0, 0x4}}, 0x9)

03:06:40 executing program 0:
socketpair(0xa, 0x3, 0x4, &(0x7f0000000000))

03:06:40 executing program 4:
socketpair(0xa, 0x2, 0x11, &(0x7f0000000040))

03:06:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x3b64, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

[ 2154.279259][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 5
[ 2154.287551][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 5
03:06:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:40 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff000000})

03:06:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x50313459})

03:06:40 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x6, 0x0, 0x0, 0x4}}, 0x9)

03:06:40 executing program 0:
socketpair(0xa, 0x3, 0x5, &(0x7f0000000000))

03:06:40 executing program 4:
socketpair(0xa, 0x2, 0x41, &(0x7f0000000040))

03:06:40 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:06:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:40 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x7, 0x0, 0x0, 0x4}}, 0x9)

[ 2154.551223][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 6
[ 2154.564319][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 6
03:06:40 executing program 0:
socketpair(0xa, 0x3, 0x6, &(0x7f0000000000))

03:06:40 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x8, 0x0, 0x0, 0x4}}, 0x9)

[ 2154.699136][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 7
[ 2154.707322][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 7
03:06:40 executing program 4:
socketpair(0xa, 0x2, 0x106, &(0x7f0000000040))

03:06:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:40 executing program 0:
socketpair(0xa, 0x3, 0x7, &(0x7f0000000000))

03:06:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2154.876141][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 8
[ 2154.885431][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 8
03:06:40 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x2})

03:06:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:40 executing program 1:
socketpair(0xa, 0x3, 0x2, &(0x7f0000000000))

03:06:40 executing program 4:
socketpair(0xa, 0x2, 0x300, &(0x7f0000000040))

03:06:40 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x10, 0x0, 0x0, 0x4}}, 0x9)

03:06:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:40 executing program 0:
socketpair(0xa, 0x3, 0x8, &(0x7f0000000000))

03:06:41 executing program 4:
socketpair(0xa, 0x2, 0x601, &(0x7f0000000040))

03:06:41 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x3})

03:06:41 executing program 1:
socketpair(0xa, 0x3, 0x2, &(0x7f0000000000))

[ 2155.181500][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 16
[ 2155.190538][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 16
03:06:41 executing program 0:
socketpair(0xa, 0x3, 0x9, &(0x7f0000000000))

03:06:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:41 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x300, 0x0, 0x0, 0x4}}, 0x9)

03:06:41 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x4})

03:06:41 executing program 4:
socketpair(0xa, 0x2, 0xf00, &(0x7f0000000040))

03:06:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:41 executing program 1:
socketpair(0xa, 0x3, 0x2, &(0x7f0000000000))

03:06:41 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x500, 0x0, 0x0, 0x4}}, 0x9)

03:06:41 executing program 0:
socketpair(0xa, 0x3, 0xa, &(0x7f0000000000))

[ 2155.428451][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 768
[ 2155.438913][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 768
03:06:41 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x5})

03:06:41 executing program 4:
socketpair(0xa, 0x2, 0x1100, &(0x7f0000000040))

03:06:41 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x600, 0x0, 0x0, 0x4}}, 0x9)

[ 2155.531330][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 1280
[ 2155.540691][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 1280
03:06:41 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x700, 0x0, 0x0, 0x4}}, 0x9)

[ 2155.652643][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 1536
[ 2155.667951][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 1536
03:06:41 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x6})

03:06:41 executing program 0:
socketpair(0xa, 0x3, 0xb, &(0x7f0000000000))

03:06:41 executing program 1:
socketpair(0x0, 0x3, 0x2, &(0x7f0000000000))

[ 2155.759137][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 1792
[ 2155.778546][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 1792
03:06:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:41 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xfff, 0x0, 0x0, 0x4}}, 0x9)

03:06:41 executing program 0:
socketpair(0xa, 0x3, 0xc, &(0x7f0000000000))

03:06:41 executing program 4:
socketpair(0xa, 0x2, 0x2000, &(0x7f0000000040))

03:06:41 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x7})

03:06:41 executing program 1:
socketpair(0x0, 0x3, 0x2, &(0x7f0000000000))

[ 2155.991172][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 4095
[ 2155.999855][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 4095
03:06:41 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:41 executing program 0:
socketpair(0xa, 0x3, 0xd, &(0x7f0000000000))

03:06:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x54a1, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:41 executing program 1:
socketpair(0x0, 0x3, 0x2, &(0x7f0000000000))

03:06:42 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x8})

03:06:42 executing program 4:
socketpair(0xa, 0x2, 0x4000, &(0x7f0000000040))

[ 2156.181399][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2156.191429][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:42 executing program 0:
socketpair(0xa, 0x3, 0xe, &(0x7f0000000000))

03:06:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:42 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x4}}, 0x9)

03:06:42 executing program 1:
socketpair(0xa, 0x0, 0x2, &(0x7f0000000000))

03:06:42 executing program 4:
socketpair(0xa, 0x2, 0x4100, &(0x7f0000000040))

03:06:42 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x9})

03:06:42 executing program 0:
socketpair(0xa, 0x3, 0xf, &(0x7f0000000000))

[ 2156.438249][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2156.451146][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:42 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x4}}, 0x9)

03:06:42 executing program 0:
socketpair(0xa, 0x3, 0x10, &(0x7f0000000000))

03:06:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:42 executing program 1:
socketpair(0xa, 0x0, 0x2, &(0x7f0000000000))

03:06:42 executing program 4:
socketpair(0xa, 0x2, 0xff0f, &(0x7f0000000040))

[ 2156.659025][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2156.667908][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:42 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xa})

03:06:42 executing program 0:
socketpair(0xa, 0x3, 0x11, &(0x7f0000000000))

03:06:42 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xb})

03:06:42 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2156.860698][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2156.875026][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:42 executing program 4:
socketpair(0xa, 0x2, 0x18100, &(0x7f0000000040))

03:06:42 executing program 0:
socketpair(0xa, 0x3, 0x12, &(0x7f0000000000))

03:06:42 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x2, 0x4}}, 0x9)

03:06:42 executing program 1:
socketpair(0xa, 0x0, 0x2, &(0x7f0000000000))

03:06:42 executing program 4:
socketpair(0xa, 0x2, 0x20000, &(0x7f0000000040))

03:06:42 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xc})

03:06:43 executing program 0:
socketpair(0xa, 0x3, 0x18, &(0x7f0000000000))

03:06:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2157.133862][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2157.167796][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:43 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xd})

03:06:43 executing program 1:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:43 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x3, 0x4}}, 0x9)

03:06:43 executing program 4:
socketpair(0xa, 0x2, 0x100000, &(0x7f0000000040))

03:06:43 executing program 0:
socketpair(0xa, 0x3, 0x41, &(0x7f0000000000))

03:06:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:43 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xe})

[ 2157.422487][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2157.431638][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:43 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:06:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:43 executing program 4:
socketpair(0xa, 0x2, 0x200000, &(0x7f0000000040))

03:06:43 executing program 1:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

[ 2157.597196][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2157.605578][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:43 executing program 0:
socketpair(0xa, 0x3, 0x48, &(0x7f0000000000))

03:06:43 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x10})

03:06:43 executing program 4:
socketpair(0xa, 0x2, 0x810100, &(0x7f0000000040))

03:06:43 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x2}}}, 0x9)

03:06:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:43 executing program 4:
socketpair(0xa, 0x2, 0x2000000, &(0x7f0000000040))

03:06:43 executing program 0:
socketpair(0xa, 0x3, 0x4c, &(0x7f0000000000))

[ 2157.800119][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2157.819722][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:43 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x11})

03:06:43 executing program 0:
socketpair(0xa, 0x3, 0x68, &(0x7f0000000000))

03:06:43 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x3}}}, 0x9)

03:06:43 executing program 1:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:06:43 executing program 4:
socketpair(0xa, 0x2, 0x3000000, &(0x7f0000000040))

03:06:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:43 executing program 0:
socketpair(0xa, 0x3, 0x6c, &(0x7f0000000000))

[ 2158.044356][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2158.052691][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:44 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x4}}}, 0x9)

03:06:44 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x12})

03:06:44 executing program 4:
socketpair(0xa, 0x2, 0x4000000, &(0x7f0000000040))

03:06:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2158.240124][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2158.248686][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:44 executing program 4:
socketpair(0xa, 0x2, 0x6010000, &(0x7f0000000040))

03:06:44 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x5}}}, 0x9)

03:06:44 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x18})

03:06:44 executing program 1:
socketpair(0xa, 0x3, 0x2, 0x0)

03:06:44 executing program 0:
socketpair(0xa, 0x3, 0x74, &(0x7f0000000000))

03:06:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80089418, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:44 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x6}}}, 0x9)

[ 2158.469594][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2158.478995][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:44 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x25})

03:06:44 executing program 4:
socketpair(0xa, 0x2, 0xf000000, &(0x7f0000000040))

03:06:44 executing program 1:
socketpair(0xa, 0x3, 0x2, 0x0)

03:06:44 executing program 0:
socketpair(0xa, 0x3, 0x7a, &(0x7f0000000000))

[ 2158.604265][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2158.617767][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:44 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x5c})

03:06:44 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x7}}}, 0x9)

03:06:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:44 executing program 4:
socketpair(0xa, 0x2, 0x11000000, &(0x7f0000000040))

03:06:44 executing program 1:
socketpair(0xa, 0x3, 0x2, 0x0)

03:06:44 executing program 0:
socketpair(0xa, 0x3, 0x106, &(0x7f0000000000))

[ 2158.853062][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2158.861002][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:44 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x8}}}, 0x9)

03:06:44 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x300})

03:06:44 executing program 4:
socketpair(0xa, 0x2, 0x40000000, &(0x7f0000000040))

03:06:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:44 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x500})

[ 2159.052180][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2159.060488][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:45 executing program 4:
socketpair(0xa, 0x2, 0x41000000, &(0x7f0000000040))

03:06:45 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x10}}}, 0x9)

03:06:45 executing program 0:
socketpair(0xa, 0x3, 0x300, &(0x7f0000000000))

[ 2159.227142][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2159.235853][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:45 executing program 4:
socketpair(0xa, 0x2, 0xfeffffff, &(0x7f0000000040))

03:06:45 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x300}}}, 0x9)

03:06:45 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x600})

03:06:45 executing program 1:
socketpair(0xa, 0x3, 0x10, &(0x7f0000000000))

03:06:45 executing program 0:
socketpair(0xa, 0x3, 0x500, &(0x7f0000000000))

03:06:45 executing program 4:
socketpair(0xa, 0x2, 0xff0f0000, &(0x7f0000000040))

03:06:45 executing program 0:
socketpair(0xa, 0x3, 0x600, &(0x7f0000000000))

[ 2159.696590][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2159.705070][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:45 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x500}}}, 0x9)

03:06:45 executing program 1:
socketpair(0xa, 0x2, 0xfeffffff, &(0x7f0000000040))

03:06:45 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x700})

03:06:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:45 executing program 0:
socketpair(0xa, 0x3, 0x601, &(0x7f0000000000))

03:06:45 executing program 4:
socketpair(0xa, 0x2, 0xfffffffe, &(0x7f0000000040))

[ 2159.907675][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2159.916356][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:45 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x900})

03:06:45 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x600}}}, 0x9)

03:06:45 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:46 executing program 0:
socketpair(0xa, 0x3, 0x700, &(0x7f0000000000))

03:06:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2160.085907][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2160.095274][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:46 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xa00})

03:06:46 executing program 4:
socketpair(0xa, 0x2, 0x2000, &(0x7f0000000000))

03:06:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:46 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x700}}}, 0x9)

03:06:46 executing program 0:
socketpair(0xa, 0x3, 0x900, &(0x7f0000000000))

03:06:46 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xb00})

[ 2160.296666][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2160.304546][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:46 executing program 4:
socketpair(0x6, 0x80000, 0x8001, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x3, 0x4)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x200, 0x4)

03:06:46 executing program 0:
socketpair(0xa, 0x3, 0xa00, &(0x7f0000000000))

03:06:46 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xc00})

03:06:46 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:46 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x4000}}}, 0x9)

03:06:46 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
read$sequencer(0xffffffffffffffff, &(0x7f0000000000)=""/18, 0x12)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x400, @any, 0x4, 0x1}, 0xe)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

03:06:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:46 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xd00})

03:06:46 executing program 0:
socketpair(0xa, 0x3, 0xb00, &(0x7f0000000000))

[ 2160.961375][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2160.971075][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:46 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0xffff}}}, 0x9)

03:06:46 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000080))

03:06:46 executing program 0:
socketpair(0xa, 0x3, 0xc00, &(0x7f0000000000))

03:06:46 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xe00})

03:06:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2161.123276][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2161.131166][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:47 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f0000000240)=0x2)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0))
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x34324142, 0x7}})
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000), 0x4)

03:06:47 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:47 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9)

03:06:47 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc1105517, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 'syz1\x00'})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
socketpair(0xa, 0x80000, 0x0, &(0x7f0000000040))
r2 = socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0), 0x4)

03:06:47 executing program 0:
socketpair(0xa, 0x3, 0xd00, &(0x7f0000000000))

03:06:47 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x1100})

03:06:47 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x3}}}, 0x9)

[ 2161.930851][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2161.938652][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:47 executing program 0:
socketpair(0xa, 0x3, 0xe00, &(0x7f0000000000))

03:06:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2162.052627][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2162.061327][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:47 executing program 4:
socketpair(0xa, 0xa, 0x0, &(0x7f0000000040))

03:06:48 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x1200})

03:06:48 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x4}}}, 0x9)

03:06:48 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x9, 0x1, 0x7ff}, 0x1, 0x3, 'id0\x00', 'timer0\x00', 0x0, 0x6, 0x100000001, 0x7})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x7, 0x1, 0x4, 0x2000, 0x3fe0, {0x77359400}, {0x4, 0x1, 0x1, 0x2, 0xff, 0x8, "906fe87a"}, 0x0, 0x2, @fd, 0xfff})

03:06:48 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:48 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x1800})

03:06:48 executing program 0:
socketpair(0xa, 0x3, 0xf00, &(0x7f0000000000))

03:06:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405603, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:48 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2162.889547][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2162.897169][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:48 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x109080, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x2, 0x4)

03:06:48 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x5}}}, 0x9)

03:06:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405604, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:48 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:48 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x2500})

03:06:48 executing program 0:
socketpair(0xa, 0x3, 0x1100, &(0x7f0000000000))

03:06:48 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x5c00})

[ 2163.060016][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2163.067691][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:49 executing program 4:
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000080)={{0xa, 0x3, 0x8, 0x1, 'syz1\x00', 0x5}, 0x1, [0x3, 0xb20d, 0x0, 0x3, 0x800, 0x19, 0x1, 0x10001, 0x9, 0x1, 0x4, 0x4, 0x1, 0x6, 0x243e, 0x3ff, 0x8, 0x1f, 0x9, 0x9, 0x101, 0x7, 0x100000000, 0x2, 0x20, 0x7, 0x0, 0x20, 0xc7, 0x80000000, 0x800, 0x8, 0x5, 0xfffffffffffffc01, 0xef, 0x7, 0x8, 0x7f, 0x784, 0x6, 0x9, 0x96, 0xffffffff, 0x372, 0x9, 0x43db, 0x80, 0x0, 0x1ff, 0x0, 0x100, 0x0, 0x101, 0x401, 0x8, 0xfffffffffffffffb, 0x1f, 0x80, 0x5, 0xe41, 0x80000000, 0x9, 0x1, 0x2, 0x20, 0xe99, 0xeb, 0x1ff, 0x8, 0x7, 0x7df8531e, 0x1, 0x3, 0x5, 0x9, 0xfe, 0x8, 0x3, 0x3, 0x7d34, 0x3, 0xd0, 0xfff, 0x100, 0x7fffffff, 0x3260, 0x6, 0x4, 0x8, 0x8054, 0xe9ff, 0x6, 0x1, 0xffffff8000000000, 0x7, 0xcff0, 0x3ff, 0x3e5, 0x2, 0x0, 0x2, 0x100, 0x7fffffff, 0x40, 0x6, 0x180000000, 0x3, 0x7fffffff, 0xf34, 0x7, 0x5, 0x8, 0x610, 0x0, 0x0, 0xdd86, 0x5, 0x1, 0xfffffffffffffff7, 0x100000000, 0x3, 0x5, 0x299, 0x2, 0x3f, 0xffff, 0x80000000, 0x761a]})
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405605, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x6}}}, 0x9)

03:06:49 executing program 0:
socketpair(0xa, 0x3, 0x1200, &(0x7f0000000000))

03:06:49 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xff00})

03:06:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x7}}}, 0x9)

[ 2163.320297][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2163.330599][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:49 executing program 0:
socketpair(0xa, 0x3, 0x1800, &(0x7f0000000000))

03:06:49 executing program 4:
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)={r0})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})

03:06:49 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x1000000})

03:06:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405606, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = accept$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @rose, @netrom, @netrom, @netrom, @default]}, &(0x7f0000000000)=0x48)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00'})

03:06:49 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x2000000})

[ 2163.493066][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2163.514880][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:49 executing program 0:
socketpair(0xa, 0x3, 0x2000, &(0x7f0000000000))

03:06:49 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x8}}}, 0x9)

03:06:49 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x3000000})

03:06:49 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)

03:06:49 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2163.725339][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2163.736877][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:49 executing program 4:
socketpair(0x4, 0x2, 0x0, &(0x7f0000000000))
socket$bt_hidp(0x1f, 0x3, 0x6)

03:06:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405607, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 0:
socketpair(0xa, 0x3, 0x4000, &(0x7f0000000000))

03:06:49 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x4000000})

03:06:49 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x9}}}, 0x9)

03:06:49 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405608, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2163.987616][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2163.996422][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:49 executing program 0:
socketpair(0xa, 0x3, 0x4100, &(0x7f0000000000))

03:06:49 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x5000000})

03:06:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc040560a, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:50 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000080)={{0x3, 0x2, 0x4120, 0x1, 0x2}, 0xe08, 0x200})

03:06:50 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0xf100}}}, 0x9)

03:06:50 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0x80805659, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:50 executing program 0:
socketpair(0xa, 0x3, 0x4800, &(0x7f0000000000))

03:06:50 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x6000000})

03:06:50 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0xfdef)

[ 2164.264696][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2164.272954][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:50 executing program 4:
ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101)
ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404)

03:06:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc040560b, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:50 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, 0x0)

03:06:50 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x20000249)

03:06:50 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x7000000})

03:06:50 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x2, 0x2, 0x493}})
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @raw_data="4801d9e902d3967c3b73aed6e3dcc7c464e042863340b9a1e4dd74386753c2f3113f16939f0b67dcca4714a757697432a756be988df5b4d977d001cef89485c64031f7335db6c9b081b8ffe829c688a4abafbc2d2b945113de934b4d6404e4920131d9fa3065b12f2ad402f13f9606862b3df28f04a0d7ad8a50778aedc8ca6e31267596c6bce925ebb55683ad6fa172c58bb4b60e648b83093d1e026350381eaa730e55d9eac8222c37a3767f005a66ed9cc87f87d7afb6dd17eef1541fe8df83e966f03609a08a"})
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

03:06:50 executing program 0:
socketpair(0xa, 0x3, 0x4c00, &(0x7f0000000000))

03:06:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc040560c, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:50 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x7ffff000)

03:06:50 executing program 4:
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x464, 0x200, 0x70bd28, 0x25dfdbfb, "b171f4dc0bb02f0354e52a67acf09fde44fa0b0c0fdbf18d948d37d9895538e1add1eff95c64cc4029ff33d78cbe1514320b0ea8987e8e3d22c86b7013f9dfcc7c9c896dbcea6c88b3f763954e58f2cbf662aabec8df580d214cc8865c0297577a37fea758c841ec1d49d102523638eaa1783cd84c9dff550952bd0fe43ca8f7b1cd0c964f7f03cbf4eee07fc5b585739ea05671b942cf6e383534887b", ["", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x8040}, 0x4000090)

03:06:50 executing program 0:
socketpair(0xa, 0x3, 0x6800, &(0x7f0000000000))

03:06:50 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x8000000})

03:06:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc040560d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:50 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0xfffffdef)

03:06:51 executing program 4:
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000))

03:06:51 executing program 0:
socketpair(0xa, 0x3, 0x6c00, &(0x7f0000000000))

03:06:51 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x9000000})

03:06:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc040560e, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffdef)

03:06:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405605, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405618, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xa000000})

03:06:51 executing program 0:
socketpair(0xa, 0x3, 0x7400, &(0x7f0000000000))

03:06:51 executing program 4:
socketpair(0xa, 0x2, 0xfffffffc, &(0x7f0000000040))

03:06:51 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0xffffffffffffffff)

03:06:51 executing program 1:
socketpair(0xa, 0x3, 0xf00, &(0x7f0000000000))

03:06:51 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xb000000})

03:06:51 executing program 0:
socketpair(0xa, 0x3, 0x7a00, &(0x7f0000000000))

03:06:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405667, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x5c, 0x1)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x44800)

03:06:51 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000004000000010027ec7a6fba00bc941877f7aafc3479c52add0450276e3b94043d222efa7645f6adc78d0a051976180f68a5d0e2fbfd17b7bb9d8ffe4142793fa37fdb0b5ff5635797415457bf8303b690e71e3a54ec39cd4856341829cf438c5ee5628c56a5dffa5f23b9c3a6784da621193dea4bdfbdf0deaf57a618afb28eed97afc2db00004f49c48a1f1da80a83bad1f235684d11d145abba143a8ccec9e2f6536aaac1b1db185400"/182], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0x1, @raw_data="138c5e9e18fe14f6b395f22d639127fb1cc8f8748c42ed80bb5681b0021bb339740e80242795c1455a7f7ed7b1007e406b47b1b9b674bb804277d273ef97e232f532f401a684373141b31c7d8abd40e3793f8c840d0f2456b2ee8cf7814887916efb22128eec12a28b2f448983ab959a918021070152d524fd94e2158ac76f3e22a49f768116a109e2066311fada19941aa0bdfc6c64ad645ef1e539501616049e8aa89887167477565a0fd0d3f015d51286a578a5659277b7ccca90357f7363ee8b41df2602c0af"})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x3, 0x1}, {0x4, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4}, {0x1, 0x1}}, {{0x4}, {0x3}}, {{0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}}, {{0x1}, {0x3, 0x1}}, {{0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x48)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)={0x80b, 0x2, 0x4, 0x100, 0x5, {0x0, 0x2710}, {0x2, 0x0, 0x3f, 0x0, 0x4, 0x7f, "04807958"}, 0x100, 0x1, @planes=&(0x7f00000002c0)={0x7, 0x3, @mem_offset=0x1c00, 0x7}, 0x5, 0x0, <r2=>r0})
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)={0x0, 0x7, 0x4, 0x100000, 0x7, {0x77359400}, {0x1, 0xc, 0x7f, 0x7, 0x3f, 0x87, "e127adf6"}, 0x80000000, 0x3, @planes=&(0x7f0000000280)={0x8, 0x2, @mem_offset, 0x4}, 0x6, 0x0, r2})
syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_changed={{0x2d, 0x9}, {0x5, 0xc8, 0xff, 0x7, 0x9, 0xfffe}}}, 0xc)

03:06:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xc000000})

03:06:51 executing program 0:
socketpair(0xa, 0x3, 0x18100, &(0x7f0000000000))

03:06:51 executing program 0:
socketpair(0xa, 0x3, 0x20000, &(0x7f0000000000))

[ 2165.795594][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2165.818447][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505405, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xd000000})

03:06:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={<r1=>0x0})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x400, 0x56555959, 0x3, @stepwise={0xfff, 0x7ff, 0xffffffff, 0x9, 0x2, 0xffff66e5}})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:06:51 executing program 0:
socketpair(0xa, 0x3, 0x200000, &(0x7f0000000000))

03:06:51 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)

03:06:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xe000000})

03:06:52 executing program 0:
socketpair(0xa, 0x3, 0x810100, &(0x7f0000000000))

03:06:52 executing program 4:
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000000c0)={{0x6, 0x0, 0x3f, 0x7, 'syz1\x00', 0x8}, 0x1, [0x0, 0x3, 0x1, 0x8000, 0x100000000, 0x80, 0xffffffffffff8001, 0x6c, 0x1, 0x0, 0x400, 0x3, 0x4, 0x8, 0x43c, 0x5, 0x6, 0xb2, 0x20, 0x7ff, 0x8039, 0xfffffffffffffffd, 0x43, 0x7, 0x9a, 0x0, 0x18, 0x40, 0x3, 0x2, 0x4, 0xff, 0x40, 0xffffffffffffff01, 0x100, 0xe487, 0x3f, 0x0, 0x3ff, 0x8, 0x5, 0x7f, 0x10000, 0x3, 0x1, 0xffffffff, 0x5, 0x74b, 0x0, 0x7, 0x8, 0x4, 0xffffffff7fffffff, 0x80000000, 0x0, 0x400, 0x100000001, 0x100000000, 0x2f4, 0x4, 0x4, 0x1, 0x9, 0x6, 0x4, 0x9, 0x2474, 0x8, 0xffffffffffff9d5f, 0x1f, 0x7, 0x10000, 0xb3, 0xf66e, 0x1f, 0x100, 0x5, 0x7fff, 0xfff, 0x3ff, 0x800, 0xfffffffffffffc01, 0x8, 0x1, 0x6, 0x0, 0x101, 0x5b3, 0x2709, 0xfffffffffffffff8, 0xffff, 0x89d, 0x2, 0x468a, 0x7ff, 0xffffffffffffffff, 0x9, 0x3, 0x2, 0x100000000, 0x9, 0x3, 0x5, 0x5, 0xa, 0x1, 0x9, 0x6, 0x8, 0x9, 0x6, 0x0, 0x0, 0x3, 0x40, 0x101, 0x5, 0x7736407, 0x15, 0xba, 0x7fff, 0xe1f9, 0xfffffffffffffffd, 0x3, 0x1000, 0x4, 0x7fff, 0x7]})
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x6, 0x2, 0x80000})
socketpair(0x2c, 0x4, 0x0, &(0x7f0000000080))

03:06:52 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2, <r3=>0x0})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})
r5 = syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffc, 0x2)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000600)={r3})
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000500)={0x2, @pix_mp={0x800, 0x7, 0x38415262, 0x1, 0x1, [{0x7, 0x1}, {0x4, 0x2}, {0xb9bb, 0x1}, {0x3, 0x4}, {0x8000, 0x1}, {0x7fffffff, 0x2}, {0x1, 0x5}, {0x6ec}], 0x8, 0x0, 0x5}})

03:06:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 0:
socketpair(0xa, 0x3, 0x1000000, &(0x7f0000000000))

03:06:52 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4440)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0xc4800, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@echo=0xdee7)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:52 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x10000000})

03:06:52 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x6e}, "f82e298101996548afef05f219b83c83522eb0c288bdd1ef7d4042a6812d1666bc82c6ad88e23ae09ee84b2581a453453acaffa9b4c6f3e3637dafb4679b7cf5f0d9749276ec059645d26803a89d906b8e950b3c7e1c182d2a2712cfb0932960810dc657bf05fabfdb17c2ecb878"}, 0x72)
getitimer(0x0, &(0x7f0000000000))

03:06:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 0:
socketpair(0xa, 0x3, 0x2000000, &(0x7f0000000000))

03:06:52 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000))

03:06:52 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x11000000})

03:06:52 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000001c0))
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x2, 0x41, 0x0, 0x7}, 0x8, 0x5, 'id0\x00', 'timer1\x00', 0x0, 0x400, 0xffffffffffff619f, 0xf5, 0x4})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000140)={0x3, 0x32344d59, 0x2, @stepwise={0xfffffffa, 0x200, 0x7, 0x2, 0x80000001, 0x1}})
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02ffa0952a0000040000000100"], 0x9)

03:06:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 0:
socketpair(0xa, 0x3, 0x3000000, &(0x7f0000000000))

03:06:52 executing program 4:
clock_gettime(0x0, &(0x7f0000000100)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000001c0)={0x2c5, 0x7ff, 0x80000000000, 0x4, 0x2, 0x7, 0x401, 0x8}, &(0x7f0000000200)={0x81, 0xf2d, 0xff, 0x8, 0x40, 0x1ff, 0xe7, 0x8}, &(0x7f0000000240)={0x0, 0x5, 0x1000, 0x1, 0x2f014d84, 0x1000, 0x21, 0x9}, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x9]}, 0x8})
select(0x40, &(0x7f0000000000)={0x975, 0x0, 0x9, 0x2, 0x400, 0x80000003, 0x7, 0x9c1f}, &(0x7f0000000080)={0x2001, 0x5, 0x9, 0x5, 0x44, 0x63e, 0x7, 0xc}, &(0x7f00000000c0)={0x100, 0xffffffffffff4547, 0xccd, 0x81, 0x9, 0x1, 0x5, 0x1000005}, &(0x7f0000000140)={r0, r1/1000+10000})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x400080, 0x0)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
bind$phonet(r3, &(0x7f0000000180)={0x23, 0x15, 0xdb, 0x4}, 0x10)
bind$phonet(r2, &(0x7f0000000380)={0x23, 0x8, 0x0, 0x9}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

[ 2166.733450][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 255
[ 2166.756564][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 255
03:06:52 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x12000000})

03:06:52 executing program 0:
socketpair(0xa, 0x3, 0x4000000, &(0x7f0000000000))

03:06:52 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1000}, "86575d877af3aaab593b3883f9148bff861cfe00f520717df0d907de74ffdd5947581be32fbd89b2d13166d7d7de1ac5a78eefa5d9084c42e8ea8f45a1baf1e7f6a6fd66be493f5f8a541b24cf0e199290f2f7c8f905de641771849b9fb4adcdba85d9c308252cf199dbfa2161fce743a899d2f6827591cf54c8fc41b1b4c8b284adef429ffd1a83e0dbe5f2de11dc621b0ad9097402a307d0d3627b46412ebf41a0d653fec211ef5aecbc93df8a545b70efa8e518ef33c99fd923f4d28f372e295b5c8ebbc56992e39339b8fa02e62479165d0126dc5cd19afc7368b6dd537ccb245ce5f812eb6d25a61d2d963fb809d74172f02467a49a51178d1853d7e00200a0779b6d8c11e839cba9ea7313aa126278a07e307d68e570ffb29541b0b422d3d126b285bb6b198ec4c765d6ba4869f9d5f27fa427465e304b71aabc1bd300c3829ab1cbe6ae7b6cae9bfc47a7b1d1e94082a11591253f13acaa964cb800201e80117b695735748f6e47b5c226e26017ca3f8803e6813bb856572b8fabfc7e88be8e272e44c4dcc04a72ccbc8512cfef6e13e7dc67a4271e183461535ffff2272e3cbb7bcccc5a891c6ff05a6dcd4e0301b25417dd8407b62ef8a6c1220d34f8609d18d9d69c8029295a1589634f3bb607e49e9c4deb0859da11688c73625014516a5b8fa667b69d45ab2c70b893595ce365252203bcf2fa7a8e510ccc10f5114b270d80a5dd43a809b62ad70591b911096df39239ebcc4d8653dc9d1ba9ed16915b1fdbc747755e813961b90d9fefb91e415a98855b00434d8e0a6158942c79344997c390243ac8be995b29afc6b65f914d54ea7e3ef9ab9377e02b9b68372846c8fc95bf3d7e7b4b2fa4abd8b8873d1c80079bdbd5254e964cbcb4a0802ab833ad6f468d98526c1e2e2f0aa970a30d7863682f7b87acc650901386ae6c0976edd4d1311bc62e7c3a3c03706df28fe51ef735c15931e3cc0db80fa5073a88d4ddc4bb7a44ce1ee2b14f59a2a865b6cdca571f8d6aa6f048266a0bc95115d4e8a549849bb6d1cce33eccf07a69d57e5bed5adf5d32ad388affc1f16d9f77d5fa323663e734f217deb60e6edc602881e4b93040fcb36f7d1dcbfe89ba0f33ba156d9729b9fbcbce5f863f4edf843f2303739281fc3798e271d2eaef3f0c896b1315033a6c84f381a6617b244a1a616b6dec256eff682a755256d7ed3209b1c756d72dbae0fc6778c4547debf3d5adcaafc8c5f879fea5ad7e2de1705560fb8b5963cf05c206f464ea16fc2376fd0a7affabb251968debc99edec8ea4adea93426a7292e4fddf6f35b624cd7bb377f554af88ee963565bdada26d189bc718e110ff79a608df6cec05213c27b35876852521366c8a1fb7f87753addde049e27ee745cf186645246663bbbf22690db210442fc8d25ec3fdeefe517a02050795bfcad98a9d6ab2a8c3655f9f01c5e3bee7bd6ac874e416c3ba945d65dd091ea9520e282d10917983399a677e087ed094ae9c1f90c3377a40325a971eeccc142d453746ecf212764ee36281cfe5aa7d366e54f793a263d2976edfc35b287f15a0f72b795f9a514dcabd27f0980aff2c3c3c3d0c4cabff4ccc8b4ff18311b069dc2c45b0be8a0bfc073042fb78f9a7ef450b4aa9abe688b1e0738b278205e7b0a2984ae494276e1bbc7b4873839f199119509c574fb14ad8dd7a187d2427773236ea89c12f423a9a1d5d7260acb7d6274f8cb2e90fe363b631c1c569fd0761bb5b12185ff82ac553a4eeca5a369e78775423467d7c42001ebff0db6cbcf78d4fde597f117cdbe41b36e5a2a221b118d4208401ba4ce6b30dd0e58430d08952499c3c2599b6801930f8b1e5b942f0078f7a162ea39a15f74bd897cbf1183aad902de338f0a7ea8ea4871e7637561693596c03041cf4d2d54d59c7835e90e6cfa1fa8601886dd225a304054a40ba48fe819dcf42ce7d6f659835ac89e7d923bbe267dd83168ee83babf9b273b3f66109f45c0c638ed8ce4d858a3e5d619a6cea7076063c9aed52aed7ea0ae992d9d6a78dd769770d4b841df0c311a0a5f256cfa4bd8ebe0f22fdb1014069bf604bd364d21ed1e71610a6d214e4f5405077b20dd5d00512efe96c13c30c7063253c24674262fb1cc385019394103edcb6e8db4c531a969db900613fef8df5a7003a38ab054522f90800131159c8d4981fbabd7821b541837b6045c61ff9d606c06893d1d8ceb15d5bf6309fd129600583873349fa0e615bfdbbf06b1bb24c538b2371486fb06202f1c306ae7c83856ff0496b2e291936dc8eba6f957e00cf17125056ca7e89b7f0d9fd41e8f96d9852b01db357a7d39be76fef1ed8f8d1d01407f057f45080f3fd13d9c6528bee444982a0b285274993534070fb448c68ecb02d4744ea20dedafdd04d41253636b9ce44cb58ec4884f2d2d6a79cc1e8adfb0238b0e182fbd0ea9b0abb223a8d8c905b42720c3d310e549295902c92e95527e0b94a2f9142d11aaebec6621e044687a7e52b13e519eaadefb0eae32d401f58b25045f27c55b3b6fddd7a4b4a1d59a662cb37b17ae1efcef4184a3aad2eb74b4544c780e4c7ae682a836ec40bf7d1bf4ff3c7da5f3cfad7014586bb9444bff3ca3c21ffba9e2d44ded83fcc1f2b0c9db91072a0c116b93f837fdda711d562362781a1523f5ebd1af119656d7d6663950ff7abb29056aaaf51a75a1672d1ab5341a5b01542d1be023f7185d65ab1909dc12c429df82233b9e4a4fe586ad99a648bafa9341bf12a4db0581346489e43ec4b510416e6e4a6e0635ba262f4394b80fa888db9ea7a17d7c150361d35078537d2eb5c7cc3fad963f119f2e6de343ff05441b37bf0994d61d37b63dda22d17a2998b16349007591da58c117549f81f202a71cbd2a1bc7361bb2b34f8d3f051b00ea4b705a729e471c620db3b5c8a771906be9e9c8389c3d6e514bf2c5f8223f79bbcf6c566b4ccb15803ef8297187844e47c283f1cb23807aa86572a5fa4738caaa3176e52d534bafddf497fbbad10a39de3592da61649a2378382ef00eaba0a45d24f2983f4903096516f2b8d673c6a65689b8d8b6f18080b57e7f9e7ac41a0d6d8e8fa1f413319fffb71e0e21cfdf418e4ad8b0da89436abb7abacd4fe6f0a54d50ad75d252806cc6ac7a8c4496d6b0eaba7ce9560ac97ba50ad8b5c61c1ae31183be561ce05ff37a06f1f0606d7994fc34350cd44eec677dad04572bc887982f50438a34a3ca0a24476a85a1b09d7dfe0cff0557ee246edf2dd36ab70b1ed64e5daa82b26bf563852c806d181eb63e8bf864a0188047f7c714305b8d92ad26b88badbcd81de566c75315205a4ba04a0d5dc881837cf7b702e75fd96dda0103a0f900d48f76017c88579846a6efd25dce0a583b4068c3298782a839d0543836ec5a4d40f95d53dca81ce301db825ff4f0d6323e1225cbac405257b236f168c6e3d32eaba7646195d92038c3ea7901bdcf8d893983c8601e23fb7910bfeaaa7149b957ea1b6d817b6895ecd824724869c06373a260a40292031d8350f27ee6d62ba5e4825400ffe4f1477206d07b51343e13d7eb71fc04570cd76c9d0a6a4a8b582613b82f10ed37b76234b2f0d2104193c392029dd87ecf8b59abf46adf74528d3f7a6e4fc5f45a29055d16ff6f1bc65f2afb52232fe70b67e6ffd0e66c9ce5f452c4a34daec05997f682139e8d97f242ef4bb750ae3b1d1c052e37f2d57438fc71a7c9f615574f78193bff5a5fdca91f5e231b9cc591b430d8e5d74cc2f0bca93f64cbda878525363a3770e042e5a320d52385dd37cca5289ae1dc241bfb1bc35c2c9e8bde3b4ceb387bc839ba3fb08866c4facf28de0afb4bc6320b2243abef4572b78dce783e12bbf633e2ca2389a7db94b84fb690fab49786fb83c416a68eb3fbb3ec64ae68a9f6d559c4b8243c5fe37d9b73d481b46370e6edcbea88bec3cdb4ccffa39c030f2be68d6ce9acd9d531d6ed41737ba8b272308399e1785e92403865551d45457b05e5f08a41905e0d0a28d07819419a6501bb233319522c491d8017338223621159d7603e5f01991a2a5f99f23a163d079c4daedc2626c742857a7f5a1ab96064868bcfe78f527244fc76feb71b84367d4c84f20b78362a06cae0d686922917e1b046fef603007bb50ddf7d4b227f4d3a6795c5038e699d2fce92fca3c29d93f83dbb3c27c46509788bddb01a82963d334b11e8a33abde0a9883a5470d0a4666193926d22dd8012b64781b31f50f8ffc0baf4c7871b0110e3f41c8e16a39339169799617de3b8067dc0f20dd9b811eeba00a80b4b2d7e08108e8f25ffd56a5ad59b34d066cca8584b4c0737955fc2c0ff883ca678175bf5932d1cf25bc2efe33e9e4a54f6e14a38c106e3990958b04862fe56d76e7017bb04f18d7cd177fe33e1d7088c9e854d91402109f21438d92f397ef6e1ca88eb5abf2de28faae071cea03b4e3e80ed68b98ad5881758d9ea44b90f7bf5af5ce1e0b2be6ac6c3ab75ad3cda638362263e9554011d03066e9d90fde0812c6b92e9f4ce79b02d2b0c7b1643bc7b34529a80ab8d7b85e2abdfe0b9992775ad119cfd627a2055d4c671d20f566e4a6c477fe3dd3ecda3d71a0285d43f476bde2f129a29521a125c3ba5762e3af82bd50a6dbf22e50779f9c5e248bbd3f873bd7d79fe7c63a95f7dec1404fc2736c9e1c68bdd066ed4885e4ddddf65a59bcd3ff3aa78979ebe0394060e9dd57bf5bb1e709ba002d127e56ca9ecbda37ac599cd190c88d8ecbcb9d0feb8c0593f38581b9093ad779f818c0051522c61a3c8c5d3762743115ff4ee0895b13be85a200c63cb7662c18c961b230325892440d0bfe71ff84bfafac23ade349d1e664a9eff053640bbefeadb8fe2e00545daaff8fe979cb55387b3d419508529d0afe9d540bf8c6c2c031f2d13a367424982b2916a575b7961c33107fbe0fd643f444024f65d3d630f415ef11e0cef4aa84f5bda6156e47da9eaa71ea32a6943196685854562e22f8e4f3732975e7ebbf2b195d0be2f63730beef077031dbc637641f88e349b81e3837708415a79ff82513747391e6c1c846b878fa929f92ff14441f93708f01d73bc2edf207223e5fe0e5e9070bd433971ab84f6edb6fb0f3c25d43b142717b1d2130599deca92880fa77b5ae744a3480f9bbd052ea78cd6bbac01fdd8982ba01f7f8f5d662c836857723a7197c7847a276cf5eea98876e6f209c7c28a24b5c96a310c00de5c4436e5e68165a0766e764efbbfe07758615ade3827b2b8849c1cea4693a9bcc72e885f590a2edfb60b4877c7eb3001bcbd83d910e9be01cfeb44c332eb98ba1e53b9e8a8f853bc1aa6b91f43c200c8b8e1b864f8e42abf5dc37c2213feecc422aa9907d3174706b2b0f5cb245cc9e85fc36bf9d2356d100510c9e41f986a765aaefc9c1d0f686d3c46387e45fd975d1520ebd191a8a592a566ec0061aa54338043fbb4c6838864163802b89d0f49f27caec85b2d4857bc45c7b0f893918b70e77cdd57f7f8cdaed1a491af4e76aff85bb6a78c0bceb124c90a2e261509928d8df469b520519dcb188cd619b61e4e61fb3291062ded302cb537201b293d1dd3153263a396848c5c583ec252421dc9baae5bfcf73e25b9bdbc060123c59a416d78a9b38640dcf0778cfac360fba58897c55ce0c448b42b3a438281ab3853824c24bfe20cfd51b97de9efe38fbe2daed39853f1d84ef39753c251e6740e2e9d90ab98e7fe3fa8dc2857f978d0aac6d30515a8d46ab6bd"}}, 0x1003)
socket$inet6_sctp(0xa, 0x1, 0x84)

03:06:52 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2166.920184][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2166.942298][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:52 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x5}, "a2af46d044"}, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)

03:06:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:52 executing program 0:
socketpair(0xa, 0x3, 0x5000000, &(0x7f0000000000))

03:06:52 executing program 4:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, 0x453, 0x0, 0x70bd26, 0x25dfdbfb, "6183f302000000000000007b49e638520276be32320d0ce037b1a00c383aa1c339e44558ef9012328485ab619754c8d2044daf040ee05c8a50e9", ["", "", "", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0x600c851}, 0x2406c845)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4}, 0xe)

03:06:52 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x18000000})

03:06:53 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), 0x4)

03:06:53 executing program 0:
socketpair(0xa, 0x3, 0x6000000, &(0x7f0000000000))

03:06:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x25000000})

03:06:53 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x9c, &(0x7f0000000080)=0x4)

03:06:53 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2167.299437][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2167.313533][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:53 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x5c000000})

03:06:53 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xffffffffffffffb2, 0x24441)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000040))
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000080)=""/165)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000140))
syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x9)

03:06:53 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 0:
socketpair(0xa, 0x3, 0x6010000, &(0x7f0000000000))

03:06:53 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 4:
socketpair(0x0, 0x2, 0xfffffffe, &(0x7f0000000040))

03:06:53 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c900b0eace457b248f197fa22d63412fcce54f8e7a890dcbba040a851fc7d8a32d7ddd7f0db2a929986d21cf2d1efbb556333db613381104bcff6f1bfa693c1af5ff56e2c0be1186d8b6764b4a1ad64cfb2d19c81576592485d0a50a1e6f8e5be19ab01fe5c3248dbc3465fd9ec44ef38146b7bd4472d46ab0fd8e024b388db4e40f6977c440d0af7afdda23eaafc18d557ceb4ba380fbb51aa73f58b917cc4b13a0b3f0c3c907b15290ba18eeeefae6e4db06045a9bf5c9008d1f91b2c67b29f01c4da5239962c62822ef0ba99f873a11e8a8760b212eac03a2ce0d0e84b626bd98ab9fcbf25f9041c24630d90500000000000000000000000000c802aef47f12949bc9690f6a00fa6797ece5d79e896166cd2356ff9226d5764eea4ae6b45fecb0fca1f6a893ec2aee6889367700309cd7907568faa6a0529a9791e7a06e3fb43cdda6acdf9fda5670a2bed351cf944cef34f3fdcaafc6007e52fd7aa419bf9e3a8df282950baa291f2d46f75f94a37d10d2b94139515d8f11e124d9ab791736136643a77e", @ANYBLOB="a1326651cb52ff2207dcfb2f2985a761f3415aa8fe0785c1c7642dafd30d6ebbcf2db8563e7a07a51f89ee80ac5c01b1ab5ceffa4ddc892aff445366db0e3206e0e68363f69589eb8ffe15cbe3de53ed4bdef6b6a50e386407b57c6db2a9eeb6593ccd3534559a95e8fe83f99ba166846d19ef1fc13f3a1a62b41d96140ff7bcc3206154f37203417d246b7324c1015df618afe7942b837f35cee2f15be8174e1f71f28c8dc9046ae03269d2edd7c43bf7f97626519ebc87e8c728b8d1c0dafd1b3a3d22e119031d60683e4c5b6ef2ef2159599daa66e5043bd2680d2e0d61", @ANYRESDEC=r0, @ANYRES64], 0xb4)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4)

03:06:53 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xff000000})

03:06:53 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc074510c, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 0:
socketpair(0xa, 0x3, 0x7000000, &(0x7f0000000000))

03:06:53 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x6, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x400, 0x4, 0x1})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x6, 0x3ff})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000))

03:06:53 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000001000000010010cb210d258807844f55e654b2c483d199af1a89b84494c213b1a04411f37e4e2bcdc4c27a4b6bc10c0be89c9b907fbb5c8d23558ae70fb3aa6e82efe42fccefdf6d06e6eab253d0bb6c57e840a6f99ca5abf72ba84b5a810000000000000000020000000000004f04c269bf73d8b0a84d8993313d2dc7782afee986da84269636ce11cf848b91f79cc7c742d94a799ffac392fc803555008152f2bead4d56a959d71eeaa18520de5941631a24eac1005192a5bc1e00da81f0b4071456c509b01308697be3e64f"], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000100))

03:06:53 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0xdd})

03:06:53 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 0:
socketpair(0xa, 0x3, 0x8000000, &(0x7f0000000000))

[ 2167.892517][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2167.907145][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:53 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:53 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
getrusage(0x0, &(0x7f0000000000))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x24000, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000300))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000280)=0x800, &(0x7f00000002c0)=0x4)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x200, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0x1)

03:06:53 executing program 3:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x5, 0x2)

03:06:53 executing program 4:
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

03:06:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 5:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000140)={{0x9, 0x6, 0x1, 0x8000000, 'syz1\x00', 0xfffffffb}, 0x0, [0x0, 0x5, 0x400, 0xfff, 0xfffffffffffffffc, 0x200, 0x0, 0x800, 0x9, 0x100000000, 0x8, 0x1, 0x6, 0xd0, 0xa652, 0x8, 0x11, 0x7fffffff, 0x19, 0x80, 0x8, 0x0, 0x9, 0xffffffffffff0001, 0x8, 0x201, 0xffffffffffffffd8, 0x20, 0x9, 0x101, 0x3, 0x8001, 0x81, 0x6, 0x3, 0x9, 0x7, 0x2, 0x3, 0x3, 0xffffffffffffffc1, 0x1, 0x5, 0x2, 0x5, 0x4, 0x40, 0x0, 0xb15000000, 0x1, 0x9, 0xa2, 0x0, 0xffff, 0x5, 0x5, 0x8, 0x8, 0x63f, 0x101, 0x7fff, 0x6, 0x8, 0x20, 0x9, 0x5, 0x9, 0x200, 0x40, 0x99e3, 0x3, 0xe64, 0xeb90, 0x4, 0x0, 0x0, 0x10000, 0x20, 0xfffffffffffffffc, 0x5, 0x2, 0x8, 0x7, 0x9, 0x298c0ea, 0x9, 0x9, 0x257e, 0x9, 0x5d4b, 0x1, 0xfff, 0xee42, 0x2, 0x8, 0x10001, 0x1000, 0x9, 0xfffffffffffffffa, 0x8, 0x7, 0x3ff, 0x7, 0x3ff, 0x8, 0xe5, 0x8, 0x5, 0x7, 0xbf2, 0x7, 0x1, 0x8, 0x24b, 0x0, 0x83, 0x851, 0x81, 0x7, 0x3, 0x0, 0x0, 0xa3, 0x55d, 0x6, 0xb803, 0x7, 0x40]})

03:06:54 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)

[ 2168.145527][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2168.173778][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:54 executing program 0:
socketpair(0xa, 0x3, 0x9000000, &(0x7f0000000000))

03:06:54 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 4:
socketpair(0xc, 0x6, 0x3d74, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x440680, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080))
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0)=[{{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}], 0x18)

03:06:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 0:
socketpair(0xa, 0x3, 0xa000000, &(0x7f0000000000))

[ 2168.339462][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2168.347177][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:54 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:06:54 executing program 0:
socketpair(0xa, 0x3, 0xb000000, &(0x7f0000000000))

03:06:54 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0xff, 0xc}, {0x101, 0xb582, 0x7, 0x6, [0x8, 0x7fff]}}}}, 0x19)

03:06:54 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 'syz1\x00', 0xfffffff9})

03:06:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x1}, 0x2a, 0x2, 0x0, 0x0, "8dff9fb871485d7904c22df324ae3407631d05ff4dec810782ac29d1ed13f77974798d071f7b788001928d6e13f8c26c129055cfead030239b402ce32aaab9a1"}, 0x48}, 0x1, 0x0, 0x0, 0x1000c001}, 0x48004)

03:06:54 executing program 0:
socketpair(0xa, 0x3, 0xc000000, &(0x7f0000000000))

[ 2168.597815][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2168.607107][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:54 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:06:54 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x68, 0x4}, {0x3}}}}, 0x11)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getpeername$netrom(r0, &(0x7f0000000040)={{}, [@bcast, @rose, @default, @netrom, @bcast, @bcast, @bcast, @default]}, &(0x7f00000000c0)=0x48)

03:06:54 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:06:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 4:
personality(0x8)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1, 0x4)

03:06:54 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0xfffffffc})

03:06:54 executing program 0:
socketpair(0xa, 0x3, 0xd000000, &(0x7f0000000000))

03:06:54 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xfffffffffffffdd9}, "e0ed2cadfd0917baffab272419774f4194e10cea685eb7895e29eff519baea2a17f841bebf04dee353263d5138f6236679d95ef6df3021a41daf690acaa240f1c24fc982306ce0fc29c8a9e501f0a96f63c66306d8d16cecc41e1f4adbf9b0b60c5794409ff993c4ff18a3db525552470be320e271529aa46056933bd6383aeee7991a1d1e74c1bfbbd702570c4a9defcc3fe3c6e699d8c4722d858d42601cf5405e3fb5fc6c4e08e5cb33b3ee96488933111738b6349a822ae2bf0aef28035aaf7f2c346ce92de033c0ac50299adf8410ac37a82500"/229}, 0xe9)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10)

[ 2168.851479][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2168.882301][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:54 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x25, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:54 executing program 4:
socketpair(0xf, 0x800, 0x0, &(0x7f0000000040))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

03:06:54 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="020000040000000100981e7b865a840942229f33a5c781041e49cd2a450fdf4be28bbd2063fa479bed9dc37ba100e69eb5e44ca753e588229b500ca1fe30778395b0a26cdc9abda38fc2980216a92a5b616a0f"], 0x9)
open$dir(&(0x7f0000000000)='./file0\x00', 0x212040, 0x2)

03:06:54 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000980))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x40040, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f00000008c0)=@l={0x92, 0x7, 0xd0, 0x17, 0x8, 0x9, 0x8})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000800)=0x6, &(0x7f0000000840)=0x4)
r3 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x9, 0xc4000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000200)=0xc00000)
ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0xffffffff, 0x4, 0x0, 0x7f, 0x6, 0xdb2})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000900)={{0x3, 0x1, 0x3, 0x1, 0x8}, 0x10000, 0x2, 0x4f})
r5 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x385000)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000280)={{0xa, 0x5, 0x4, 0xffff, 'syz0\x00', 0x1}, 0x1, [0x80000001, 0x2, 0x8, 0x9, 0x20000000100, 0x91, 0xffffffff, 0x2, 0x1, 0xff, 0x7, 0x4, 0x52, 0x4, 0x5, 0x3c26, 0x3f, 0x7fff, 0x8, 0x8, 0x7d5c9da9, 0x4, 0x6, 0xffffffffffffffd0, 0x0, 0x1000, 0x7ff, 0x0, 0x4, 0x3f, 0x2, 0x5, 0x4, 0x401, 0x27b, 0x7, 0x40, 0x20, 0x2, 0x8, 0x7, 0x1, 0x20, 0xff, 0xa5, 0x100, 0x2d, 0x8, 0x4, 0x7, 0x5, 0x7, 0x10001, 0x0, 0x10000, 0x400, 0x8000, 0x5, 0x81, 0x9, 0x2, 0x3, 0x8, 0xff, 0x401, 0x81, 0x2, 0xff9, 0xffffffffffffff81, 0x10000, 0x400, 0x6, 0xccc, 0x6, 0x5, 0x8, 0x3899, 0x8, 0x3, 0xffff, 0x401, 0x7, 0x0, 0xffffffffffbffffb, 0x60de94e7, 0xaa, 0x8, 0x6, 0x1, 0x2, 0x1, 0x3f, 0x200000fac4, 0xffffffff00000000, 0x3f2, 0x1f, 0x7fff, 0x3, 0x8, 0x7fff, 0x6, 0x20, 0xec86, 0x7, 0x3f, 0x101, 0x3, 0x5, 0x728, 0x6, 0x200, 0x8000, 0x0, 0x2, 0xc000000000000, 0x8, 0xffffffff, 0x3, 0x60cc, 0xfff, 0x3, 0xe02, 0xfffffffffffffff8, 0x8000000000, 0xc, 0x7, 0xa5, 0x5]})
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x8, 0x13})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000780)=0x1, &(0x7f00000007c0)=0x4)

03:06:55 executing program 0:
socketpair(0xa, 0x3, 0xe000000, &(0x7f0000000000))

03:06:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2169.136984][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2169.161572][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:55 executing program 4:
socketpair(0x29, 0x2, 0xfffffffc, &(0x7f0000000040))

03:06:55 executing program 0:
socketpair(0xa, 0x3, 0xf000000, &(0x7f0000000000))

03:06:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x29, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 3:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400000, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x0, 0x9}}}, 0x9)

03:06:55 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400000, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f0000000040)=0x80000000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000001c0))
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x9)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xb)

03:06:55 executing program 1:
personality(0x8)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x1, 0x4)

[ 2169.400423][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2169.425157][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:55 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1})

03:06:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 0:
socketpair(0xa, 0x3, 0x10000000, &(0x7f0000000000))

03:06:55 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x476401)

03:06:55 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x2, 0x8001})

03:06:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x10000, 0x3ff, 0xf, 0x1, 0x6, 0x5})

[ 2169.674938][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2169.686392][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x4, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 0:
socketpair(0xa, 0x3, 0x11000000, &(0x7f0000000000))

03:06:55 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x4}}, 0x9)

03:06:55 executing program 5:
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000)=0x400, &(0x7f0000000040)=0x2)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:06:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3})
personality(0x40000)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=<r4=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100)=r4)

[ 2169.895536][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2169.906175][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="9f743ad5b26b3baa07f3022d29bcf137d2ec4660ccfd5b20ae7eef4e76d2e12b105bae3de05753ce302f6990070268fe8d0ed0eea653c625e4bfdd3b4d3e4a22f1956c6f4fb487e0d3ca63e155bf0de4344abf6984f040c4588f7f190824658984505f2880e79fddc40ff16bcaf51bdcd8868919706a8702c28dbe990cf9d80fdb85e6ff7c10084a7203a62c6b2610be7b2d2c70b93c1a8da59221bbb56b4af561688b4ee94077b556cc9159491638d004e29b9b"], 0x9)

03:06:55 executing program 0:
socketpair(0xa, 0x3, 0x12000000, &(0x7f0000000000))

03:06:55 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:55 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r0, 0x8004510b, &(0x7f0000000040))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000140)=0xf20f)
r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4000000000, 0x105400)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qrtr-tun\x00', 0x50100)
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x206042)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x400000, 0xa001, 'syz1\x00'})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000001c0)=0x385)

03:06:56 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "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"}, 0x102)

03:06:56 executing program 0:
socketpair(0xa, 0x3, 0x18000000, &(0x7f0000000000))

03:06:56 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x23, 0xa, 0x4, &(0x7f0000000600))
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000080))
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x428, 0x3f4, 0x700, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x27, [0x8, 0x80, 0x8, 0x2, 0xfff0000, 0x2, 0x2a, 0x7, 0x1, 0x568, 0x0, 0xffffffff, 0x6, 0x2, 0x3, 0x40, 0x1000, 0x800, 0x8, 0x100, 0x3824ac06, 0x1484, 0x200, 0x5, 0x81, 0x1000, 0x0, 0x2, 0x8000, 0x800, 0x1, 0x400, 0xffffff7f, 0x4800, 0x1, 0x6, 0x8, 0x8, 0x10001, 0xfffffff8, 0x0, 0x200, 0x6, 0x0, 0x0, 0x5, 0x6, 0xffff, 0xfffffffe, 0x0, 0x2, 0x400, 0x5, 0xff, 0x6, 0x101, 0x3ff, 0x5, 0xe2c, 0x3, 0x1000, 0x7, 0x4f, 0x6], [0x7, 0x1f, 0x7, 0x20, 0x30c, 0x3, 0x7f, 0x7, 0x3, 0x401, 0x10000000, 0x4, 0x69, 0x3, 0x99, 0x1ff, 0x0, 0xfffffffa, 0x3, 0xfff, 0x92, 0x8, 0x0, 0x5, 0x0, 0xffff, 0x7, 0xffffff80, 0x8000, 0x1, 0x63d, 0x788, 0x2, 0x1, 0x3, 0x3f, 0x8, 0x3, 0x8, 0x3ff, 0xd2, 0xff, 0x8, 0x9, 0x4, 0xffffffff, 0x7fffffff, 0x6, 0x5, 0x401, 0x7, 0x7fff, 0x1, 0xf5f, 0x10001, 0x9, 0x4, 0x200, 0x80, 0xffff, 0x800, 0xfffffffa, 0x9, 0x7], [0x8, 0x3, 0x4, 0xda, 0x7fff, 0x5, 0xc7, 0x60000, 0x10001, 0x4, 0x8, 0xfffff7c2, 0x8, 0x7f, 0x5, 0x5, 0x7fffffff, 0xf1, 0x8564, 0x3909, 0x8, 0x8c, 0x0, 0x1, 0x4, 0x6, 0x5, 0x80, 0x2, 0x4, 0x8, 0x800, 0x704a, 0x0, 0x2, 0x9, 0x800, 0x1, 0x5, 0x7, 0x40, 0x8000, 0x2b2a6af, 0x2, 0x2c4, 0x2, 0x3, 0x401, 0x8, 0x4cce3b85, 0x627, 0x1f, 0x9, 0x94, 0x80000001, 0x6, 0x5, 0x80, 0x8000, 0x8, 0xaa, 0xb594, 0x0, 0x2], [0x5, 0x1, 0x6, 0x0, 0xfff, 0x6, 0xffffffcc, 0x1000, 0x3ff, 0x8000, 0x2, 0x6, 0x4, 0x7fff, 0x2, 0x9, 0x6, 0x4c9, 0x4, 0x4e5, 0x10000, 0x1, 0x5146, 0xffff, 0x597ac878, 0x3, 0x2, 0xfff, 0x200, 0x4, 0x10000, 0x600, 0x10001, 0x6, 0xa83, 0x5285, 0x7fff, 0x3ff, 0x100, 0x8, 0x81, 0x9, 0x8546, 0x5, 0x3e8, 0x200, 0x0, 0x0, 0x2, 0x2, 0xfb, 0xff, 0x1, 0x80000000, 0x4, 0xc8, 0x3, 0x2, 0x1, 0x8, 0x0, 0x0, 0xacb, 0xe2], 0x7, ['^\xd1((-$\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x400c800)

03:06:56 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa5}, "18a4b5c4739e96b3b8a49104067e0d1351e9674bdf21f6dea07aca98674ec3ea93c59aa99d8a15b979277ef2687b38fac146d29d432503bb7ec48505faaf69805c9b2cc1be1c14770b84f8b6ade9dc2d9a58c590c5ed806405d2b72170f9ee4c938b9733f12faf472b86409172bc2ee7298b7db37d4dbd989065f52ff5e1bcd07ff9a771cbab8918dd86b713b8357f7b3417cf6c50615636492fbd2e906035d3398cd41c88"}, 0xa9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x1, 0x0, 0x101, 0x2, 0xab}, 0x9, 0x400, 0x3f})

03:06:56 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x1})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="85fbc20b9f15c815c086b7a241cc3e619443a7318fb590f5d1fc41be5faa892bc8a349587d8352b74173235808165aba62f2b1c52cf4437dd536829e85a686d1eded302e934e22383124170e4d6e97e02d26370c4d8af6f92a79f4c3e92aa911c446a3c2cdfe4f6aa0545d909b4bc1aef78187a29e992b6f5c554ebeba5f4a25a1810271ebd2e78f3bff9fdbbe8cc00dc01987c4ad02759427349dd937c14f91aed4195a15f6f810de5b60b8f622c88f198b9efb4f5291a26ec0515e47fe56327e18aea17a8e38bc2050489f0ecf96c303034d4455d3d186324bc4ba99bf0c6730577696cbd86ffcb5e12f9faaf3a72cb137b67f5f", 0xf5, <r2=>0x0})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000280)=0xff000000)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)={r2})
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000240))
ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000000)=0x9)

03:06:56 executing program 0:
socketpair(0xa, 0x3, 0x40000000, &(0x7f0000000000))

03:06:56 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2c0000, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
socketpair(0x23, 0x2, 0x10001, &(0x7f0000000040))

03:06:56 executing program 3:
r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0xf000)
shmdt(r0)
r1 = shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x5000)
shmdt(r1)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0200100400004001001a69916dec1753b2f500b60d4355d6ccfb5bf5c442588ad46bd56ec6b6d0496447390e3704cc31a1bb42e37e4665f8cb4cc951b1925d88c9e47fff4a4a86aa528aac17e0ae8a65095663a50409257f52beae07b88643533bff5f5ee06ef0a222a5658cf7760e6ff6fa0e9bdb08b1b5214e3c5bd6d93eb192c3b22f3ca26b9da0ec6ab445e150e194626810c90148802b7d2f3dd411506708c15039d965d5cb5818861bb4b2fcfa723d0258d79a6cd82f00ad7bf9e6b89f84d8ab48380b0b525b6a308487f5961e62237802329721962a16c58b0d6d54af454e0c"], 0x9)

03:06:56 executing program 5:
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x9, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x9, 0x4, 0x1})

03:06:56 executing program 0:
socketpair(0xa, 0x3, 0x41000000, &(0x7f0000000000))

03:06:56 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2170.616430][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2170.647375][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:56 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xffffffffffffffa4}}, 0xffffffffffffff31)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x2, 0xc9, 0x5}}}, 0x8)

03:06:56 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe6}, "3e817c17f5b7b288cd5f291f9bf1683ddaa814bba4b7e629694f0d98a9abee0eff39a306c15e9afb23b5433ad4b5a07725ba9590f5f6d23d43bd9d2898f65f34dd902531f424a0db02028c486be0bdc87d058aa1187883488e35e27a81535f69ca5599b75e359c0f08db5849d7b36c5de9bd881163bfd2e470ca52e0e3504c20253660875dfe7d38f9983b81280361082c76a72d833919d0fac46b6c395a53df46a13aa3d2bec4f20f6a5eb397b4094912d9ef0edf203fde78d9f70bb6613d0be970c9a00d00d6572ddba3969b93465db6bb47b1cdc96e6ab11b4bde4dc3ee645282c51cc99b"}, 0xea)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x442, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x167401, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000))
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000001c0))
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x80000000)

03:06:56 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1fe, 0x369101)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x111000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0xa, 0x2})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x2)

03:06:56 executing program 0:
socketpair(0xa, 0x3, 0x48000000, &(0x7f0000000000))

03:06:56 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 4:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

03:06:56 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 3:
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="020000c59f5a"], 0x11)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
read$sequencer(0xffffffffffffffff, &(0x7f0000000000)=""/244, 0xf4)

03:06:56 executing program 0:
socketpair(0xa, 0x3, 0x4c000000, &(0x7f0000000000))

03:06:56 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"3059d4171d3ac3ec29e7e75c07c8563e", <r1=>0x0, 0x0, {0x80000001}, {0x0, 0x3}, 0x7, [0x2, 0xffffffffffff0001, 0x2, 0x0, 0xffff, 0x6c, 0x6, 0x2, 0x40a, 0x4, 0x47f, 0x5, 0xfffffffffffffff7, 0xaba, 0x7, 0x4]})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)=r1)

03:06:56 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:56 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x3fa, 0x800, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x42004)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f00000001c0)={0x788, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x6d0, 0x8, 0x0, 0x1, [{0x6cc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc2<b\xf5<W\xcd\xbfi\x1c'}, @WGPEER_A_ALLOWEDIPS={0x680, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @remote}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a='\xa0\\\xa8Ol\x9c\x8e8S\xe2\xfdzp\xae\x0f\xb2\x0f\xa1R`\f\xb0\bE\x17O\b\ao\x8dxC'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x788}, 0x1, 0x0, 0x0, 0xc000}, 0x48081)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, @sdr={0x50565559, 0x9}})
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000a00)=0x1, &(0x7f0000000a40)=0x4)

[ 2171.042656][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2171.052261][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 4:
socketpair(0x8, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0xa78, &(0x7f0000000080)=0x4)

03:06:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffd})

03:06:57 executing program 3:
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000580)={0x3, 0x6}, 0x2)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x42c, 0x3f4, 0x400, 0x70bd2a, 0x25dfdbfe, {0x10, 0x1, 0x1e, [0x1, 0x9, 0x401, 0x0, 0x3, 0x1f, 0x6000, 0x101, 0x1f, 0x11, 0x7, 0x0, 0x2, 0x2, 0x81, 0x258f, 0x3, 0x20, 0x0, 0x5e, 0x7, 0x7fffffff, 0x80000001, 0x8000, 0x1, 0x7ff, 0x2d10, 0x3ff, 0x91, 0x400, 0x800, 0xffffff7f, 0x2244, 0x1, 0x0, 0x100, 0xa2e, 0x8, 0x5, 0x3, 0xfffffc01, 0x20, 0x7, 0xff, 0x1, 0x23af27b6, 0x5, 0x96, 0xffffffff, 0x7fffffff, 0x4, 0x8, 0xfff, 0x6d, 0x0, 0x401, 0x1, 0x2, 0x5, 0x101, 0x3, 0x1, 0xf46, 0x1], [0x6, 0x543f, 0x2c3, 0x101, 0x1, 0x4f, 0x0, 0x5, 0x7, 0x20000, 0x0, 0x6, 0x0, 0x3, 0x7ff, 0x80000, 0x0, 0x7, 0x5, 0x2, 0x1, 0x1, 0x6, 0x6a56, 0x20, 0xffffffc1, 0x971e, 0x0, 0x3, 0x3, 0x2, 0x2, 0x8, 0x2, 0x1ff, 0xb8, 0xc0, 0x101, 0x4, 0x7fff, 0x1, 0xd3, 0x0, 0xfffff000, 0xfffffce2, 0xd04, 0xfffffffc, 0xc, 0xfffff679, 0x7, 0xfffffffd, 0x8, 0x7, 0x2, 0xffffff80, 0x5, 0x7, 0x7fff, 0x5a, 0x3ff, 0x4, 0x5, 0x0, 0x40], [0x23c, 0x5, 0x3, 0x80, 0x3ff, 0x4, 0x1f, 0xffffff00, 0x88, 0x1, 0x100, 0x3, 0x0, 0x0, 0xfff, 0x2, 0x529fa53, 0x80000000, 0x6, 0x2, 0x9, 0x5bd, 0x6, 0x80, 0x8, 0x0, 0x2, 0x1, 0x81, 0x401, 0x7f, 0x17b, 0x3ff, 0x1e, 0x6, 0x65, 0xfffffff8, 0x8, 0x7f, 0x229, 0x3, 0x8, 0xfffffffc, 0xffffffe0, 0x50141845, 0x9, 0x0, 0x6, 0x2, 0x5e3, 0x0, 0xff, 0x7, 0x0, 0x7276, 0x8, 0x80000000, 0x2, 0x3, 0x5, 0x2, 0x59, 0x3f, 0x81], [0xdd7, 0x7, 0xffffffe1, 0xfffffffd, 0x2, 0xffffffff, 0x81, 0x0, 0x0, 0x10000, 0x7, 0x1f, 0x5f26c2dd, 0x9, 0x1, 0x1ff, 0x7f, 0x80000000, 0x1, 0x0, 0x6, 0x6, 0x68f83f2f, 0x76, 0x0, 0x4, 0x20, 0x7, 0x20, 0x81, 0x5, 0x96, 0x200, 0xffffffff, 0xfd78, 0x6314, 0xffff5b3e, 0x1, 0x3, 0x5, 0x8c, 0x5, 0x7ff, 0x6, 0x7ff, 0x3, 0x6, 0x1ff, 0x2, 0x8001, 0x1000, 0x5, 0x5, 0x2, 0x2, 0x929, 0x3d, 0xfffffbff, 0x40, 0x7, 0xf1, 0xb0c5, 0x101, 0x9], 0xa, ['-\x00', '{)!\xe9\\\x00', '\'\x00']}, ["", "", "", ""]}, 0x42c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9d0340030000100050900000300ff7f010101000800070003000400003f0502000200e4000c703a00e78ce605f702b3e9006f079df40f0304000f00a6000ff700006f7d00000f0704007f000100"], 0x39)

03:06:57 executing program 0:
socketpair(0xa, 0x3, 0x68000000, &(0x7f0000000000))

03:06:57 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 4:
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{@fixed}]})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000200)={0x1, 0x8})
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000180)=0x8, &(0x7f00000001c0)=0x4)
socketpair(0xa, 0x2, 0x40000000, &(0x7f0000000040))

03:06:57 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040))
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x8, 0x4, 0x7, 0x1000, 'syz0\x00', 0x7}, 0x1, [0x5, 0x7, 0x1864, 0x1, 0x8, 0x5, 0x1, 0x4, 0x81, 0x20, 0x8, 0x8, 0x8000000000000000, 0x6, 0x2, 0x0, 0x20, 0x2, 0xfeb3, 0xffff, 0x3, 0x80, 0x5c73, 0x1, 0x401f1766, 0x200, 0xbc, 0x5ab, 0x313d, 0x7, 0x5, 0xfffffffffffffffc, 0x1, 0x3, 0x6, 0x541, 0x1, 0x7, 0x80000000, 0x4, 0x4000000000000000, 0x9, 0x3, 0x40, 0x4, 0x1ff, 0x7fff, 0x100000001, 0x8a, 0x9, 0x81, 0x6, 0x5, 0x71, 0xc9a7, 0x7fff, 0x7, 0x0, 0x0, 0x3ff, 0x3, 0xca, 0x3, 0x7fffffff, 0xffffffff, 0x100, 0xdbd, 0xfffffffffffffffe, 0x1, 0x5, 0x20, 0x6, 0x50, 0x0, 0x6, 0x0, 0x5, 0x20, 0x8, 0x20, 0x5ad8, 0x4, 0x8, 0x80, 0x0, 0x100000, 0x9, 0xa9fb, 0xfffffffffffffff8, 0x1ff, 0x7, 0xfffffffffffffffd, 0x5, 0x9, 0x401, 0x39eaa682, 0x10000, 0x1, 0xffffffffffff4c66, 0xff, 0x401, 0x8001, 0xc5, 0x9, 0x8000, 0x82, 0x5, 0xa33, 0x2, 0x8, 0x0, 0x7, 0x80, 0xc3, 0x68, 0x5, 0xad6, 0x100000000, 0x6fa1ffa3, 0x0, 0x0, 0x6, 0x2, 0x7e1, 0xffffffffffff21bd, 0x0, 0xa9de, 0x6]})

03:06:57 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x41}, 0xffffffffffffff3d)

03:06:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 0:
socketpair(0xa, 0x3, 0x6c000000, &(0x7f0000000000))

03:06:57 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
clock_gettime(0x2, &(0x7f00000000c0))
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1)

03:06:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:06:57 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000280)=0x8)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x10, 0x70bd2d, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000094}, 0x1)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0600067db82f482764a0025a1c62780b0d7690b97388cd"], 0x1)
socketpair(0x25, 0x6, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
sendmsg$AUDIT_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3e8, 0x4, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000810}, 0x400c000)

03:06:57 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x3, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xe, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 0:
socketpair(0xa, 0x3, 0x74000000, &(0x7f0000000000))

03:06:57 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000)=0x1)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:06:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

03:06:57 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:57 executing program 0:
socketpair(0xa, 0x3, 0x7a000000, &(0x7f0000000000))

03:06:57 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="00930b90028566c4ec6c01037e9400000000"], 0x11)
socketpair(0x2b, 0x5, 0x5, &(0x7f0000000080))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x6000, 0x0)

03:06:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x18, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:57 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x3f4, 0x800, 0x70bd26, 0x25dfdbff, {0x10, 0x2, 0xb, [0x5, 0x3, 0x691e, 0x9f, 0x7, 0x4, 0x0, 0x400, 0x8, 0x1f, 0x12b2, 0x4, 0x9, 0xaa39, 0x3, 0x0, 0xc4, 0x9, 0xfff, 0x7f, 0x401, 0xfffffffd, 0x4, 0x7f, 0x6, 0x9, 0x3, 0x1, 0x6, 0x40002, 0x80000001, 0x80000001, 0x2, 0x7, 0x8, 0x4, 0xfffffff8, 0x81, 0x1, 0x21, 0x4, 0xfffff801, 0x3, 0x80, 0x800, 0x8001, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1f, 0x1f, 0x2, 0x64b99786, 0x1, 0x1, 0xf5, 0x463, 0x5, 0xfff, 0x1000, 0x6, 0x8001], [0x0, 0x8000, 0x3, 0x7fffffff, 0x2, 0x6, 0x5, 0xcd1, 0x5, 0x4c, 0x3, 0x1, 0x848b, 0x9, 0x7, 0x5504d16a, 0x465, 0x3, 0x1, 0x618, 0x7f, 0x5aca, 0x100, 0x5, 0x8, 0x8, 0xf2, 0x6, 0x8, 0x0, 0xfffffff9, 0x3, 0x0, 0x5, 0x0, 0x400, 0x7f6c, 0x31, 0x2, 0x9, 0x1, 0x200, 0x8, 0x8, 0x7, 0x0, 0x0, 0x0, 0x100, 0x1f, 0xfff, 0x8, 0x8, 0x3f, 0x0, 0x0, 0x9, 0x1, 0x6, 0xf6, 0x2, 0x5f82, 0x6, 0x40], [0x9, 0x3, 0x8, 0x0, 0x80000000, 0x40, 0x755f, 0x7, 0x5, 0x800, 0x80000001, 0x7, 0x5, 0x8, 0x20, 0x8, 0x63, 0xfffffff8, 0x8, 0x7, 0x7ff, 0x7, 0x9, 0x9, 0x1ff, 0x4, 0x32f, 0x2, 0x7, 0x8, 0x1, 0x80, 0x400, 0x8001, 0x7, 0x1f, 0x3f99812d, 0x6, 0x8, 0x1513, 0x401, 0x1, 0x1, 0x9, 0x1, 0x200, 0x4, 0x9, 0x20, 0x0, 0x7fff, 0x1, 0x4, 0x8001, 0xffffefa4, 0x1, 0xdd3, 0x80, 0x5, 0x80, 0x9, 0x5, 0x8000002, 0x4], [0x4, 0x80, 0x1f, 0x8, 0x1eae, 0xff, 0x8, 0xffff, 0x10000, 0x101, 0x0, 0xffff, 0x2, 0x630, 0x1, 0xeaf0, 0xab05, 0x8, 0x1, 0x200, 0x3, 0x7fffffff, 0x8, 0xff, 0xec, 0x5, 0x7, 0x5, 0x4, 0x4, 0x0, 0x8, 0x3, 0x3, 0x7fff, 0x3, 0x6, 0x6d, 0x3, 0xffffffff, 0x6, 0x10000, 0x2, 0x8, 0x6, 0xe19, 0x20, 0x8, 0xb28, 0x3882, 0xffffffff, 0x0, 0x8, 0x9, 0x4, 0x8, 0xfffffffc, 0x8000, 0x6, 0x0, 0xfffffc1d, 0x0, 0xfffffeff, 0x5], 0x1, ['\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4c080}, 0x24008001)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000680), 0x2)
socketpair(0x2, 0x4, 0x1, &(0x7f0000000540)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3fb, 0x8, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}}, 0x20008000)

03:06:57 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

[ 2172.012234][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2172.023149][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:57 executing program 0:
socketpair(0xa, 0x3, 0xfeffffff, &(0x7f0000000000))

03:06:57 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:06:57 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3, 0x10001)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:06:57 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x18}}}, 0x9)

03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x67, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 5:
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000040)=0x9)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x202, 0x20002)
ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f00000000c0))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, '\x00', 0x2})

03:06:58 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2172.247170][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 4:
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, 0x453, 0x200, 0x70bd2b, 0x25dfdbfd, "33fa649733dec85175eddd58fc53f70fae8fd97af27cb6e25839a0c4bb398ed8176606e6b7e289691c7a70631075ed1c44ce51b3ac3f65316f2a309ddedbe9535f8f3557f61150bd9239e839d91b513d039a147b955d2615395e646a99fbe9e1e8852f059a56b222f859badd4f9c4dd097b1f9dcb5591cd2f3409643e801882d452e1d087a09b87114f8d3ec1e4352e2e9d9ba1b26fb7c4d7d2aa334dc559f92b1598da0b8169f6a6b46d0ffdee990a638614fad1a840c2bec43894166a1e48249dd201e97e7493be1f43f5aecf2c2d36c3ac32030c6cefd376fc5e33e1c9998421aabcf2b5f71d1e4bd1f6684b7a687fefaa5a304a9", ["", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x4011}, 0x48804)

[ 2172.289001][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:58 executing program 4:
socketpair(0xa, 0x2, 0x101, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x13, 0x3, 0x0, 0x0, "7a7692a999f356f22d40a18098ade20ef09e2df1c24ad8f422820d88684f4915d557851fc0ba720535f2ee2a7f7f0ff6db551199b77653bc3347093d143eb580"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8001)

03:06:58 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x200, 0x70bd29, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x200540c0)

03:06:58 executing program 0:
socketpair(0xa, 0x3, 0xfffffffe, &(0x7f0000000000))

03:06:58 executing program 5:
r0 = shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0xf000)
shmdt(r0)
shmdt(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0xd6cb, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000100))
shmdt(r0)

03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x2, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="ef846c97969fb4d04dcb2ed95609"], 0x9)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x95, 0x2}, {0x20}}}}, 0xf)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x3, 0x2})

[ 2172.531788][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2172.542892][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:58 executing program 0:
personality(0x410000e)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0xff, 0x4)

03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2172.645846][ T8469] Bluetooth: Unexpected continuation frame (len 10)
[ 2172.654920][ T8469] Bluetooth: Unexpected continuation frame (len 10)
03:06:58 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x203, 0x2200)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:06:58 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x400, &(0x7f0000000040)=0x2)

03:06:58 executing program 4:
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x9, 0x109400)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000100)=0x53)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0xea501)
socket$phonet_pipe(0x23, 0x5, 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200)

03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x4, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 0:
socketpair(0xa, 0x3, 0x3ff, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4)

03:06:58 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x10000)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000080)={0x101, 0xc, [0x10000, 0x1, 0x4]})
ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

[ 2172.901947][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2172.915882][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x5, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x0, 0x8000}}}}, 0x11)

03:06:58 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x6, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:58 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$phonet(r0, &(0x7f0000000080)="41439d3fb170e0c534a245d767e325c52e2eb9f664b9870ed07d4184b2dad06439ad4b54e0d8d3259d9c434f92fa9d8b3218dfecd88c0390c6ea93c2f3126c9ed8e870aed1313ae26384a4", 0x4b, 0x1, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x2, 0x2, 0x2, "7fd2fd3df914b3f37a9693df7f08f5e693d81400", 0x43564548})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x2)

03:06:58 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x6, 0x4, 0x0, 0x5})
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1000, 0x10800)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000140))

03:06:58 executing program 0:
socketpair(0x1d, 0x3, 0x4000, &(0x7f0000000240))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200)={0x6, 0x1}, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x100, 0x5, {0x77359400}, {0x483785fe5d745883, 0x0, 0x7, 0x8, 0x9, 0x5, "4ca5d118"}, 0x13cc, 0x2, @offset=0x7, 0xd6})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x0, 0x2, 0x4})
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={[], 0x11}}, 0x8)

03:06:59 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2173.117624][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2173.131544][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:59 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x366d, 0x2c100)

03:06:59 executing program 4:
socketpair(0x22, 0x2, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = accept4$netrom(r1, &(0x7f0000000140)={{0x3, @null}, [@rose, @bcast, @bcast, @rose, @null, @null, @netrom, @bcast]}, &(0x7f00000001c0)=0x48, 0x180400)
getsockname$netrom(r2, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @remote, @default, @netrom, @netrom, @netrom, @remote, @default]}, &(0x7f0000000280)=0x48)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000340)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000480)={"03acd09a7831a3fc8060a5a75e77d4e9", r3, 0x0, {0x7ff, 0xffff}, {0x7, 0x3}, 0x5ede, [0x2, 0x1ff, 0xfcc, 0x20, 0x6, 0x3, 0x10000, 0x1, 0xfff, 0x6, 0x0, 0x100000001, 0xffff, 0x1, 0xb5a, 0x1]})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000300)=0x2, 0x4)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000580)=[{{0x1, 0x0, 0x0, 0x1}, {0x2}}], 0x8)
setsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000100)=0xffff, 0x4)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080)=0x40003, 0x4)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000380)=0x4, &(0x7f00000003c0)=0x2)
recvfrom$netrom(r6, &(0x7f00000002c0)=""/9, 0x9, 0x10080, &(0x7f0000000400)={{0x3, @null, 0x6}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast]}, 0x48)
mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x8, 0x110, r6, 0x82000000)

03:06:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x7, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2173.313468][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:59 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000))

03:06:59 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000140))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000))

03:06:59 executing program 0:
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x4, 0x0, 0x0, 0x1}, 0x1, 0x2, 0x0, 0x0, "55823bef8d924e18"}, 0x10}, 0x1, 0x0, 0x0, 0x4000854}, 0x20040005)
socketpair(0x8, 0xa, 0x0, &(0x7f0000000000))

[ 2173.354305][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:06:59 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x5, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

03:06:59 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0)
ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0xcc5bacc8cd673d53, 0x70bd2c, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48080}, 0x4040010)

03:06:59 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:59 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x1ff, &(0x7f0000000080)=0x4)

03:06:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x8, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:59 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x800, 0x2)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x100, 0x0, 0x81, 0x8, 0x4})
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x61800041}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4ea4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x801)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))

03:06:59 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x0, 0x5, 0x7fff, 0x800})
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6ba, 0x4)
bind$phonet(r0, &(0x7f0000000100)={0x23, 0x4, 0x0, 0xb8}, 0x10)

03:06:59 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x5, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

03:06:59 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9})

03:06:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x9, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:59 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x1, 0x4)

03:06:59 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400002, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x5})

03:06:59 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x8, 0x1f}, 0x2)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02733e2b059424765fbcbd8a848a606d89425c0c0e7d56b159a060cf1e8443d44e08ff11c4ee97b107399e0faba67af0439e55c6558365334f305e0db90c027ae031d7d2b64158d4be5b97b7f294c39b663a850cd9a6c8f21a2afdc3fd0aa6abd110f262f5cf16c7b4bee8d3842f16b0fa7249ec41e3a3b636e7b4cafd80c4bd82989f23529f9b4dea8d92c5ecb6442401f0a02ef856a54b361a1cce13ebe36d53593906b2f2a10aeda4d986710e035e221ede29cb760510b1073101a353224ac167e3a8d9f0ce06d92e3ee3d04baea9dcb6bc81707deba594046809e8"], 0x9)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x309282, 0x0)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000280), 0x2)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c800277fdefb03fdd547326311ac53268c2a40a3ae884645eafdef8360c2a5d82833ff55a40adb79b3725c0741157b9261e259152421586d082f24fe2fb3cc68e7fb95b974e8ba050715eb2d30a3bbbb5d020d410769262ea3dfdd4d2f62cc94847c256bdf5c0b59b1c2471edcb92ea2b339cda8f2ecd400ee5aec9564f4344324f89a5dec67fd95b7a6e7ee91902c58a4cfc566616850a768b1e7"], 0x2b)

03:06:59 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x5, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

03:06:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xa, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:06:59 executing program 4:
socketpair(0x25, 0xa, 0x0, &(0x7f0000000040))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000))

03:06:59 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000140)={{0xa, 0x2, 0x1ff, 0x8001, 'syz0\x00', 0xfff}, 0x1, [0x0, 0x7, 0x8, 0x9, 0xdc, 0x4, 0x11, 0x9, 0x5, 0x7, 0xfffffffffffffffe, 0x4, 0x7, 0xfffffffffffffffe, 0x3, 0x3e, 0x80, 0x81, 0x4, 0x1412, 0x7, 0x7, 0x10000, 0x6, 0x3ff, 0x2, 0x6, 0x7, 0x1, 0x1, 0x4, 0x3, 0x4, 0x2, 0xb24f, 0x80000000, 0x3f, 0x5, 0xffff, 0x80, 0x3f, 0x4f, 0x401, 0x1ff, 0x9, 0x5, 0x5, 0xca7, 0x9, 0x4d44, 0x2, 0x99c5, 0x3, 0x2a33, 0x5, 0x3, 0x2, 0x1, 0x5, 0x1, 0x80000001, 0x52, 0x1ff, 0x3f, 0x10000000, 0x3f, 0x101, 0xb3, 0x3ff, 0x4, 0x7, 0x4, 0x100000001, 0xcd, 0x6, 0xf92, 0x2, 0x200, 0x80000001, 0x5, 0x6, 0x4, 0x200, 0x8, 0x1, 0xc8b, 0x100000001, 0x5, 0x3ff, 0x80000001, 0x0, 0x10000, 0x20, 0x3, 0x7, 0x80000001, 0x8, 0x7, 0x40, 0x7fffffff, 0xd477, 0x100000000, 0x7fff, 0x9, 0xa1, 0x8, 0x0, 0x2d, 0x4, 0x70b256a5, 0x3f, 0x7f, 0x401, 0x2, 0x7, 0x7ff, 0x7, 0x8, 0x3, 0x152, 0x0, 0xea, 0x7, 0xff, 0x9, 0xfffffffffffffffc, 0xee1c, 0x6]})

03:06:59 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x5, 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

[ 2174.031038][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3699
[ 2174.041694][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3699
03:06:59 executing program 0:
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x800, 0x9})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x81)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xb, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:00 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000000c0)={0x3, 0x2, 0x45, 0x1, 0x6aaf8d8})
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="5ef79e64120ba73fff"], 0x9)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0x3, 0x0, 0xff}, 0x81, 0x40})
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000280)=""/245, 0xf5, 0x10000, &(0x7f0000000140)={{0x3, @null, 0x8}, [@null, @bcast, @default, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3f, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default]})

03:07:00 executing program 4:
socketpair(0x1d, 0x3, 0x4, &(0x7f0000000000))
ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407)

03:07:00 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x8)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

03:07:00 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100040, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000040))

03:07:00 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040000000000200300"], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x280, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000140)=0xc0ac)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200), 0x2)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4}, {0x3, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x101, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)

03:07:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xc, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2174.381866][T23233] can: request_module (can-proto-4) failed.
03:07:00 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

[ 2174.425226][ T8469] Bluetooth: hci3: Received unexpected HCI Event 00000000
[ 2174.435011][ T8469] Bluetooth: hci3: Received unexpected HCI Event 00000000
[ 2174.441335][T23233] can: request_module (can-proto-4) failed.
03:07:00 executing program 0:
socketpair(0xa, 0xa, 0x0, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f0000000040))

03:07:00 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:00 executing program 4:
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000))
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:07:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xd, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:00 executing program 3:
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x9)
socketpair(0x2, 0x0, 0x7ff, &(0x7f0000000100))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@rose, @null, @netrom, @default, @bcast, @bcast, @rose, @netrom]}, &(0x7f0000000100)=0x48)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000001580)={0x1f, 0xffff, @fixed, 0x7ff}, 0xe)
ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408)

03:07:00 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x4, 0x200)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:00 executing program 1:
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

03:07:00 executing program 4:
syz_usb_connect$cdc_ncm(0x3, 0x22a, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x218, 0x2, 0x1, 0x7, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "12c0a07f"}, {0x5, 0x24, 0x0, 0x1f}, {0xd, 0x24, 0xf, 0x1, 0x20, 0x1, 0x25, 0xe3}, {0x6, 0x24, 0x1a, 0x1f, 0x13}, [@mdlm_detail={0xeb, 0x24, 0x13, 0x2, "32efc9eb76a218eaac2cf1f401d53a08e59da5991686709c6878c5c7542ca25982c2a3fdccc0ec1dd3f8f9c5d57a0850b1c75039b3a402e0037d9e840c622513854d7198b46f7bf6d696327971cdd48090958198bac1ecd4e58b9c5d0fa02c0f1b8fdbc0c066d91a6c8081c46612e86e5878114fce172edb0fcc79b554dabc357df7887d73851bffac6e1ebab152f2036d425d75e44d6d4c6649583925d1507c13b342cc0966c44c447d16a0887551af0525f23a1b1a60b74f9588c3934060a0e42a2b80339ca430a9169c85b2c62b8032a0a4c427f3526a9f052300359e874a8d7ab6b209e368"}, @mdlm_detail={0xcd, 0x24, 0x13, 0x0, "a9115228f475ba3c5c319d8188764124af6aab9a9b78ac1b0825ac06ab05b44264c383a175d45a891a51816a779b7cb1f9af8cf4b8a345ab8cb1fc9fa50d5f1724164623a06f1316b4e9401d7dcfd71a551f40cfc4724d3e24ff4bd5c477febde2f997186807b6478d7dfd7e8ec36c5bc1b1fee9e1456036e90eb99baf1ad07a12ca7d4a9b191339ea1da0af88e72eb6eda29c85809c7593b8777301a0e1cb2fb28545742c297eaadc9c033f19a4e51e4ef5ba0a9c69fe16b1d97ced2d6707b24055475cc181ffbf2b"}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x8, 0xfb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xef, 0x80, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x80, 0x4}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0xa8, 0x19, 0x1, 0x40, 0x11}, 0xf6, &(0x7f00000002c0)={0x5, 0xf, 0xf6, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x200, 0xf00, 0x7, [0x3f17, 0xff0000, 0xffffc0, 0x0]}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x200, 0xf, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x80, 0xff}, @generic={0xbf, 0x10, 0x4, "b30fe81d1a3d82968e0115ad35dbee7f40efe13fc82cd80d4cd44e9d5999a5538203d5e605c8dfa1f0f1a685ed8bfbc14bb87fee21b43c233c6d270496a5193c8e0f06ef151224bfd6cc2c76a08f2389b3bdc4d723f1a43000aeb0747cd272b5318b3cc3bf9cfb844397be9ca824f43104ccadec847ff0fa3caf9e78778b6ef58a293c04108a673e25df7edc5474babcefb90bf7cf4a4173084c2d2a2307652d1d33ebc21c8e9046beaccec37d6792fefd4a6a735fa4e90eb10b6fe5"}]}, 0x1, [{0x6c, &(0x7f00000003c0)=@string={0x6c, 0x3, "ebf76e3648a2b98e4f8028a0283a8af85007f39d20c2a8643337ad49cfa1f574cd70ea90f3ee1547f61ab3d59fc4f27d12474d247049123863a2bca76a8c92dad59c9381f6f72c9fd091c257a838986caa9738eab795610b4bb1c64815d89de09f6a27f7e2c5b0e959ce"}}]})
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

[ 2174.711229][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 16
[ 2174.730531][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 16
03:07:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xe, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:00 executing program 1:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES32], 0x9)

03:07:00 executing program 0:
socketpair(0xa, 0x4, 0x0, &(0x7f0000000140))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @default, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x3, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xfc, 0x464, 0x10, 0x70bd29, 0x25dfdbff, "0a40f3f310a1ac8dcd7388c8d35f4605bd6f89d864c9b642717374fbb6624559d44328f30a0a92367f22ad76b5fc43e0cd42cefbcfd8a71f72c2c03a6ca4944a2865273860967a558e305474956fb8c2f670d2cb5673ad39b9cf599c556202e092648b683375021e71fce78940e8324b83247cff3a194504c75d4f8a87ea67aa7d4a457dee402f004bbcf329a5bb829ad00fe5638ce8bee4b08f8e912c85b22324089710bd8ad97463c2524cb0f72aac6a7bed8c810c457c5cc5c19acfe23086a6324c36a071a9d6903f06b6672b673e95b531c3eab2aec190ee27f178eeb79ec8e57d5e127eb8b5c3f7", ["", "", ""]}, 0xfc}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x80, 0x1)
ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64)

03:07:00 executing program 3:
syz_usb_connect$uac1(0x6, 0xda, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0xff, 0xa0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0xfc}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0x7, "4efeaf2c2841"}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0x7, "1bbb06bdcc"}, @feature_unit={0x11, 0x24, 0x6, 0x3, 0x6, 0x5, [0x8, 0xe, 0x9, 0xa, 0x4], 0x9}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x92, 0x8}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x1, "5cc6865d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x40, 0x3, 0x7f, 0x8, "f329"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x20, 0x2, {0x7, 0x25, 0x1, 0x1, 0x7, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x400, 0x7, "828208b8c420"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x9, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1f, 0x2, 0x6a, 0x0, "6d4798ac7893d8c13d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x8, 0x9, {0x7, 0x25, 0x1, 0x0, 0x0, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0x6, 0x40, 0x40, 0x7}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x4, [{0x4c, &(0x7f0000000180)=@string={0x4c, 0x3, "cb1dbd5023f538d50d182e246a04e22d19a708f80b4d0d99ce09792d9c4a3c2e59bdb7ea4c6e49f808eb27e851389030b3f5b5edffa21aa4d865746730ddab7c23f9805788683f9ff906"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x420}}, {0x43, &(0x7f0000000240)=@string={0x43, 0x3, "8da657fac582c4d0482990c682680ffa40a64dbb3c1db9350da8015b88349a6efa21ee88cf0edc4b808cf1668c689bffd54e6e374d5236fcc325a8375e07aadf79"}}, {0xac, &(0x7f00000002c0)=@string={0xac, 0x3, "067149b2e66b4980e82822d0bdfb3487e66d8176140b220d01a5af0e67f4cd7b4b664283a6a5d059ef3775a65e8eb6704c46a7b74df6a33b422e018835e29405bb4177cfb5eba210bf9be3e30c04b8973bcac31a27e5b06042f1109ae92d65eba11855ee34b00d5f7a053dcc650b26fe74a4bebbe11ea8577fd873b2e5958270dce3070d55a93f91bc97d61eb5510a3138cc126a89d27c251bb4f2f0e11e4d8f603eb38b5e1bb30e6a38"}}]})
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0)
shmget(0x0, 0x2000, 0x78000080, &(0x7f0000ffd000/0x2000)=nil)
syz_usb_connect$cdc_ncm(0x2, 0x18c, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x17a, 0x2, 0x1, 0x3, 0x50, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5bd4, 0x8000, 0x3, 0x40}, {0x6, 0x24, 0x1a, 0xfc01, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x4, 0x8f, 0x9}, @mdlm_detail={0x102, 0x24, 0x13, 0x9, "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"}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x5, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x80, 0x2, 0x86}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x200, 0xa4, 0x5, 0x8, 0x40, 0x8}, 0x1d3, &(0x7f0000000600)={0x5, 0xf, 0x1d3, 0x5, [@generic={0xad, 0x10, 0x2, "f2f95c3b3d6429ce8fde7734f7bbfc59ae192845e9776e59837b5b12a8389b608e21c7421119c676691e452949b2c46356bc1492d2617106135563998cc95fc0eb3cec991f93978fa09fcd80ca3b7aba487bd0976d5da7337610131cb4c7d49f0e891d03058e751f356c9ad69625e0288bc5b6002d056f9bca3414125a4edaad7f816557c1e45c106041f2c27ef86f38530ca46987213722aa2a9790b878ef109e4f605d7c0476a05110"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e76dbe86dffb289264f82d71c6371518"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x0, 0x7a, 0x9, 0x73}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x7f, 0x6}, @generic={0xf8, 0x10, 0xa, "68db15ce43325f34363c9bac38bf2a487654021374e6c58d92870bf26c695a27c1986ce9cd236469a9aab412b9501618fbf6d01af7f3a82075391a74982cb257b3edacb2d81ce1f88348a437e11b25c9cd9f53083e589a50b79aeb8f11cc0653d5aa7d98a4427aa3298a370295025735bdf10e179ee05ea23f7b634feebd19b8e8735839b1171d8df8180a5bb4805a5994ab68c2ab56ed4efa8a1de9b175c51608fcd880a0e300759f1b300ce1f907f05ea014f15879591a13e20ffb93ab738d6f029e2e787a10edb5b09510cd30a36dfe6873d985bfd7d434e09c7e144b8895cc1ad15720c730227a268e3c5fb6878ea5c5578d3a"}]}, 0x8, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x200a}}, {0x67, &(0x7f0000000840)=@string={0x67, 0x3, "be7fe8f100644d5812386a5589c58ac9275eb0c9323dc953202df03316b5b780c1d426515f13d31aff54e852c801f07c6371bcaaf959c24d8e79484af3141510fdb544c92d5e85126e9555b1fc5680e69165e1aa93183aa79d71e920598a7e4d49fb66b076"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x140a}}, {0xf3, &(0x7f0000000980)=@string={0xf3, 0x3, "c9d4f7735e481355a8a368401f8e7c68fd6f8155a9598840d803ec91d8d574e8a1c912288ecfa5be8477732a8d5c84a820ef40eae54c7596ae17c6c4280064d23139e768a3ba92b4264ba653079a954766bd770783edb0f561ac71ea4841c255fe98ee68c51829000391feaee8738340fafa19c128e6dcc2f99b7e08663b540efbfbe69582b7382a50bbacdfb3b07b34b3c16b50c58883e8c831f70078a68c0d3d3a45c6f83c691c3b4f630c36bb2adb635753c5fd20cf43329d3392527948496ef02eca4f5499b6ba1e82d0279b8f0d8367ed4d31fc0dc171f053e08ba761986e12a15cbe5bfc5fa81309c84f774249aa"}}, {0x33, &(0x7f0000000a80)=@string={0x33, 0x3, "4f5c704c76048682eacbcd97fc5254152addbdca46c0b087aef9581aea106f54192d4c9c4c88b558a8f0002921d9099606"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x861}}]})

03:07:00 executing program 5:
syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x240000)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000000, 0x101003)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1f, 0x40000)
syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x100)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x100)

03:07:00 executing program 1:
syz_emit_vhci(0x0, 0x9)

03:07:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x10, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:00 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x480)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80000, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0xfffffffd, 0x2, 0x3})

03:07:00 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x7, 0x8e}, 0x2)

03:07:01 executing program 1:
syz_emit_vhci(0x0, 0x9)

03:07:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x11, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2175.228131][   T34] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2175.392407][T11709] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2175.546780][   T34] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2175.554407][   T34] usb usb5-port1: attempt power cycle
[ 2175.708203][T11709] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2175.716055][T11709] usb usb4-port1: attempt power cycle
[ 2176.206835][   T34] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2176.367217][T11709] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2176.506961][   T34] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2176.515164][   T34] usb usb5-port1: unable to enumerate USB device
[ 2176.677287][T11709] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2176.685105][T11709] usb usb4-port1: unable to enumerate USB device
03:07:03 executing program 4:
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x3914, &(0x7f0000000040)=0x4)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000080)=""/227, 0xe3, 0x40000000, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x48)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000200)=0x6, 0x4)

03:07:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x12, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:03 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, '\x00', 0x800})

03:07:03 executing program 1:
syz_emit_vhci(0x0, 0x9)

03:07:03 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc3}, "e1274814b9ecf594bf8fca0d3bf19169eeb237666733911c2694c9aa5207aa499382fde43524d630f0f746eaa678cafee3604b1e097ff248fc7180ebac597f4da972906df26fc030ca25bf5d63dd9cf3a7826b60eff403d6f423cb2982ca14c6f295bf77c75f34f8bfc827b1614242e4b6293b9cda6dddb2c461af43a2fb2738401658a9efaee0e99217f12764facd550c790785a92577bd7014ac27f1d39a1d34070ed691ddb60238f07bf5b27154a0389ddfcceef7d82c25e6baad28da51d31c6fa4"}, 0xc7)

03:07:03 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_USER(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x3ed, 0x200, 0x70bd28, 0x25dfdbfe, "bf4b7384b4cf78111ea9497b99d0243915d42d397b8227688b637de08d4f1a25069e181b8f9ba0f7e85df8e88442088636f88640275a0a8eb1713bfda95d4962a1b325c30a9b0fc644432c6a22010e6459087f03938176d94e5b418dc5d6f0", [""]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x4)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x5, 0x1, 0x1}, {0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x4, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x4}}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x50)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0))

03:07:03 executing program 1:
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x9)

03:07:03 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, &(0x7f0000000000))

03:07:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x18, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:03 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x42a303)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x20, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)

03:07:03 executing program 1:
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x9)

[ 2178.020139][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2178.029520][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x25, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:03 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
socket$bt_hidp(0x1f, 0x3, 0x6)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@local})
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80074d00ca2ba8875b5e37f7267b543cbef93f86e63d551013b5fa7ef653ae9714ebb47c9d70feafb54b72d79808979381eee920aa2d35748ede71ca88117a12f05630983c34c60e841686e410409874ba49d4c855c325aa67d40bb6d742aa10600000000a30000a69187d7f275291e1c6088dd25343f67b8e670bd895ed22d8a25780000000000"], 0x78)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100))

03:07:04 executing program 5:
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x200, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xbf7, 0x111000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0xa, 0x2, 0x3, 0x80000001, 'syz1\x00'})

03:07:04 executing program 4:
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000640402002dbd7000fedbdf2546531a32dffdd63b5f858f5add15b10d6bf4aa1ba706fd73ba3d7337c76dffef51d6bacb81454ca8483d03108368c99555c6dfaf7693b85e3e1c1b120a358b8c3ec4779bfcdcafacc3e4c3754500"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4840)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000080)={"e335b2e76afd8a1fb59d4f989f3a3b79e23aebe85764fe000403d305f330", 0x6, 0x0, 0x401, 0x5, 0x4, 0x9, 0x7fff, 0xd, [0x6, 0x8, 0x8, 0x3, 0x80, 0x6, 0x2, 0x100, 0x9, 0x9, 0x9, 0x400, 0xc6a1, 0x6, 0x1, 0xfffffff9, 0x7fffffff, 0x1f, 0x1]})
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x6, 0x2, 0x2})

03:07:04 executing program 0:
socketpair(0x27, 0x3, 0x8, &(0x7f0000000000))

03:07:04 executing program 1:
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x9)

03:07:04 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x1, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_rsp={{0x18, 0x40, 0xc}, {0x9, 0x4989, 0x5, 0x1ff, [0x9, 0x38]}}}}, 0x19)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))

03:07:04 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x5c, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2178.307649][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2178.326982][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:04 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x6, 0x4000000, 0x0, '\x00', 0x1})

03:07:04 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="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"/295], 0x9)

03:07:04 executing program 4:
socketpair(0x34, 0x1, 0x0, &(0x7f0000000040))

03:07:04 executing program 0:
socketpair(0x2c, 0x80007, 0xffff7ffd, &(0x7f0000000000))
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x1, 0x84)

03:07:04 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x300, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2178.515683][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 4
[ 2178.523485][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 4
03:07:04 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:04 executing program 3:
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x11)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)

03:07:04 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, '\x00', 0xfffffffc})

03:07:04 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000000)=""/46)
socketpair(0xa, 0x4, 0x2000, &(0x7f0000000080))

03:07:04 executing program 0:
socketpair(0x2, 0x800, 0x2, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="8a169a5e", @ANYRES16=0x0, @ANYBLOB="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"], 0xac0}}, 0x40000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
recvfrom$netrom(r1, &(0x7f0000000080)=""/68, 0x44, 0x40002000, &(0x7f0000000100)={{0x3, @default, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @null]}, 0x48)

03:07:04 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:04 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
bind$can_raw(r0, &(0x7f0000000080), 0x10)
socketpair(0x2a, 0x5, 0x81, &(0x7f0000000000))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f00000000c0)={@fixed={[], 0x12}, 0x1f})

03:07:04 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x4000, 0x800, {}, {0x1, 0x2, 0x81, 0x20, 0x7f, 0x3, "41ba2326"}, 0x80, 0x2, @planes=&(0x7f0000000080)={0xfff, 0x31f8, @mem_offset=0x40, 0x8}, 0x7})
r2 = socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000008c0)={0x0, 0x2, 0x4})
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000400)={0x438, 0x3f3, 0x10, 0x70bd2b, 0x25dfdbff, {0x10, 0x1, 0x14, [0x1, 0x1, 0x6, 0x0, 0x200, 0x4, 0x80200000, 0x7fff, 0xe52, 0x81, 0x800, 0x0, 0x401, 0x0, 0x800, 0xac, 0xfffffffb, 0x2, 0x0, 0x3, 0x99c, 0x194a, 0x80, 0x800, 0x1, 0xe2c5, 0x89, 0x3, 0xe455, 0x2, 0xfffffc01, 0x0, 0x61, 0x9, 0x0, 0x0, 0x6, 0x80000001, 0xe4, 0xc628, 0x3, 0x800, 0x6, 0x80000001, 0x7, 0x3, 0x4, 0x20, 0x80000000, 0xa4, 0x0, 0x2, 0x4, 0xffffffff, 0x7ff, 0x9, 0x4, 0xffffffff, 0x7, 0x6943, 0x8, 0x400, 0x7, 0x4], [0x2, 0x40000000, 0x400, 0x7fff, 0x6, 0x8, 0xfff, 0xbe1, 0x6, 0xfffff549, 0xffffffe1, 0x6, 0x4, 0x9, 0x1ff, 0x1f, 0x9, 0x200, 0x0, 0xfffffff7, 0x200, 0x6, 0x3, 0x2, 0x1, 0x8, 0x8, 0x8001, 0x6c, 0x5, 0x9, 0x8, 0x1ff, 0xa5d, 0x9, 0x7, 0x2, 0x2, 0x26, 0x9, 0x6, 0x20, 0x401, 0x1, 0x2502, 0x5, 0x8, 0x1, 0x0, 0x6, 0x3ff, 0x1, 0x5, 0x5, 0x8000, 0x401, 0xfffffff8, 0x3ff, 0x7, 0x2, 0x0, 0x8, 0x5, 0xffffff23], [0x3, 0x80, 0xc6, 0x3, 0x101, 0x3f, 0x10001, 0x6, 0x1, 0x3, 0x3e, 0x1f, 0x3, 0x8001, 0x4, 0x9, 0x3ff, 0xff, 0x1f, 0x2, 0x3, 0x3, 0x9, 0x0, 0x8, 0x9, 0x5, 0x2, 0x7, 0xfffffffe, 0x10001, 0x3, 0x7f, 0x4, 0xcdf9, 0x8af, 0x1, 0x3, 0x1, 0x1, 0x5, 0x0, 0xfffffffa, 0x5, 0x8, 0xfffffffe, 0x10000, 0x2, 0x4, 0x4, 0x3, 0x400, 0xd7, 0xa3c, 0x5, 0x6, 0x4, 0x7, 0x6, 0x8, 0xc4d7, 0x101, 0x8000, 0x100], [0x9, 0x6, 0x400, 0x3, 0x3e3f, 0x100, 0x6, 0x8, 0x8, 0xe87, 0x2, 0x7, 0x7, 0x4, 0x7ff, 0x3f, 0x1, 0x8, 0x8d8, 0x401, 0xcd3, 0x4, 0x200, 0xfffffffd, 0x4, 0xfffffffe, 0x9, 0x6, 0x1, 0xffff, 0x101, 0xfffffff9, 0x1, 0x2, 0x401, 0x7, 0x4, 0x4, 0x9, 0x23, 0x81, 0x8, 0x10000, 0x3, 0xffffffff, 0x6, 0x9, 0x1, 0x5, 0xfa1, 0x8b1, 0x1, 0x5, 0xc0000, 0x5, 0x400, 0x3ff, 0x8, 0x27b4, 0x5, 0x40, 0x7fffffff, 0x2, 0xff], 0x16, ['!\x00', ',.-\x00', '`.!)&\x00', '/dev/full\x00']}, ["", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000380)={0x3, &(0x7f00000001c0)=[{@fixed}, {@fixed}, {@fixed}]})
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xd3a, 0x2)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02000058fddef6c227c426fc35b2004e5504000000464628c500084ff1000001000000bfa4f2f59a8e943082814b00f84145fe27"], 0x9)

03:07:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x500, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:04 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x1000000000000200, 0x10000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x2, 0x0, 0x2, 0xffff7ffd, 'syz0\x00', 0x1000000})
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3f, 0x8020)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x5)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000300))
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000340)=0x1, 0xfffffffffffffc44)
socketpair(0x2c, 0x80000, 0xffffffff, &(0x7f00000001c0))
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000280))
ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000380)={"f2d00e74fa827ad2083998ebd0409f244790e611b8b661b181b4579b855a", 0x2, 0x2, 0x1, 0xf7, 0x40, 0x3, 0x5, 0x4, [0xfff, 0x1000, 0x1, 0x1, 0x475, 0x0, 0x1, 0xff, 0x8, 0x9b8, 0x8, 0x9, 0xf0000000, 0x3, 0x5, 0x20, 0x0, 0x9, 0x4]})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000002c0)=0x2, 0x4)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @fixed={[], 0x10}}, 0x8)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080))

03:07:04 executing program 4:
socketpair(0x9, 0x800, 0x8000000, &(0x7f0000000000))

03:07:04 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

[ 2179.018070][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2179.048564][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x600, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:05 executing program 4:
socketpair(0x15, 0x3, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000000)=0x1)

03:07:05 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x438, 0x3f4, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x2, 0x1c, [0x20, 0x1, 0x3, 0x5, 0x8, 0x0, 0xf71, 0x99ff, 0x5ba69888, 0x401, 0xfffffffd, 0x5436, 0x5, 0x200, 0x2, 0x7fffffff, 0x5dd, 0x7, 0xfffffff8, 0x7f, 0x4, 0x4, 0x36, 0x90, 0x2, 0x8, 0x1000, 0x401, 0xffff8000, 0x5, 0x4eb, 0x3, 0xffffffff, 0x7, 0x3, 0xe3, 0x200, 0x4, 0x5000, 0x1, 0x7fff, 0xffffff81, 0x3, 0xbe, 0x5, 0x80000000, 0x95, 0x4, 0x7fff, 0x3, 0x400, 0x4, 0x2, 0x3, 0x2, 0x100, 0x9, 0x7, 0xfff, 0x0, 0x1f, 0x348e3906, 0x9, 0x6c64], [0x1, 0x9, 0x4, 0x9, 0xffffffff, 0x890c, 0x800, 0xaf4, 0x5, 0x4, 0x6c9, 0xffff, 0x2, 0x37d77463, 0x7, 0x1f, 0x6, 0x4, 0x3f, 0x10001, 0x2, 0x4, 0x6, 0x100, 0xbbc9, 0x10000, 0xffffffff, 0x0, 0x7f, 0x3, 0x8, 0x8001, 0x8, 0x9, 0x87, 0x0, 0x3, 0x8, 0x9, 0x101, 0x78, 0x7f, 0x5, 0x3, 0x0, 0x1, 0x5, 0x3, 0x5, 0x7, 0x8, 0xe54, 0x4, 0xfffff801, 0x7ff, 0x1, 0x1000, 0x7, 0x1, 0x0, 0x1, 0x2, 0x2c, 0x7], [0x7, 0x4, 0xfffffffd, 0x6, 0x92, 0x9512, 0x5, 0x3, 0x7, 0x1, 0x1, 0x3, 0x5, 0x9, 0xfffffffa, 0x6, 0x0, 0xfffffffa, 0x9, 0x2, 0x0, 0x6, 0x8, 0xffff, 0x5, 0xffffff80, 0x80000001, 0xff, 0x0, 0x9, 0x9, 0xffff4b0e, 0x4, 0x4, 0x10000, 0xdf, 0x401, 0x2, 0x54, 0xfff, 0x1, 0x9, 0x5028, 0x6196, 0x7fffffff, 0x40, 0x3, 0x2, 0x7fff, 0x5, 0x43a, 0x3, 0x5, 0x2, 0x620, 0x8, 0x8, 0x9, 0x1, 0x1, 0x7, 0x1ff, 0x5, 0x5], [0x5d1, 0x4, 0x1, 0x1, 0x3, 0x2, 0xd8, 0x0, 0x81, 0x8000, 0x1, 0x0, 0x4, 0x3ff, 0x10000, 0x8, 0x5, 0x9, 0xbff, 0x7, 0x1e2bc55f, 0x80000001, 0x8, 0x8001, 0xf6c, 0x5, 0x6, 0x7c2, 0x1, 0x1, 0x8, 0x2, 0x8, 0x8, 0x40, 0x9, 0x5, 0x4, 0x3, 0x3, 0x3ff, 0xfffffffe, 0x28a, 0x3, 0x94, 0x20c, 0x3f31, 0x4, 0x400, 0xe9, 0x0, 0x7fff, 0x7ff, 0x8, 0x16, 0xdf4d, 0x6, 0x100, 0xfffffffe, 0x7fffffff, 0x7f, 0x8, 0x5, 0x4], 0x16, ['\x00', '\x00', '/dev/snd/controlC#\x00', '\x00']}, ["", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x48885}, 0x8004)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:05 executing program 1:
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:05 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000140)=0x9, 0x4)
socketpair(0x18, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x2, 0x70bd28, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

03:07:05 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
open$dir(&(0x7f0000000000)='./file0\x00', 0x195080, 0x150)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x2, 0xc8, 0x3}}}, 0x7)

03:07:05 executing program 4:
socketpair(0x8, 0x3, 0x3, &(0x7f0000000040))
ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0xa0000)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f00000000c0))

[ 2179.289470][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2179.298956][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:05 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x2, 0x3, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040001}, 0x40000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x1, 0xc0202)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000280)={0x1, 0x8, 0x1})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000240)=0x10000)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/timer\x00', 0x28a002)
ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"])
ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000200)={0x9, 0x0, 0x4, 0x6, 0x5, 0x3})

03:07:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x700, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:05 executing program 1:
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:05 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="a8a81e89f389c305bddcaa4f479174a49ac6c2ec6a2e9050053ad4d0723e5a0dbf8988c10bd46447b52c9e81f17e10975b26cb7300e4b8f5bdae536551263b145ae592bbbf8378b557aca3d5b7772a4691cd82f62101cf8ba6848f78deb33351914ba090b772d558942a184a332c50b4500e05dce2381115c025c1aab0dcd80e7a5f5feec8d38ed66d72330f3603854055ed71b2ae5c5b8984c126d5e27444e7b1d644b7e94f31104b8767f20e1c08f70a68580251b74f65a31543e8ada61479fdd306d03f"], 0x9)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x622c80, 0x0)

03:07:05 executing program 0:
socketpair(0x1d, 0x4, 0x0, &(0x7f0000000000))

03:07:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x900, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2179.512547][T23453] can: request_module (can-proto-0) failed.
03:07:05 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000), 0x2)

03:07:05 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1, 0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

03:07:05 executing program 1:
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

[ 2179.569652][T23453] can: request_module (can-proto-0) failed.
03:07:05 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="a40000000000000002"], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0x7ff}}]}}, 0x11)
mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x14, 0x10, r0, 0x82000000)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xc7}, 0x2)

03:07:05 executing program 0:
socketpair(0x21, 0x2, 0xfffffffd, &(0x7f0000000000))

03:07:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xa00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:05 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:05 executing program 4:
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:07:05 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:05 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000100)=0x3)
sendmsg$AUDIT_DEL_RULE(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x424, 0x3f4, 0x200, 0x70bd26, 0x25dfdbff, {0x4, 0x1, 0x1b, [0x3, 0x6, 0x0, 0x3, 0x4, 0x1ff, 0x9, 0x6187, 0x81, 0xfff, 0x1, 0x0, 0xfffffffb, 0x400, 0x7, 0x8000, 0x6a5a, 0x3, 0x4, 0x4, 0xc, 0xbb, 0x0, 0x80000000, 0x3f, 0x0, 0x4, 0x80000000, 0x78d, 0x2, 0x1, 0x9, 0x1, 0xfffff801, 0x4840, 0x370a, 0x4, 0x1, 0x5, 0x80, 0x9, 0x4, 0x1, 0x8, 0x1, 0x101, 0xfffffe01, 0x2, 0x3, 0xfffffffc, 0x3, 0x9, 0x1f, 0x6, 0x8, 0x5, 0x9, 0x80, 0xffff, 0x8, 0x1000, 0x3, 0x20, 0x800], [0x3, 0x5efe, 0x1f, 0xeaf, 0x5, 0x81, 0x1, 0x4, 0x6114a9b8, 0xffffffff, 0x81, 0x7fffffff, 0x1, 0x9, 0x8, 0x3, 0x1000, 0x97, 0xffffffc4, 0x7, 0x7, 0x8, 0xe000000, 0x1e73, 0x4, 0x7fff, 0x101, 0xdd, 0x5, 0x0, 0x8000, 0xee61, 0x8, 0x8, 0x7, 0xa37, 0x6, 0x0, 0x101, 0xff, 0x1f, 0x10001, 0x5, 0x7e, 0x7, 0x8, 0xf97f, 0x3, 0x1, 0x2, 0x100, 0x8, 0x3, 0x200, 0xffffff01, 0xfffffffd, 0xf1, 0x4, 0x81, 0x400, 0x1526, 0x7, 0x5, 0x7], [0x200, 0x24000000, 0x6, 0x9, 0x4, 0x1, 0x9, 0x9, 0x8, 0x7, 0xfffffffb, 0xca5, 0xe8, 0x9, 0x2, 0x7f, 0x1f, 0x8, 0x101, 0xc85, 0x40, 0xd221, 0x80, 0x5ac, 0x2, 0x7fff, 0xc12, 0x7ff, 0x2, 0x3, 0x6, 0x1, 0xffff0000, 0xb17, 0x1, 0xfffffffb, 0x3, 0x74, 0xd215, 0x3ff, 0x8, 0x9, 0xe6, 0x7, 0x2, 0x400, 0x7, 0xb7, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x586, 0x2, 0xffff888d, 0x80, 0x157, 0xffffff94, 0x3, 0x6, 0x0, 0x34, 0x7ff], [0x200, 0x0, 0x80000000, 0x7f, 0x1, 0x20, 0x80, 0x7, 0x8000, 0x3, 0x845, 0xffff6de3, 0x1, 0x8, 0x8000, 0x10000, 0x2, 0x8000, 0x6ed8, 0x40, 0x5, 0x80000000, 0x64, 0x4, 0x7, 0x7, 0x3f, 0x7fffffff, 0x3f, 0xfffffff8, 0x3f, 0x80, 0x8, 0x40, 0x2, 0x7ef2, 0x1, 0xffff, 0x8, 0x5, 0xe39, 0x8000, 0x0, 0x1, 0x3, 0x1ff, 0x3ff, 0x3, 0x2, 0x40000000, 0x1000, 0x6, 0x9, 0x5, 0xfffffffa, 0x3, 0x1, 0xfffffffb, 0x1000, 0x7, 0x8, 0xfff, 0x1, 0x20000000], 0x4, ['\x00', '.$\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x1}, 0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x7fffffff, 0xb3bb, 0xff})
bind$netrom(r0, &(0x7f0000000040)={{0x3, @bcast, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @bcast]}, 0x48)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x40, 0xf0881)
ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, r4, 0x82000000)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x6, 0x3031334d, 0x6, 0xa, [{0x80, 0x9}, {0x7a, 0x9}, {0x5, 0x9fa}, {0x7fff, 0x3}, {0x4, 0xffffffff}, {0x8, 0x5}, {0x2, 0x8d}, {0x8, 0x7}], 0x6, 0x0, 0x1, 0x2, 0x4}})

03:07:05 executing program 3:
ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000040)=""/199)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}}, 0x9)
ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0xff, 0xffffff35, 0x3a64, 0x0, 0x4, 0x72d})

03:07:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xb00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:05 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:05 executing program 4:
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x8, 0x70bd28, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)=0x4)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3f5, 0x20, 0x70bd2d, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x2000c805}, 0x48d0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x80000000, 0x1, 0x1, "e38956158a05428c61141c9fa5753df1ef5daeec8ee19a962005db0c1d427a4f", 0x20363159})

03:07:05 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040))
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000140)={{0x4, 0x5, 0x0, 0xffff5c0c, 'syz0\x00', 0x100}, 0x0, [0x7, 0xff, 0x0, 0x3, 0x2, 0x3, 0x9, 0x1, 0xe4, 0x0, 0x400, 0x9, 0x100000000, 0x8, 0x8, 0x6, 0x6, 0x5, 0x136, 0xfff, 0x100000001, 0xfffffffffffffd89, 0x8, 0x9, 0x3, 0x7fffffff, 0x2000000, 0x65, 0x20, 0x9dd2, 0x3, 0x40, 0x0, 0x80000000000, 0x1, 0x0, 0xf5eb, 0x7, 0x7, 0x10001, 0x9, 0x401, 0x7fff, 0x9, 0x3, 0x9, 0xfffffffffffff074, 0x1, 0x2, 0x4, 0x40, 0x0, 0xa0, 0x7, 0x3, 0x8, 0x90de, 0x8000, 0x1, 0x9, 0xffffffffffff0001, 0x67, 0x33, 0x0, 0x5, 0x0, 0x4, 0x3, 0x8, 0xffffffffffffffbe, 0x19f, 0x5, 0xfffffffffffffffe, 0xfffffffffffffbff, 0x1, 0x2, 0x2, 0x3, 0x7fffffff, 0x2, 0x5, 0x1, 0x6d, 0x6, 0x6, 0xfffffffffffffffd, 0xa93, 0x1000, 0x6d0, 0x3ff, 0x4, 0x3ff, 0x0, 0x2, 0x20a, 0xffffffffffffff7f, 0x8001, 0x6, 0x800, 0x7fffffff, 0x5, 0x1000, 0x1000, 0x8, 0x80, 0x7f, 0xffffffffffffffff, 0x7, 0x4, 0x4, 0x7fff, 0x100000001, 0x5, 0x0, 0x100000001, 0x3ff, 0x0, 0x6, 0x92, 0x7, 0x2552, 0x200, 0x4, 0x401, 0x7, 0x3, 0x0, 0x7]})

03:07:05 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x1f, 0x2}, {0x6}}}}, 0xf)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x84000)
ioctl$SNDRV_PCM_IOCTL_PAUSE(0xffffffffffffffff, 0x40044145, &(0x7f0000000040)=0xffffffff)

03:07:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xc00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:06 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:06 executing program 4:
socketpair(0x11, 0x1, 0x0, &(0x7f0000000000))

[ 2180.170785][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2180.182735][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:06 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe0, 0x453, 0x2, 0x70bd2d, 0x25dfdbfb, "509e25c49e6f59113ee716c0205372a5e1aa8fe51b8d097d7cc743720e23a726695a6cebbf390e7264b6fa1fc73d04128ae323e5794d12b6e4a2ff0adc2113591411b50d0a71c91f9178947c00e37b3a1608977b824b1ef6ec5bd8431d1e72e2da2a13d67de8db236994e955ede45e0e6118a5290ed244d91e7a147f4e7c798d06e62ebd3fd7421df80b9504688f12573736dc90fad28657e729446d19d7060fb3635b7388c3480ae3d3d76999b198ca955b388d236d440fc641d495c986ba973139e031c14aac134e6ee9237d", ["", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x884}, 0x44080)

03:07:06 executing program 3:
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x2)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:06 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x2402)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:06 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xd00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:06 executing program 4:
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = syz_usb_connect$uac1(0x2, 0xda, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x6, 0x60, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0xc9}, [@selector_unit={0x6, 0x24, 0x5, 0x6, 0xc3, '\n'}, @feature_unit={0xb, 0x24, 0x6, 0x4, 0x3, 0x2, [0x2, 0x6], 0xff}, @mixer_unit={0x6, 0x24, 0x4, 0x6, 0x2, "e4"}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x1f, "832cab"}, @processing_unit={0x9, 0x24, 0x7, 0x5, 0x6, 0x9, 'w\b'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc0, 0x40, 0x3f, {0x7, 0x25, 0x1, 0x2, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x401, 0x12, "0c5c0d9d4e8fd559b0"}, @as_header={0x7, 0x24, 0x1, 0xc0, 0xf8, 0x4}, @as_header={0x7, 0x24, 0x1, 0x40, 0x20, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x2, 0x0, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x20, 0x1, 0x5, 0xfc, "7919fefc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x2, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x7, 0x20, {0x7, 0x25, 0x1, 0x1, 0x7, 0xe4}}}}}}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x0, 0x0, 0x1f, 0x10, 0xd2}, 0xb7, &(0x7f0000000180)={0x5, 0xf, 0xb7, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "6783cea57652245151acf52b859b0f22"}, @generic={0x86, 0x10, 0x4, "5bf3f13a627d80493d635d28e1a15e3dab88149ee43590c9979efb4a9cd3136e65e6c49de26e89963bd7156f0534df409b56946822ef03b201dd34b2f43f5c7c3653dcdc3b34674dca6c582bb8b7ff02993f62cc620e1997704633378383fd4cb41cb50751101cb226a586b10ec92863ca72e982f619976e84b1f9654f57b6cb0fee16"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa0, 0x0, 0x1, 0x5, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf8bc0739520ff095, 0x20, 0x58, 0xc5a2}, @ptm_cap={0x3}]}, 0x2, [{0x9c, &(0x7f0000000240)=@string={0x9c, 0x3, "587b703597fdbc2301474e3bafd96bceae99dff0a8e6e6e52156ec9c63ffa6f882dc9c4d6ebf21ca3133b36ce4b5f3e9b8ec3d4277526c68f36a81bf3183a23ad1e247d0e302ea6a813357109385e689d473ea05be01aa3458f818f6e96c6fe9c288eb8a77ab6633bb8c1335482b240ad327ef8f365eb230ae16913cb3e44589525a25a81495a561a5ad7bf00ae51c8afaa72c9e488882fd4676"}}, {0xc4, &(0x7f0000000300)=@string={0xc4, 0x3, "a5b4a0525e7d95c0ddd22dfb80e982c1d0dc20e54bc721f59444ac95d894d2f005c25cf5045be548c616bd285c7751477d7f602ba79bdc8621c9608b77e7085a40729e8e1484e185e8f3d0399a9af771191e55a11302719068ebb9d241b0b695d06ee2f14c92a2d1e5cecba7426a38b8481b72796d7af93a6754f215cfdbad2dde3d71f698a9f088e2423207c7b168d48f5e7d5f0b61eafeeef4028013116fdcb4d21ba4e4044a61fbb9e2004dadd8d23685bc54066dfba0eea1d7c3f400fa45eb1e"}}]})
[ 2180.363466][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, &(0x7f0000000440)={0x20, 0x21, 0xb3, {0xb3, 0x4, "3b2b8938cbbe3849641eb56aaf1f46809b06d007df25f6b853680efd2b59e4d7275d266732d73f39eed597c179c70eb7454133a34c5bc33757fef2c605bb6180a15b891783485f96b5c985e5441fd92c5837c283fa7e0bf2c8d07c00357f63c5e6fda8e82fe2f7fbbd1b3fddc46feb42313ae9d7f81082603f21a97fe247b96c86ebf48782822856f3a91ce52824ae013aa8b8f25d32f963a8a36eede71a1de1b772165ab50c3498f6e0feefbebcc2f055"}}, &(0x7f0000000500)={0x0, 0x3, 0x47, @string={0x47, 0x3, "d7bfa15d1379c99b75adada84e3320993a34ae6b3b9c2879b141b31979dcdf9605701ae77a2bb1f6f2eb032a1fa236ef1273ce6bc8f384fe1015f78c344d5bec5330e27354"}}}, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x20, 0x15, 0xa3, "30ad018987993af193a8947da24d7e6acc0658874df6f02a828670523b37368a3e3af1e271155ea3d8d1917f5f4bcd29a65dbe5a4a64528562ab75ef3060910c627c09c6eef44b98de538c382e1584137afb52d7406ac7eec1fd996731766e15d7e55a77a7611dab4d69fbef5ed232d149e3c1f47d16ce68d8f117bc05f4916be200f185a0c892808e7b803834175abd28e4afdf411d2909e6836ecfb0868e71b4f021"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x12}, &(0x7f0000000700)={0x20, 0x81, 0x1, 'p'}, &(0x7f0000000740)={0x20, 0x82, 0x2, "d2db"}, &(0x7f0000000780)={0x20, 0x83, 0x3, "7c72b7"}, &(0x7f00000007c0)={0x20, 0x84, 0x3, "6aae78"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "edf2db"}})

03:07:06 executing program 3:
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x40002040, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)

03:07:06 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x0, 0x0, 0x1ff})

03:07:06 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xe00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:06 executing program 0:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000040)={0x0, 0xbc, 0x1})
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x40010, r0, 0x100000001)
bind$can_raw(r0, &(0x7f00000001c0), 0x10)
accept4$netrom(r0, &(0x7f0000000200)={{0x3, @netrom}, [@bcast, @netrom, @netrom, @remote, @null, @null, @bcast, @bcast]}, &(0x7f0000000280)=0x48, 0x0)

[ 2180.575476][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2180.597610][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:06 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0xb94e, 0x14, [0x4, 0xba8, 0x3, 0x8, 0x0]})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:06 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0200addf2e9c00c572"], 0x9)
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2)

03:07:06 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x441, 0x0)
read$sequencer(r0, &(0x7f0000000140)=""/229, 0xe5)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00'})
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r2, 0x80045105, &(0x7f00000000c0))
ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111)

03:07:06 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x1100, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2180.855091][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3328
[ 2180.880765][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3328
[ 2180.889273][T11709] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
03:07:06 executing program 3:
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000040))
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="020000040000000100"], 0x9)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

[ 2181.021497][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2181.035018][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2181.196591][T11709] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2181.204285][T11709] usb usb5-port1: attempt power cycle
[ 2181.856426][T11709] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2182.156546][T11709] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 2182.164112][T11709] usb usb5-port1: unable to enumerate USB device
03:07:09 executing program 4:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x27, 0x800, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, 0x0)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x453, 0x420, 0x70bd2d, 0x25dfdbfc, "f725fc3575d55735e9d4b000387547cc86d843f435a9217fc7e83cb7df43b18051b3f2a7b56a829978226741866533c24417dfea578a0aa6155bbc13a55f0e6e0cca0d7cc9a9184771d89105df574a6e9f3dc8a77fdc751cd32db97103e138657190ae076d859575d2613a0e602b5072a301645589c82a21dd0b162e78c2", ["", "", "", "", "", "", ""]}, 0x90}, 0x1, 0x0, 0x0, 0x8090}, 0x404c814)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x61, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000040))
ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f00000000c0)=0x9)

03:07:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x1200, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:09 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x1000, 0x4, 0xffff7c, 0x9b, 'syz1\x00', 0x1})

03:07:09 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:09 executing program 0:
socketpair(0x27, 0x800, 0xfffffffc, &(0x7f0000000000))

03:07:09 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c800040000000104"], 0x9)

03:07:09 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x1800, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:09 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02100004000000010070adf31e081390e7d52605eec6554b499f34db19c576ee5e318fc363de9b1d95d5c89a0d8ca86907c4038ebe30f55f797502462f9e79b6ad41ee0cf277eb1e56c286519ef9a5ca5cf292421a71de62ff9ad79b1f90d7b2dfea92d616020106bad237c0ddf090a06600a380fd0f7c96a53142ab60f5be0e446bdefe395da2"], 0x9)

03:07:09 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)

03:07:09 executing program 0:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x438, 0x3f4, 0x4, 0x70bd26, 0x25dfdbfb, {0x2, 0x2, 0x28, [0x1000, 0xbb94, 0x5, 0x3, 0x22d09f07, 0x1, 0xd3cd, 0x1, 0xffffffff, 0x6, 0x5, 0x1c5, 0x3ff, 0xffff8000, 0xfff, 0x7f, 0x1, 0x6, 0x3, 0x3, 0x0, 0x2, 0x6, 0x4, 0x0, 0x3ff, 0x3, 0x100, 0x400, 0x5, 0x800, 0x200, 0x1f, 0x6c4b, 0x2, 0x8, 0x7, 0x4b0, 0x3, 0x8, 0x1000, 0xd71, 0x8, 0x10000, 0x400, 0x2, 0x80000001, 0x5, 0x8, 0x80000001, 0x1, 0x7f, 0x6d4, 0x4, 0x5, 0x4, 0x8, 0x101, 0x0, 0x76, 0x6, 0x9, 0x12c, 0x6], [0x40, 0x5, 0x80000000, 0x7d, 0x91b, 0x2, 0x10001, 0x800, 0x1000, 0x2, 0xffff, 0x0, 0x2, 0x84a, 0xffffd6b9, 0x1a31, 0x80, 0x6, 0x3, 0x0, 0x43, 0x6, 0xffff, 0x3ff, 0x4, 0x4, 0x9870000, 0xb87, 0x7, 0x3553, 0x7, 0x7, 0x7fff, 0x6, 0x7fffffff, 0x8000, 0x401, 0x0, 0x4, 0x100, 0xfffffffa, 0x2, 0x400, 0x100, 0x1ff, 0x2, 0x0, 0x8, 0xffffff21, 0x5, 0xf17, 0x5, 0x200, 0x8, 0x78a, 0x8000, 0x100, 0x1b69, 0x7, 0x3, 0x1f, 0x1, 0x2, 0x5], [0x1, 0x3, 0x21, 0x7, 0x0, 0x2, 0x7fff, 0xff, 0x5, 0x5, 0x8, 0x6, 0x6, 0x933, 0x3, 0x6, 0x3, 0x9, 0x9, 0x100, 0x52b8, 0x1, 0x80000001, 0x6, 0x80000000, 0x5, 0x1, 0x2, 0x0, 0x2, 0x200, 0x4, 0x8, 0x1ff, 0x1, 0x6, 0x80000001, 0xffffffff, 0x0, 0x8, 0x80000000, 0x4, 0x5, 0x40, 0x3ff, 0x1, 0x3ff, 0x5153, 0x40, 0x99d8442, 0x7ff, 0x80000000, 0x2e2, 0x3abf, 0x1f, 0x8, 0x20, 0xbf5, 0x8, 0x800, 0x8, 0x2, 0x3, 0x9], [0x1d2, 0xe52, 0x6000000, 0x6, 0x6, 0x7d52, 0xfbaf, 0x0, 0x4, 0x1ff, 0x7fff, 0xbe, 0x6, 0x9, 0x5, 0x7, 0x4, 0x8001, 0x5, 0x9, 0x7fff, 0x78, 0x6, 0x9, 0x2, 0x8f, 0xffffffff, 0x200, 0x1, 0x0, 0x6, 0x3, 0x6a, 0x7ff, 0x7fff, 0xfffffff8, 0x9, 0x1, 0x10001, 0x4, 0x37f3, 0x1000, 0xa4e, 0x2, 0x2, 0xffff, 0x5, 0x1f, 0x7fff, 0x0, 0x4, 0x2, 0xfffffff7, 0x3, 0x7e, 0x40, 0x10001, 0x1000, 0x8001, 0x9c2, 0x401, 0x7ff, 0x7, 0xa948], 0x16, ['#\xc9\x00', '#-\x00', '\xbdv)[\x00', '\\--&\'%\'(\'\x00', '\x00']}, ["", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x1}, 0x4)

03:07:09 executing program 4:
socketpair(0x15, 0x6, 0x800000, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000080)={"d4000e03152bb3998538d8bc11eb1b07b6333cc27ff11c5dc7d897d78e17", 0x3, 0x2, 0x23a3, [0xff, 0x3, 0xffffffa1, 0x4, 0x1, 0x8, 0x70e6, 0x84, 0x2, 0x3, 0x5, 0x1b17, 0x5, 0x9, 0x21ab, 0x5, 0x9, 0xe7a]})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x7)

[ 2183.671288][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 16
[ 2183.680962][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 16
03:07:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x2500, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:09 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe}, "359adf224778ffb18bccd7e94662"}, 0x12)
read$sequencer(0xffffffffffffffff, &(0x7f00000001c0)=""/65, 0x41)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2080, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x80, 0x105000)
ioctl$SNDCTL_TMR_STOP(r1, 0x5403)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="0080000014000000ff7fa180b5f2d7d6fd8b15c6f4f1ffffff6107000c28a30f073bda762cb885f6e3c6f8f07c80957da9f09bed557f00ca20d61d72f8afd36e74b67d7ec675f3dd584b7951b56c4dcdb116cb90a3412cfb58c5bf3185c388"])
read$sequencer(0xffffffffffffffff, &(0x7f00000000c0)=""/201, 0xc9)

03:07:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x5c00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:09 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:09 executing program 0:
socketpair(0xc, 0x3, 0x0, &(0x7f0000000040))

03:07:09 executing program 4:
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0='bpq0\x00', 0x7, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40001)

03:07:09 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
socketpair(0x28, 0x3, 0xfffffffc, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$phonet(r0, &(0x7f0000000340)=""/55, 0x37, 0x20, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000200)={0x3ff, 0x7, 0x4, 0x2, 0x6, {r2, r3/1000+10000}, {0x3, 0x71df98b2097362c2, 0x7, 0x81, 0x5, 0x9, "f45a8d37"}, 0xfff, 0x4, @planes=&(0x7f00000001c0)={0x2, 0x6, @fd, 0x5a39abac}, 0x4d, 0x0, <r4=>r1})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x3ff, 0x0, 0x4, 0x70000, 0x1, {0x77359400}, {0x3, 0x8, 0x40, 0x1, 0x4, 0x5, "ff8e151c"}, 0x380, 0x2, @planes=&(0x7f0000000080)={0x7, 0x9, @userptr=0x596b, 0xb36}, 0x80000001, 0x0, r4})
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000380))
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x1)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000440))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000, 'syz1\x00', 0x4})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000640)={0x3, &(0x7f0000000480)=[{@fixed}, {@fixed}, {@fixed}]})

03:07:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xff00, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:09 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x3d)

03:07:09 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000530401002abd7000ffdbdf25b24c47c392365d0aff1a5e757bbf91fa49beb972b032f1e575a13aec9afaa9394b287b3188a6ec43b867ce2c5068cfeb89533a7f38f4db00a28fc3b1ed33237d9c843e11f3f0e72a400b02d04cbee3f7206c2d3ee911a8539ab21f32489dbbb0a7df1b817c783b23c0042431dfd19093084880269e06cf617bbae18dd5ff30654ba86740861cdf5345763ca4"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4004044)
socketpair(0x2b, 0xa, 0xdcc, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}}, 0x40)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20a081, 0x0)

03:07:09 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0)

03:07:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x1000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:10 executing program 0:
socketpair(0x18, 0x3, 0x1, &(0x7f0000000000))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

03:07:10 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
recvfrom$netrom(r2, &(0x7f0000000180)=""/232, 0xe8, 0x10020, &(0x7f0000000280)={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x68, 0x10001, &(0x7f0000000140)={0x23, 0x9, 0xff, 0x8}, 0x10)
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x468}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)

03:07:10 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x48001)
ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x9, 0x1, 0x80000001})
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@fixed={[], 0x10}, 0x3ff})

[ 2184.222580][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2184.231886][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:10 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x52f040, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)={0x2, 0x3, 0x4, 0x100000, 0x9, {0x0, 0xea60}, {0x5, 0x0, 0xa7, 0xe0, 0x0, 0x5, "fceae94d"}, 0x11ef8fee, 0x3, @userptr=0x3, 0x300000, 0x0, r1})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000200)={{0x3, 0x0, 0x1, 0x3f, 'syz1\x00', 0x800}, 0x0, [0x3ff, 0x5, 0x3, 0x8, 0xff, 0x1, 0x0, 0x4, 0x7ff, 0x9, 0xe2ee, 0x20000, 0xfff, 0x1000, 0x9f5, 0x80000001, 0x80000001, 0xd86, 0x5, 0x2, 0x9, 0x2, 0x1010000000000, 0x1, 0x7, 0x81, 0x7, 0x800, 0x4, 0x3ff, 0x6, 0x400, 0xf1, 0x9, 0x4, 0x8, 0x63, 0x101, 0x1, 0x2, 0x9, 0x10001, 0x7, 0x2, 0x1000, 0x9, 0x3, 0x0, 0x1f, 0xc, 0xfffffffffffffff7, 0x1, 0x7, 0xac96, 0x8, 0xbc, 0x80000000, 0x5, 0x7, 0xb8a7, 0x40, 0x3f, 0x1d, 0x757f2e97, 0x6, 0x0, 0x8001, 0x6, 0xc9, 0x6, 0x3, 0x572c, 0x4, 0x2, 0x8, 0x7ff, 0x1f, 0x38e, 0x0, 0x8, 0x8, 0x9, 0x101, 0x1f, 0x4, 0x7, 0x4bd, 0xfffffffffffffec6, 0x40, 0x8001, 0x80, 0x8, 0x7fffffff, 0x8786, 0x9, 0x7f, 0x7fff, 0x3, 0x4, 0x401, 0x1, 0x8000000000, 0xcf, 0x3f, 0x2, 0xfffffffffffffffe, 0x6, 0x65e, 0x7, 0x7, 0x2, 0xfcfd, 0x120000000000000, 0xcea0, 0x6, 0x6, 0x10001, 0x6, 0x7, 0x4, 0x5, 0x100000002000, 0x5, 0x6, 0xa7, 0xfffffffffffffff7, 0x5, 0xf5000000000]})
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:07:10 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0)

03:07:10 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x8, 0x1, 0x4, 0x10000, 0x20, {}, {0x3, 0x2, 0x9, 0x81, 0x6, 0xfd, "d4e712f9"}, 0xfffffffd, 0x3, @fd=r2, 0x8, 0x0, r1})
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000, 'syz1\x00'})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x202000, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0xd02, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000240)={0x3f, 0x3, 0xd261, 0x40, 0x5, 0x4})
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107)

[ 2184.381260][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2184.389479][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:10 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0)

03:07:10 executing program 0:
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={r0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={r0, 0x80000})
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x2000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:10 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000000)=""/239)

03:07:10 executing program 4:
socketpair(0x23, 0x1, 0x0, &(0x7f0000000040))

03:07:10 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x0, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:10 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x101000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

[ 2184.637879][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2184.649701][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:10 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000480)=0x9754, &(0x7f00000004c0)=0x2)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/timer\x00', 0x309000)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000540)={{0x1, 0x1, 0x4, 0x1, 0x7f}, 0x3, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x91, 0x40, 0x8, 0x3})
execveat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000300)='\x00', &(0x7f0000000080)='\x00', &(0x7f0000000140)='/dev/snd/controlC#\x00', &(0x7f0000000180)='/dev/snd/controlC#\x00', &(0x7f00000001c0)=']}-(:.{\x00', &(0x7f0000000200)='\x04', &(0x7f0000000240)='\x00'], &(0x7f0000000400)=[&(0x7f00000002c0)='%\\[{\xcd\x00', &(0x7f0000000440)='%/,/\',a\'\x00', &(0x7f0000000340)='\x80-)d\\()\'\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/snd/controlC#\x00'], 0x1000)
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)

03:07:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x3000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:10 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="48d582727c5411e0fe2c02000004000000010074061569f2c24a5c0e68cd729d3e0a93516ca4233ba377da3da7f22d468982104cafe56165dcb7d579eff4a579732b9d25ff7f1b2479d8bd953913975177affaa1d8"], 0x9)

03:07:10 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x0, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:10 executing program 0:
ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045516, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080))

03:07:10 executing program 4:
socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0), 0x2)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=0x38)

03:07:10 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x4000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:10 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x0, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:10 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="020000040000000100c071674d94e95f27bec705393e0d936e201b51fe8e393de1eea67ceaa03f357ec0bf13040a1df6f67e3dece0e93842d9640124b94a1003d9df0f3e5d1cf5084d954c5c085b565d683e142084656e8d6787e6eea66bad76db0db1156e5fb3038062"], 0x9)
socketpair(0x8, 0x1, 0x5, &(0x7f0000000000))

03:07:10 executing program 4:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400402, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x400002, 0x0)
execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='@.+/)$\t$},)-\\!})&{]\x00'], &(0x7f0000000240)=[&(0x7f00000001c0)='/dev/full\x00', &(0x7f0000000200)='/dev/full\x00'], 0x800)
ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x8004510a, &(0x7f0000000040))

03:07:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x5000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:11 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x0, 0x5, 0xffffffff, 0x7})

03:07:11 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040))
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000001c0)=""/227)
socketpair(0x22, 0x5, 0xfffffffc, &(0x7f0000000080))

[ 2185.172853][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2185.182483][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:11 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x1c, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f]})

03:07:11 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
bind$phonet(0xffffffffffffffff, &(0x7f00000002c0)={0x23, 0x0, 0x7}, 0x10)
syz_usb_connect$uac1(0x1, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x40, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x1f, 0x3, 0xa6, 0x4, "51ae4c9d"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xcc, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x20, 0x0, 0xff, {0x7, 0x25, 0x1, 0x83, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x0, 0x5}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x2, 0x0, "6811"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xaa, 0x3, 0x7f, 0x7f, "9e77580d14bd6c03"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x1f, 0x80, 0x3f, {0x7, 0x25, 0x1, 0x1, 0x8, 0x800}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x40, 0x0, 0x8, 0x8, 0x1f}, 0x17, &(0x7f0000000100)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x7, 0x0, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x2, 0x26, 0x1, 0x4, 0x837}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1404}}, {0x68, &(0x7f00000001c0)=@string={0x68, 0x3, "626e5e2eed673c404d5234076d1f971b22b0120f1572250e772d254c3426ca3585d22e935935f7d5947b83c5bb3e3a09bf392febe055c326e0f64890457f3180b1750bf4ddfddfc005d8490cf9491f41f8e4e0b2781cb5dca5e11e8dcee6113a0ba92b3d519c"}}]})

03:07:11 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x18, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9]})

03:07:11 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)

03:07:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x6000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:11 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000080)={0x4, 0x2, 0x4c8, 0x7, '\x00', 0x9})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x2})

[ 2185.352448][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:11 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x424, 0x3f3, 0x200, 0x70bd2a, 0x25dfdbfe, {0x10, 0x0, 0x28, [0x4, 0xaa, 0x6, 0x8, 0xf2, 0x1, 0x85, 0xa57, 0x20, 0x7, 0xffff, 0x1f, 0x10001, 0x1ff, 0xb0, 0xfffff001, 0x2, 0x4, 0x7, 0x8, 0x3ff, 0xb2, 0x7fffffff, 0xfffffffd, 0xd5, 0x8, 0xfffffffb, 0xf2, 0x40, 0x90, 0x7, 0xfffffbff, 0x5, 0x6, 0x1, 0x10000000, 0x6, 0xd2b, 0x2, 0x800, 0x6, 0x6, 0xc3, 0x7fff, 0x80000000, 0x3c, 0x8, 0x0, 0x7, 0xd1, 0x7fffffff, 0x3ff, 0x1c00, 0x5, 0x0, 0xffff, 0x1, 0x2, 0x7bf, 0x80000001, 0x9, 0x100, 0x3, 0x8], [0x8, 0x80, 0x3, 0x2, 0x2, 0x4, 0x5, 0x3, 0x4e173bca, 0x8000, 0x7ff, 0xfb2a, 0x7ff, 0x0, 0xffffffff, 0x3, 0xc6f, 0x1, 0x5, 0x1, 0x1f, 0x6, 0x3e6, 0x80000001, 0x800, 0x80, 0x2, 0x7f, 0x8f0, 0xda, 0x1f, 0x6, 0x8, 0x0, 0xfffffffb, 0x0, 0x0, 0x1, 0x3, 0x4, 0x400, 0x9, 0x13, 0x3, 0x3f, 0x7, 0xf9, 0x4, 0x2c, 0x4, 0x0, 0x9, 0x0, 0x7, 0x1, 0x9, 0x80000001, 0x8, 0x2, 0x7, 0x8, 0x101, 0xcf, 0x4ace], [0x94, 0x3f, 0x8908, 0x400, 0xffffff30, 0x2, 0x20, 0x9, 0xb81, 0xffffff7f, 0xcc6d, 0x7ff, 0x2ac73369, 0x48d, 0x1ff, 0x3ff, 0x9, 0x7, 0xfffffff9, 0x101, 0xf89, 0xffff, 0x8, 0x8, 0x7cf, 0x5, 0x7, 0x3, 0xfffffffe, 0xffff8001, 0x6, 0x5e5b, 0xff, 0x2, 0x6, 0x3, 0x9b, 0xfffffffc, 0x3ff, 0x164, 0x4, 0x81, 0x0, 0x1, 0x1, 0xe69, 0x9, 0x2, 0x0, 0x1000, 0x7f, 0x8, 0x3, 0x20, 0x100, 0x9, 0x40, 0x0, 0xedf, 0xffffff05, 0x6, 0x7fffffff, 0x5, 0x4], [0x4, 0x80000000, 0x6, 0x1f, 0xfffffff8, 0x8, 0x2, 0x10000, 0x1996, 0x1, 0xca, 0x7fffffff, 0xac4, 0x1, 0x9, 0x7fffffff, 0x408, 0xfffffc01, 0x4, 0x10001, 0x5, 0x80000000, 0x7, 0x8000, 0xff, 0x7, 0x0, 0x4, 0x1, 0x26f5, 0xc4, 0x8, 0x8, 0xab14, 0x7fffffff, 0x3, 0x7, 0x4, 0x1, 0xfffffffd, 0x1, 0x81, 0xfdc, 0xfffff800, 0x6, 0x3, 0x1, 0x6, 0xfffffffc, 0x5, 0x8, 0x6, 0x1000, 0x9ea1, 0x161, 0x1, 0x3, 0x7, 0x4080000, 0x9d, 0x4, 0x1000, 0x1, 0x9], 0x1, ['\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4004001}, 0x4)

03:07:11 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x14, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0]})

03:07:11 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
bind$netrom(r0, &(0x7f0000000440)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x4, &(0x7f00000001c0)=[{@none}, {}, {@fixed}, {}]})
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x440, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000000c0)=0x3)

03:07:11 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x2})
ioctl$vim2m_VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000000))

03:07:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x7000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:11 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x10, [0xa2, 0x7fffffff, 0x401, 0x1f]})

03:07:11 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @default, @rose={'rose', 0x0}, 0x1f, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]})

[ 2185.776034][   T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2186.096380][   T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2186.104017][   T34] usb usb4-port1: attempt power cycle
[ 2186.746114][   T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2187.046821][   T34] usb usb4-port1: Cannot enable. Maybe the USB cable is bad?
[ 2187.054371][   T34] usb usb4-port1: unable to enumerate USB device
03:07:14 executing program 3:
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x3, 0x1})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7, 0x5})

03:07:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x8000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:14 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0xc, [0xa2, 0x7fffffff, 0x401]})

03:07:14 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000140)={{0x8, 0x3, 0x9222, 0x5, 'syz0\x00', 0xa1}, 0x0, [0x80000000, 0x0, 0x8d45, 0x2, 0x5, 0x1f, 0x401, 0xffff, 0x100000000, 0x5, 0x754d39f8, 0x8, 0x2, 0x40, 0x8000, 0x3, 0x2, 0x8, 0xff, 0xba, 0x8, 0xffffffff, 0x2, 0x10001, 0x1f, 0x8, 0x8001, 0x3ff, 0x4, 0xe5, 0x9, 0xfffffffffffffffd, 0xfff, 0x3f, 0x8, 0x400, 0x3, 0x9, 0x7f, 0x67e, 0xffff, 0xff, 0x4, 0xfffffffffffffff8, 0x100000001, 0x8001, 0x5, 0x1, 0x7ff, 0xf78, 0x1, 0x4, 0x0, 0x2, 0xfffffffffffffffc, 0x7, 0x9, 0x2, 0x0, 0x2000000000000, 0x3f, 0x7, 0x2000000000000000, 0x8, 0x0, 0x9, 0xffffffff, 0x401, 0x27, 0x2, 0x6, 0x101, 0x7fffffff, 0x0, 0x81, 0x81, 0xfd8, 0x400, 0x0, 0x8f, 0x96, 0x3, 0xdf2, 0x3, 0x7, 0x80000000, 0xffff, 0x2, 0x3, 0x6, 0x1f, 0x1, 0x3, 0x8000, 0x0, 0x1, 0x10000, 0x400, 0x6, 0x40, 0x2d, 0x8, 0x3, 0x1000, 0x0, 0x1, 0x611, 0x3, 0x3, 0xaf8, 0x4, 0x86, 0xffffffff, 0x7, 0xffffffff, 0x9, 0x100000001, 0x8, 0xa57, 0xa27, 0x0, 0x0, 0x5, 0xd30, 0x6, 0x8, 0x3, 0x6]})
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))

03:07:14 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x17, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080))
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:07:14 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2)
socketpair(0x2c, 0x6, 0x3ff, &(0x7f0000000080))

03:07:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x9000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:14 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x8, [0xa2, 0x7fffffff]})

03:07:14 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5fc, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x598, 0x8, 0x0, 0x1, [{0x4fc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast2}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xfffffffffffffe8d, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{}, {0x0, 0x2, @remote}, {0x0, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "89e1d393deec11af8fed710952ac5d30168d20a793912c0b53a01f492c142415"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc2<b\xf5<W\xcd\xbfi\x1c'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x920, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4b6f1871}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c='\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x42080}, 0x4020)

[ 2188.516697][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2188.524382][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:14 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1, 0x1, 0x7a7, 0x1, 0x7}})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4)

03:07:14 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0xfffffffc})
r1 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x57, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000040)={0x3cc, 0x31435641, 0x0, @discrete={0x9, 0x1ff}})
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000140)=0x200, 0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000001c0)=0xf9, &(0x7f0000000200)=0x1)

03:07:14 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000040)=0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4002, 0x0)

03:07:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xa000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:14 executing program 4:
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000, 0x40002103, &(0x7f0000001040)={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
socketpair(0x21, 0x2, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000010c0)=0x7f, 0x4)

03:07:14 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0xa2]})

03:07:14 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80040, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x20, 0x4, 0xae46d1b95d614f52, {0x3, @sliced={0xfffb, [0x4cc, 0x60, 0xfff, 0x8, 0x1f, 0x2, 0x5c9, 0xf3d, 0x70a, 0x7f, 0xf3e2, 0x2, 0xf800, 0x1ff, 0x8, 0x8001, 0x7f, 0xf6b6, 0x4, 0x3, 0x61, 0x7fff, 0x6fd5, 0x2, 0x800, 0x8000, 0x3, 0xffe0, 0x3, 0x9, 0x7, 0x3, 0x200, 0x8, 0x7, 0x1, 0x80, 0x0, 0x6, 0x7fff, 0x200, 0xbb0, 0x1f, 0xcb3c, 0x2, 0x79a, 0x200], 0x2}}, 0x5})
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7f01)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))

03:07:14 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x19}, @l2cap_cid_signaling={{0x15}, [@l2cap_create_chan_req={{0xc, 0x6, 0x5}, {0xdc75, 0xfff, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x4, 0x2}, {0x3}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x4}}]}}, 0x1e)

03:07:14 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'})

03:07:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xb000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:14 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0xa2]})

03:07:14 executing program 5:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000100))

03:07:14 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x100)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080))

[ 2188.888188][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2188.923435][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:14 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="f2bf26c5951d4989bd6943a3f8a12456a9411125464d1203e783e61b1140aab58d9192def5bdaa6c550091da038da056bae6f064ee2c48274214c9c74e196600ba3b579f412198f3ad124e34f57948d8a1d35c951ace00892d66dab01032466d7f93492dbf936524c6150e2a24e17f43c721ee7674f4a72048a0", 0x7a, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={r0, 0x60, &(0x7f00000000c0)=""/96})
syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x2000)

03:07:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xc000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:15 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0xa2]})

03:07:15 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x3, 0x4)
socketpair(0x1, 0x6, 0xe7, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=0x28)

03:07:15 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x40000)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x200, 0x2002)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"b05cab3435fd9215c81846e418a165de", <r3=>0x0, 0x0, {0x5, 0x101}, {0x846, 0x8}, 0xea, [0xfffffffffffffffe, 0xb7, 0x2, 0x4, 0x8, 0x812e, 0x5, 0xfad, 0x3ff, 0x3f, 0x16a304, 0xffffffff, 0x8000, 0x7, 0x2, 0x7]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000240)={"802c63f037fb74115d455371455368a4", r3, 0x0, {0x400000005}, {0xffffffffffffffe1, 0xffff}, 0x6, [0xc03, 0xc7a, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffe, 0x1ff, 0x20000000000, 0x5, 0x1, 0x10001, 0x2, 0x4, 0x4, 0x9, 0x0, 0xf2]})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x9, 0xfffffd88, 0x7, 0x74a9, 0xc37, 0x10000})

03:07:15 executing program 0:
ioctl$SNDCTL_FM_4OP_ENABLE(0xffffffffffffffff, 0x4004510f, &(0x7f0000000040)=0x50)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000080))

03:07:15 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000040)=""/20, 0x14, 0x40000142, &(0x7f0000000280)={{0x3, @default, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x400, 0x80000)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=<r3=>0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000001c0)=r3)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$can_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={&(0x7f0000000200)=@canfd={{0x0, 0x0, 0x1}, 0x2b, 0x2, 0x0, 0x0, "c30733d5b382a2a5052aca603408d55465df0e92b0c9cc21b7d76c5f574e1155ec4b00f40cb01cdfafb8d7951b000000000000001300"}, 0x48}, 0x1, 0x0, 0x0, 0x110}, 0x4000001)

[ 2189.182926][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2189.192799][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xd000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:15 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x8, [0xa2, 0x0]})

03:07:15 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="020000040000fff400"], 0x9)

03:07:15 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1, &(0x7f0000000080)=0x4)

03:07:15 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)})

03:07:15 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x1ff)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, '\x00', 0x4})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x7, 0x5, 0x1})
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)=0x5)

03:07:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xe000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2189.494801][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2189.503053][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:15 executing program 3:
ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, &(0x7f00000000c0)=0x6)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x9)
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8001, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140))

03:07:15 executing program 4:
socketpair(0x5, 0x2, 0x5, &(0x7f00000000c0))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0xfffffff8)
ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0)

03:07:15 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0x0]})

03:07:15 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, '\x00', 0x3})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x3, 0x2, 0x2, "7207caa4ef519cbb57912c111a50b37dd440c004933506fafdaa4033759ac366", 0x34565559})

03:07:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x10000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:15 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_rsp={{0x18, 0x4, 0x23}, {0x1ff, 0x4f, 0xcd, 0x279}}}}, 0x2e)

03:07:15 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000200)={0x448, 0x3f3, 0x300, 0x70bd27, 0x25dfdbfb, {0x1, 0x2, 0x19, [0x6, 0x10000, 0x5, 0x9, 0x1000, 0xffff, 0x38b6, 0xe45c, 0x5, 0x2, 0x1, 0x4, 0x2, 0x5744, 0x7, 0x3, 0x3, 0x8, 0x0, 0x5ef, 0x7, 0x6, 0x1, 0x7fffffff, 0xfffffff6, 0xffffffff, 0x0, 0x8, 0x1, 0x5, 0x80000000, 0x5, 0x1, 0x9, 0xfc, 0x0, 0x3, 0x5, 0x2, 0x9, 0x6, 0x6, 0x5, 0xffffffe0, 0x0, 0x79, 0x6, 0xfffffffa, 0x3, 0x0, 0x1e, 0x101, 0x72c, 0x6, 0x2, 0x4af1, 0xffff, 0x9511, 0x7, 0x1, 0x380, 0x1f, 0x0, 0x20], [0x5, 0x5, 0x5, 0x2, 0x40, 0xfff, 0xe9, 0x2, 0x5, 0x4, 0x1, 0x80000001, 0x80000000, 0x0, 0x50f9, 0x6, 0x10001, 0x1f, 0x10001, 0x0, 0xaa8, 0x0, 0x4, 0x1ff, 0x3, 0x7, 0x7fc000, 0x74, 0x1ff, 0x1ff, 0x0, 0x1, 0xfffffffc, 0x137e, 0x0, 0x200, 0x8, 0x7ac, 0x2, 0x401, 0x1, 0x8, 0x0, 0xf9ea, 0x401, 0x2, 0xc5, 0x9, 0xb3c, 0x0, 0x9, 0x70, 0x7, 0x3, 0x7ff, 0x0, 0xa3de, 0xe005, 0x0, 0x9, 0x3f, 0x7af28ef1, 0x6], [0x6, 0x1b0f, 0x7, 0x8001, 0x7ff, 0x0, 0x0, 0x80000001, 0x18, 0x8a1, 0xb3b, 0x2, 0x400, 0x30, 0x3, 0x41, 0xbf, 0x4, 0x3, 0x2, 0x6, 0x5, 0x1, 0x200, 0x101, 0xfffffff9, 0x0, 0x3ff, 0xfff, 0x3, 0x3, 0x5, 0x42c, 0x2, 0x3, 0x8, 0xffffff29, 0x1, 0x101, 0x2, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x800, 0x200, 0x6, 0x6, 0x2, 0x3, 0xffffffff, 0x3, 0x46, 0x400, 0x40, 0x6, 0x3, 0x2a26, 0xf786, 0xdac1ad3a, 0x800, 0x52, 0xd], [0x6, 0x5b, 0xfffff800, 0x80000001, 0x1000, 0x5, 0x4e, 0x1, 0x3, 0xfffffc00, 0x2e5, 0x80, 0x0, 0x2, 0x10001, 0xa819, 0xc26a, 0x9, 0x10000, 0x800, 0xfffffffd, 0x400, 0x8, 0x7, 0x0, 0x143, 0x0, 0x1, 0xffffffff, 0x5, 0x6, 0x8, 0x80, 0x7, 0x3, 0x100, 0x2, 0x0, 0x7, 0x7f, 0xead4, 0xff, 0x1, 0x80, 0x3, 0x7, 0x0, 0x0, 0x7df33253, 0x676a, 0x69b, 0x9, 0x7, 0x80000001, 0x80000001, 0x6, 0x0, 0x9, 0x6, 0x0, 0x10000, 0x9, 0x8, 0x31b], 0x26, ['/dev/full\x00', '\\\x00', '!\x00', '\x00', '-}\x00', '\x95$\x00', '(@\'}\x00', '@-,\x00', '\x00', '@/).\'*\x00']}, ["", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x8000}, 0x40084)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
recvfrom$phonet(r1, &(0x7f0000000040)=""/158, 0x9e, 0x40, &(0x7f0000000100)={0x23, 0x5, 0x20, 0x8}, 0x10)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x5, 0x4)

03:07:15 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0x0]})

[ 2189.839172][ T8469] Bluetooth: Frame is too long (len 41, expected len 16)
[ 2189.847806][ T8469] Bluetooth: Frame is too long (len 41, expected len 16)
03:07:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x11000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:15 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x81, 0x4, 0x3, {0x1, @vbi={0xe05, 0x6, 0xb2, 0x41564e57, [0x7, 0xfffffffe], [0x50, 0xdcb1], 0x108}}, 0x1904})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))

03:07:15 executing program 3:
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x9)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="020008040000000100"], 0x9)

03:07:15 executing program 4:
socketpair(0x29, 0x80000, 0x0, &(0x7f0000000000))

03:07:15 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

[ 2190.036486][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 2048
03:07:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x12000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:15 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0)
sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x2b, 0x1, 0x0, 0x0, "d3e437b3c5c6916254b0f12d07f901b4a6255937aa13a2a5e32a08da77ae38baa3f2f3d4b331e7dbe0bac66471d9f6c636e1ddb161a532db4fc90c9ebc1d10f4"}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x4040040)

03:07:16 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x4, [0x0]})

03:07:16 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x9, 0xc9}}}, 0x6)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1009610}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3fa, 0x4, 0x70bd28, 0x25dfdbfb, {0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x10)
ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)=0x2594)

03:07:16 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
getpeername$netrom(r0, &(0x7f0000000040)={{0x3, @netrom}, [@default, @bcast, @remote, @null, @rose, @netrom, @remote, @netrom]}, &(0x7f00000000c0)=0x48)
socketpair(0x10, 0x2, 0x2, &(0x7f0000000040))
sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x1, 0x1}, 0x20, 0x3, 0x0, 0x0, "b53286b81f746f9c4f290e1b6351b350cfbc53bec5bf683cd4f09b6146537bf0fb27368754dcd40ca47fc0bc1ee226001069831f2cca099bd02448c3038a1ee0"}, 0x48}, 0x1, 0x0, 0x0, 0x50001}, 0x8001)

03:07:16 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x5, @none, 0x2}, 0xe)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)={0x40, 0x8, [0x7, 0xffffff00]})

03:07:16 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x8, [0x0, 0x0]})

03:07:16 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x18000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2190.287972][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2190.297564][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:16 executing program 4:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x464, 0x300, 0x70bd2c, 0x25dfdbfd, "c0580509d5f96d737b62ad6b51125fb9bfdc20a0914c72660274a70152ed4a0df2469fe6825295030dc11066d8cadb79f6e6b1545b63499b47fdfb47a33d3366f040827469edb476eef6ad9218dab3ed46abe89404779559a4f484896f7cdb135723eeeab8a0bc407600010088342ed3bb19e196d59e36bdba18907d1bf8889a8a57", ["", "", "", "", "", "", "", ""]}, 0x94}, 0x1, 0x0, 0x0, 0x24000801}, 0x20008045)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x200, 0x0)
sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x464, 0x400, 0x70bd2d, 0x25dfdbfd, "35a7ebfa008d2a771ac194150cddfcbd48d582380feddb70d02dbc86543fbae4be594ec0c4ee413557c423cafafdb927b87f003168c0d14982c418ca05aaaafca588dcc237ff625bf2f8520c353c3f3c68dcdaf3d3f5eec47074b2f8d9", ["", "", "", "", "", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x804c800}, 0x800)

03:07:16 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0xd2}, @l2cap_cid_signaling={{0xce}, [@l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}, {0x20}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x3b, 0x8, 0x6, 0x95c}}, @l2cap_info_rsp={{0xb, 0x5, 0x84}, {0xfffe, 0x1ff, "c52af621dd1dbeb47eb3ad73479b7b262938d677ea2ffaa36daf8156f0b3a8b823d5eb5f7b0f5fe893c45c298118681c4c204607608ee080a0288cf5a75151a345eded99b0c8450c2b81fc44f47ecf71beb3aba8828f5c3df018c5f1042985f60d0afc4190a08aae80fdfbe5acd2dbc19325af7e79fddde73910d80c05dc4373"}}, @l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x1ff, 0xbbe5, 0x0, 0x8}}, @l2cap_conn_rsp={{0x3, 0x80, 0x8}, {0xbdb, 0x8, 0x5, 0x2}}, @l2cap_info_req={{0xa, 0x80, 0x2}, {0x1}}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x9, 0x4223}}, @l2cap_move_chan_cfm={{0x10, 0x0, 0x4}, {0x6, 0x4}}, @l2cap_info_req={{0xa, 0x0, 0x2}, {0x800}}]}}, 0xd7)

03:07:16 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x2, 0x1, 0x84000000, 0x4, '\x00', 0x1})
r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x80)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000040)={0x3, 0x3, 0x200, 0x800, '\x00', 0x80})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:16 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040)={0x1})

03:07:16 executing program 1:
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x3, 0x1})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7, 0x5})

03:07:16 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x25000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2190.545685][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2190.554251][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:16 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0300000400007f700079a6f2111a4926b2242dd4fc63cd94b3f30f8e5ad2861123f41a9b45d3105ebae0ea"], 0x9)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x3, 0x0)

03:07:16 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

03:07:16 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x101400)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040))

[ 2190.643323][ T8469] Bluetooth: hci1: ACL packet for unknown connection handle 0
03:07:16 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x5c000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:16 executing program 1:
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x3, 0x1})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7, 0x5})

[ 2190.741383][ T8469] Bluetooth: hci3: SCO packet for unknown connection handle 0
[ 2190.759824][ T8469] Bluetooth: hci3: SCO packet for unknown connection handle 0
03:07:16 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x8000, 0xfffff801, 0x0, 0x7})

03:07:16 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000000)=0x80000000)
socketpair(0x26, 0x0, 0x8, &(0x7f0000000040))

03:07:16 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/timer\x00', 0x20802)
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)=""/4096)
socketpair(0x29, 0x2, 0x0, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000080)=0x4)

03:07:16 executing program 3:
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000000)={0x1, 0x401, 0x2, {0x2, @pix={0x2a5, 0x6bc6, 0x35315258, 0x1, 0x4, 0x7, 0x3, 0x8, 0x0, 0x0, 0x0, 0x2}}, 0x6})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:16 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0xff000000, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2190.947557][ T8469] Bluetooth: hci1: ACL packet for unknown connection handle 0
03:07:16 executing program 1:
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x8, 0x3, 0x1})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x7, 0x5})

[ 2191.017101][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:16 executing program 4:
socketpair(0x14, 0xa, 0xfffffffe, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{@none}, {@fixed}]})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0))

03:07:16 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000040)=0x1ff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000001c0)={0x6, 0x20, [0x37a54e63, 0x9, 0x7, 0x0, 0x200, 0xfffffff9, 0x5, 0x100]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x10000)

03:07:16 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="0200bddf74ffc2f17a"], 0x9)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0x2c2, 0x8, 0x84000, <r0=>0xffffffffffffffff})
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x1, 0x67, 0x84800, r0})

03:07:17 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000480)={0x7, &(0x7f0000000040)=[{@none}, {@fixed}, {@fixed}, {}, {@none}, {}, {@none}]})

[ 2191.181522][ T8469] Bluetooth: hci1: ACL packet for unknown connection handle 0
[ 2191.218207][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3328
[ 2191.226629][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3328
03:07:17 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf18bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:17 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @netrom, @netrom, @rose, @remote, @null, @netrom]}, &(0x7f0000000180)=0x48)

03:07:17 executing program 1:
socketpair(0x14, 0xa, 0xfffffffe, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{@none}, {@fixed}]})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0))

03:07:17 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x0, 'syz1\x00'})

03:07:17 executing program 1:
socketpair(0x14, 0xa, 0xfffffffe, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{@none}, {@fixed}]})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0))

03:07:17 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200b00, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080))

03:07:17 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
sendmsg$AUDIT_USER(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x108, 0x3ed, 0x530, 0x70bd2c, 0x25dfdbfd, "ebf74a20ee7441c44e349b2523da0a43716b4d694528d780e259ee1607bb8e603b915b4d99d70f613345b1f8b531f27f0bf908564f3517363d93a218610c06b4fac554062594292ce15d32b116d69ea2f87260d1cfc7175773fd4bf3d1c9984b61e674a867cb448a80212a06d0122fb2069f6fcd55ce8c3a5a07030163f8a87d84a025317ea4919c6c863793745ad6b6fa9ae0e2f7542be7eb96cb3f96ef562bab3534d4abb9f527c36bdf24de66a41b5435fe14a2a56d27c295fccae71be6f4de5c2c810a69a00b5b72a62d5bf5dff68debf6b698593b2e373fdb362b1243f6983a6c63e332c73395a34584e66be4aca73f19115f679e", ["", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={@fixed={[], 0x10}, 0x3})

03:07:17 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a870a3b803d738a1c71e80327d31bfe751ae4"})

03:07:17 executing program 1:
socketpair(0x14, 0xa, 0xfffffffe, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{@none}, {@fixed}]})
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0))

[ 2191.524762][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2191.534681][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:17 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x450, 0x3f4, 0x10, 0x70bd2c, 0x25dfdbfb, {0x10, 0x1, 0x40, [0x200, 0x4000, 0x4, 0x400, 0x249d, 0x3, 0x10000, 0x8001, 0x10000, 0x7, 0x400, 0x4, 0x8000, 0x2, 0x6, 0x100, 0x401, 0x8000, 0x9, 0x3, 0x1f, 0x2, 0x6, 0x2d57, 0x80000000, 0xc95d, 0xfffffff8, 0x80000000, 0xfff, 0x7, 0x2, 0xffffffff, 0x8, 0x6, 0x4, 0xd3ca, 0x1, 0x5, 0x10000, 0x3, 0x571, 0x400, 0x3, 0x5, 0x8, 0x6, 0x63, 0x400, 0x7, 0x4, 0x7, 0x6, 0x1, 0x101, 0x300, 0x1f, 0x6, 0x671c, 0x6, 0x63, 0x81, 0x2, 0x6, 0x1f], [0x0, 0x7, 0x7a7dc02, 0x1, 0xb62, 0x8, 0x3, 0xa000, 0x7f, 0x2, 0x2, 0x2, 0xfffffffd, 0x8, 0x2, 0xffffffff, 0x81, 0xf363, 0x5, 0x8001, 0x6, 0x7fffffff, 0x3, 0x6, 0x0, 0x0, 0x2, 0x4, 0x7, 0x3, 0xd92d, 0x1ff, 0x7, 0x6, 0x1ff, 0x2, 0x5, 0x5e0, 0x8, 0x6, 0x1, 0xffff, 0x13, 0x100, 0x100, 0x20, 0x1000, 0x80000000, 0xffffffff, 0x81, 0x1a, 0x7ff, 0x7fff, 0x101, 0x20, 0x2, 0x18, 0x101, 0x8, 0x3, 0x3d85dafb, 0x1, 0x8, 0xbf6], [0x3, 0xfffffffd, 0x2, 0xedc, 0x7ff, 0x7f, 0x7fffffff, 0x4, 0x4, 0x4, 0x10000, 0x8, 0xe5, 0x0, 0x9, 0x5, 0x51, 0x3f, 0xfffffbff, 0x5c2ff44a, 0x81, 0x1, 0x7ff, 0x6, 0x89b7, 0x200, 0x5ac, 0xfffffffa, 0x2, 0x2, 0xffffffff, 0xab77, 0x6, 0x0, 0x3, 0x3f, 0x0, 0x5, 0x0, 0x2, 0xfffffffc, 0x1ff, 0x20, 0xffffffff, 0x8000, 0x4, 0x5, 0x222000, 0x7fff, 0x2, 0x18000, 0x8, 0x101, 0x7, 0x401, 0x0, 0x400, 0x5, 0x723d1162, 0x9, 0x4, 0x596, 0x99fa, 0x7], [0x8001, 0x81, 0x200, 0x9, 0x6, 0x1, 0x9, 0x1f, 0x80, 0x9, 0x3, 0x6, 0x8, 0x4, 0x3135c000, 0xbf, 0x7, 0x101, 0x41, 0x6e, 0x80000001, 0x0, 0x1, 0x9, 0xe220, 0x401, 0x5, 0x6, 0x1, 0xfffffffc, 0x6, 0x477d, 0xd8d7, 0x5, 0x6, 0xca3, 0x1, 0x8000, 0x5, 0x1000, 0x7fff, 0xb06, 0x6, 0x8, 0x2, 0x8, 0x8, 0x8, 0x0, 0x4, 0x1000, 0x3, 0x8, 0x6, 0x2, 0x800, 0xfffff000, 0x20, 0x7fff, 0x5, 0x9, 0x9, 0x9, 0x7], 0x30, ['\xdf\x00', '*]\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '\x00', '[![\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000)

03:07:17 executing program 4:
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x7fff})
socketpair(0xa, 0x2, 0x1, &(0x7f0000000040))

03:07:17 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="020000040000800100"], 0x9)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000))

03:07:17 executing program 5:
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x438}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4000003)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000380)=0x7, 0x1)
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x3fa, 0x8, 0x70bd2c, 0x25dfdbfb, {0x1, 0x0, 0x1, 0xdbb04217ea381510}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x880)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x7ff, 0x7266, 0x1})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))

03:07:17 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10002, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000001c0))
sendto$phonet(r0, &(0x7f0000000040)="ab11d988833f3749b1540ee3eaa6c328b7d7abfd4aaeb48d2b10bcb59c050d66356701adff2a6a26222590c234c9e07dc873f1e74fbc91d97ac39683fe324ca93b7ea3124c3dc97bbc71edb0dd0f99fcaca81d49ba7b375c15d5833c70609a91ce501ae7c78b921a6feebc1076e556936e982c9aa340b19da97afb07a5e03457ec2d0fd37bd950c4f0d3c7396c81b18cad2f8ea2e669136b864c2cee2c0bb6b3825747950f4fce4616bd4418470651fdf06227dee5e7faceb3ae71", 0xbb, 0x4008000, &(0x7f0000000100)={0x23, 0x9, 0x3, 0x5}, 0x10)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:17 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87293b803d738a1c71e80327d31bfe751ae4"})

03:07:17 executing program 1:
socketpair(0x14, 0xa, 0xfffffffe, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{@none}, {@fixed}]})

03:07:17 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @netrom, @netrom, @rose, @remote, @null, @netrom]}, &(0x7f0000000180)=0x48)

[ 2191.833296][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2191.841025][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:17 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x401, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x2, @vbi={0x2abe, 0x4, 0x400, 0x3234564e, [0xfff, 0x7], [0x6a1c, 0x9], 0x108}})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:17 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @netrom, @netrom, @rose, @remote, @null, @netrom]}, &(0x7f0000000180)=0x48)

03:07:17 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x250, 0x80040)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x0, 0x0, 0xffffffff, 0x3, 'syz1\x00', 0x7})

03:07:17 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d238a1c71e80327d31bfe751ae4"})

03:07:17 executing program 1:
socketpair(0x14, 0xa, 0xfffffffe, &(0x7f0000000040))

[ 2191.980612][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:17 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d258a1c71e80327d31bfe751ae4"})

03:07:17 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
socketpair(0x8, 0x80000, 0x8000, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x8e, 0x6, 0x91}, 0x10)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x0, 0x1, 0x3941, 0x3, 0x3}, 0xffffffff, 0x54f, 0x8})
r2 = openat$full(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/full\x00', 0x414000, 0x0)
ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000001200)=0x4)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000001c0)=""/4096)
ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000040)=0x2)
open$dir(&(0x7f0000001240)='./file0\x00', 0x242400, 0x84)

03:07:18 executing program 3:
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xffffffffffffffbe}, {0x81, 0xc8, "a14b50fac8e8d9c8"}}}, 0xe)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000000c0)=0x40, 0x4)
getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@netrom, @remote, @default, @bcast, @default, @null, @rose]}, &(0x7f0000000080)=0x48)

03:07:18 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @netrom, @netrom, @rose, @remote, @null, @netrom]}, &(0x7f0000000180)=0x48)

03:07:18 executing program 1:
socketpair(0x0, 0xa, 0xfffffffe, &(0x7f0000000040))

03:07:18 executing program 5:
r0 = syz_usb_connect$cdc_ncm(0x4, 0x129, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x2, 0x1, 0x6, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "59b77e8b43"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0x9, 0x9}, {0x6, 0x24, 0x1a, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x3f, 0x3}, @mdlm_detail={0xae, 0x24, 0x13, 0x3, "65a5f299234aff4ccd5e845ec94db2dfc05d21156c8b2ba86bd15bce2a8516bfffca7fb0a1e31e6cf548f594f06763bd5e1d8330f0fbd81a3633aa3281e6071bfe9a4ec2e227f2ab1a8f8159824915488d2d102e1763308248040b65854fb85c2f03831f2348d9f3d86991d948c14a33839ebfb1580d8cec23263fcd300a31691a2ebcd7c19d518d93c7c56ebf49bcde1dbb6b5ce3430d2ef7f0d3e9bf18a290647c905bb93225a5f218"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7f, 0x51, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xff, 0x80, 0xd6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x4, 0xd1, 0x1}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x0, 0x86, 0x20, 0x1}, 0x8, &(0x7f0000000040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x40, &(0x7f0000000080)=@string={0x40, 0x3, "27b243ad453797b840d38c2450d3c7e86233d01589e2a42ad7794737fc899e47c4e2f2d5b1c090c9e1e90cada98073d87757a5b19938e9af719a50ee38fe"}}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x40, 0x1, 0xb1, {0xb1, 0xe, "660fabe1e2d0211a4fe343aa820a579475d14de7b6689aab716b3237ec81a89c50367fbb2747775c7593e0901be752a8b6ca45b342ac3f555a7f56649dc90db38c965583818a7599c65371da351b702af8fd52d4b5ed588b2c923429011c82059359ecf50efb7c7ba4514963800f9194324bb6a4c5f4a003aa4d57650b119187d6e97956d6fc83b935af39dd1973dcabe314cd8525689c10ee74f636075bcc05f2b8ad9bb97d9391a336a884344cab"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x0, 0x11, 0x96, "7ed9f752c18936d87e3c67a8a942aeb8b1bdad1c0cfd303b168a13c80f6a06ac1b0e67e583694ed6897de38172244f7bac69d87d69f1c9fb9984b60ef6f91a3ceadd2aa23b527d7c74f9b3132225b85cdca9b4cee5bf4dc4003c176244783312e6c7b6b1f8023de28e82d0df1b9db31df39ca6369ff861e21af391ecf7ec63da3030e0d6c7f85d17722e885a66e5dbb356253cb60fb6"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x9, 0x337, 0xf566, 0x1ff, 0x400, 0xfffb, 0x1, 0x7fff, 0x101, 0x3, 0x2, 0xcb94}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0x7}, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2}, &(0x7f0000000640)={0x20, 0x89, 0x2}})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000100))

03:07:18 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d2a8a1c71e80327d31bfe751ae4"})

03:07:18 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)

03:07:18 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x402, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000080)={"59194a33aacc97b2f5e9d23e97819751c9134ad40dd79cfcc1eb6a88f861", 0x4, 0x2, 0x1, 0x0, 0x0, 0x101, 0x6, 0x1, [0x6c922077, 0x4, 0x2, 0x3, 0x9, 0x3, 0xea6b, 0x6, 0x682, 0xea, 0x3, 0x6, 0xcf, 0x8bd4, 0x2, 0x81, 0x4, 0x4, 0xfa4f]})

03:07:18 executing program 1:
socketpair(0x0, 0xa, 0xfffffffe, &(0x7f0000000040))

03:07:18 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000000c0)={0x7f, 0xb}, 0x2)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4)

03:07:18 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d2b8a1c71e80327d31bfe751ae4"})

[ 2192.493700][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2192.503264][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:18 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:18 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x4}}, 0x9)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000000))

03:07:18 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x140882, 0x0)
ioctl$SNDCTL_SEQ_GETINCOUNT(r0, 0x80045105, &(0x7f0000000080))
socketpair(0x1d, 0x800, 0x0, &(0x7f0000000040))

03:07:18 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d2d8a1c71e80327d31bfe751ae4"})

03:07:18 executing program 1:
socketpair(0x0, 0xa, 0xfffffffe, &(0x7f0000000040))

[ 2192.808577][T24138] can: request_module (can-proto-0) failed.
[ 2192.870307][T24143] can: request_module (can-proto-0) failed.
03:07:18 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x1, 0x7, 0x5}}}, 0xc)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{0xd, 0x14}, {0x1, 0xc8, {0x64, 0x80000000, 0x64, 0x3, 0x6}}}}, 0x17)

03:07:18 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:18 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d2e8a1c71e80327d31bfe751ae4"})

03:07:18 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x20000, 0x0)
ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000080))
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000180)={0xfffffffe, 0x2, 0x4, 0x0, 0x5, {}, {0x3, 0x0, 0x6, 0x0, 0x5, 0x1f, "fd3c14b7"}, 0x8000, 0x4, @offset=0x2, 0x1})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x80800, 0x0)

03:07:18 executing program 1:
socketpair(0x14, 0x0, 0xfffffffe, &(0x7f0000000040))

03:07:18 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x453, 0x20, 0x70bd2c, 0x25dfdbff, "04ae984b0516f7ec5eed54d0e5cabc138dd895a46d2f199705dc30f5b4305298246e14", [""]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0000}, 0x20000811)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000))

03:07:18 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d308a1c71e80327d31bfe751ae4"})

03:07:18 executing program 3:
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x210, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x8084)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX=r0], 0x9)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
write$sequencer(r1, &(0x7f0000000240)=[@e={0xff, 0xb, 0xb, 0x9, @generic=0x7f, 0x7, 0xff, 0x1}, @v={0x93, 0xa, 0x90, 0x20, @MIDI_NOTEON=@special, 0x9, 0x34}, @raw={0xc, 0xc, "1721f5501062"}, @n={0x1, 0x8, @SEQ_NOTEON=@note=0x74, 0x1}], 0x1c)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={[], 0x12}, 0x1}}}, 0xa)
syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x43}, "777b69b576a0c2fec501732f38b967ff56bb70149cd411c04a56d5f5aa2ac0110d4b9cff8cac2147bc3e404c817151f79d207ec4bacf7644786721be2cb4c644e7dcba"}, 0x47)

03:07:18 executing program 1:
socketpair(0x14, 0x0, 0x0, &(0x7f0000000040))

03:07:19 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x81, 0x3, 0x1})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:19 executing program 0:
socketpair(0x9, 0x3, 0x3, &(0x7f0000000000))
r0 = syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0xfffffffffffff000, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0xfa5, 0x1, 0x4, 0x0, 0xcf0e, {0x0, 0xea60}, {0x2, 0x1, 0x0, 0x5, 0x1, 0x0, "f756d1c5"}, 0x5, 0x2, @userptr=0x3ff, 0x80000001, 0x0, r1})

03:07:19 executing program 4:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:19 executing program 1:
socketpair(0x14, 0x0, 0x0, 0x0)

03:07:19 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d4c8a1c71e80327d31bfe751ae4"})

03:07:19 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x0, 0xf2, &(0x7f0000000040)=""/242})
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x37}, "89a66f6e93609da2025bb8285eb98fd929f70c3571e16ea6ea75603a8ed38235e427598f25cccb6d89bc68cd333b085a5eca3d3414786d"}, 0x3b)

03:07:19 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default]})

03:07:19 executing program 4:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:19 executing program 1:
socketpair(0x14, 0x0, 0x0, 0x0)

03:07:19 executing program 0:
socketpair(0x1, 0x800, 0x404, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x2fd7, 0x2)

[ 2193.390821][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2193.398438][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:19 executing program 4:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:19 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d588a1c71e80327d31bfe751ae4"})

03:07:19 executing program 0:
socketpair(0x2b, 0xa, 0xf42, &(0x7f0000000000))

03:07:19 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="ede553bc19210c78000e0c4a8080249bd225dcde128cd8dd083ebb86bab5b9b495b626ec5a4a8557b7038ae60fdc4014ca3ce405101ef6252676c4b876ba8a2a6dd4c684bc1ddbddde8161b68127c3185c8f7262c20a1fc5c65ccbaa2418a4780447fa8984379e807010333533b1e24eff21bd512c11054292306bdf04344b34aec61551ba962a2d13db690e4692ff56cfb3d6900d0e55a77d54957cda83148536963903cda56cafd50742c3b1b4e7b7dd8e538bebc5b9d2a2f4c0b5022e886445aaf4e575208ba2c91ac403b25c69e22948e49042aa"], 0x9)

03:07:19 executing program 0:
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f00000001c0)={0x7a5, 0xc, [0xc4, 0x8, 0x40]})
socketpair(0xa, 0xa, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x21, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x1ff, 0x3)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x2, 0x1)
ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x8)
sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000001300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000012c0)={&(0x7f0000000280)={0x1010, 0x464, 0x300, 0x70bd2b, 0x25dfdbfc, "2f2a1aedfff063f6feed8006f7cc0b57282fbb65bea942448d6f408d80e72f8b333e4f8ac002765bbe0e8c3373746d4ecea04f4c39236cdc2423a5254c010ec63ade5bc7832b27ad9fd966919260431aa7fec63528ffc5f8eb6f3432a7cc6e19fdab53dae0dad9d8302fd69ec5fd6736ea3c33ab2b7c4f271aaeb1663b8be4f71a553047ccf9146e6609bd55a994f482473012b557d993e56974187086229a81a7d1a9937bc8a7732c288617b5a03bf030322263e3cc7291314ea575f705b1b01a4cbb3fc509b2414117083b54e2c44cd8db5145a438383287bfa1b19052d2fbd73e204e5e0b506eca58eccab67a356de040e0fbb94876ed9b70669c14345308ffed9fe28ad8798145138d856cbd04154a888f053cb0e8919cdbefd3826994e5fedae91144e1ab7e36747e0d7435a4176412b0f80c3fbbb62f5c81376795c1bc7eb25a16be8c288da329c1347b782da8cf6f5547488f3bd9b009a9ff14a5acd17b0fd57ae84f5cdf07276dd1cfbab32b17bde137f12e528f41fca543619df42738bc734cfef31216d6084e1e3c9b0dd18e3e05fd246e8e54718628a20397570c49e605264fa60f3add816f90e33465fa673095fccb1eb2ccf5186cc128db9660fb7c0db8bf129fd7b4e48710b60d4fac26c1892034ae1b2abb82012d48e17caf55f2c5a5df5eef78ed6d025f3f5d2f78920e237b7c2e4986886f07ab94393e9ef48061b7626166963bb69f845e1c281bc604a6246334be56948962fdf93c3ff8cdb4c97f27c4b74a2241b00c66aac7e50d1edf737b2de4c5af0d6cd1ddd139b9b8a48a366ad6bcc13eecc5a66f4f5757b8186ad99729802557e993b0d096cc5cd2ea5c5437ab8639c7300fa0cb1ffcd501377593242b94e94e48b5edb9ff46e66a6648a139678a109ecd2f18b8ceecc3c78708ad6f6bcf36397c2e9b1f4a6248b0ea0689284c1c2e2dd717bb0246b1fe0b101c2d25149ffbaa12b3165d524d63a5ba0a76d7a5f6e2fcccb632bf9012819c2f2838350f3aba86664ac29c9a05690157085619481c813479d8aac13d63c3df68a71c7f734459ec05dd8981dadfd64a3ca19e4423a176ae0f87bc4ccf2a6fd017e34583d5f298e5e12c968a0fcd426881436b2d1676006e9dc4b6dfbd8817d41ef96eb760f63f0ac4f2415e38a59e242e6d3e7fcc9bae1d9cd8224b123e19fa999f437ee0c35732a588dadbc257574458faf4b110aac639e46fff6dd5ac17e561ef9805203c2215b603920a5f04fbb0eb48b975cfa9ca5ecd5529235e17aaf91a5f54e1f51dba6d200496ad798b6a76229ec63a97f87360fbb0a9134df231b705314e196325cc37d7d62c60af182d0ee08b057d81f4a62217e482d1107e652087f2fca5293538dea10f18cfb3b74a3e107b272c482610c2d584865da96b94a807542cc5a89d8e075c1bdb42184aadaae58ef7c38ead22da5b95c1bde7d44606df396dbdf6f0968e1ad1af98e22f26ecddcfa35723ada77c6cf1e2a4d9bcf403f2a2771a484132826fca0d975b6cde0999c4d9cda7d8e3ac0c23329f8db138ad48a9e96cc952231d25476c5b89b1339a5c5002a5e577ff0ed129e6f704de1e5beb7c5e2970673f4f9be2683bacce79cbaee1175cbc6a5f64c5c26a3dd145121a8f5ec4e6599459d8ca9e32fa5d18cf4f8350c92a9db75ca632c673e505d04482e0fc35efbabd4f5cf3ab8140dfaac51b145a69f99f9decfc4777a24c5d851a648374af30116b42eed7059d8217f7e8cc68292c632f39d3060ebac7e7bb777fd246beeb93fc7f608cf070a4d1c0f21b7eae907d79e1d6cb661f181e22f41755bec612b40b628958348e72f3130b4a7a0011561013b4d9ec63454d9040aa64cc55151604b391dd330dc72e8e7ca943bd4b0b48bcc037ca75ab5a1a8b4afb1f4c46b1b6444c1100c5e88a95a50c7e64fb744ee6ed0d0d3f0033a4e2943b86f9814a7ea1d4d7987d5ce03a68b3f6c44746a09e57aa75a070d5dc1451c126c4c4a298c51d997853fc7523570721a3e370694087cede908107b2f5b0ede94539761269eec7cfaaeef5e9012e0da2363d5c159c7dd5ad469a81f734ccf31957ecf78f270bad5f8936c2b2a300da810151593505ad3ce97fdadbca0f440129fc99c2f0022bbd0a2181eaa7f30ba468417326eda2700df8828c6fdf5b3d9a83f1c3f1aa21b0fca9e19eae0ea23d4c79ce3b21253549cb9035ff09ab701810430391716b02f20dfb3a48ecb88d725d1c44f8f5a2ddd13c434cdaa2a009924e8c37e83eebc49f380d645ec5d2d2c7365ca494a9ca31d5a879d2fa33db207e4b538ce1c46bdbadbca4e4fda4ce1b04547a766bace55f1a22f8f8843ffac8d21d0c8db2b94b38421671f2b6d2f345a621e91d93a2ce3c5d9fea405136a8814689a7af541b1db1ea713aa7e2a525d73d1c4873f66c116eb9f06cb421ee03ba2b1404a7145cb70019dcfe1eadd9d09216342ec52565c33d08220a1cf4952678666a1753466373c5647223421333b394ae76fb861468117353f5e8a8d8dd90daba7f8a6d12b7a8ce9ea6fdb340dbccd307bfda629b880dbf7b19f6497e8baa561adf98d6535586a8a9f9fca1a142f88375b5925afa7a3dd42b1e712b731cf2c6483a44d8bb78c8e99bbccf3fcb3a2f9079361f4c2a04bd99551db1ef3b292bf2eae65950bbe967914489b4dc5c53686992715f5fd75cc57d31becf58bde9071368949525db3702fa761fd589d5b84dc1f66099b6d070045781fed6a8bd2c7e4e5f326ce53de0e97ff2a1ecfc41161f3317ec9625134f906c98d77f47e7e3d8cab9d158cf6d78b78f0f8ec704327dce3e22de0ac9ee5bfd5657c3519e8f82b6e4e4d85bf389c8fe895ba19a5e1969b87e80870dfac3b0a4fb934202a449c628648298bb34fd26d2ff3b23a0d79dc1debee75db5c8c9275326a34cec9834371098c62016c65a2aaf186cdba32d0b312eab309be0e930895b33e49278d67d6b523c849fb22c1deb7c69913540f2151b0ffe6bb07bb7fea91a39f7943f5cafab956d2bfc27e33dd4256d96fefe509d49cb693e63b49572e01eb15dd4bfb4e508c3807ad675f0d0425eb88a2df8184475777a7184d88d1b7d15d337b96caf2c75c1e010839882f5bb34a48f8f63346e8fff4685bbd7008e0811bf276c73e6301c379e7e6b7878ea7e2a3d283dbb7cecb5fedc1f3448c37b52d7d2b207864c442c46a15b2f6cbd8239943f6cc9b6087182c75c06cef5ee9658045b2845e2ec95c2ebff0727376116e0618e6dceeae54a6f9d6681cb0cb2a10f948cf0a7d7c1c5a17c09d3eb04ca2581286d02a26a9a7105ca26cdf4e63c2c1e68b83b77f898c232aa951547ee274ca44fbfa608d48c0a310000b38025c6952e5fd05f7ade19d0a5f5ca7df61d8d6fa778b8e0f44880387c7e9d2c065fc36b4b93a1878c477ddb489fe548d63a08eaf889c8ab5a7660f6dd8b39360d31706a0e1689d6fc586c34373bc0b4b65d9405e467b19007f938ea5b063a162fcfc286b2548ac1417e9e5e9981e92cdf0c93eaf6995649dc49cf3a9886ca10ddca4fd4affc5cfbf7957966f4c96671b45923fa7d4c4df288915c0591ee3d02f5e63c2d8690153e43717334f0d1278f72b333cf80d7f7fc14412302b4f503eb9d4d4ab0a64cfa66ec15d1c8223a5737d99a792a589ea41ab8ac0a3f93e09fe8deb4f22522d77f305341fa1d27e9afff29e870042ba7c35ad6d511027bb02b1c2242b2d7f19fe302a9ad1e52339682996fb523ed672e9af3ff517cdbaf64dc2732bee7b5c3cd1c05cd8d7cb7481544bd43cdb9ee1b63007d2bba53af0af3d08129bf6a91452c6e5a2331f4cc481a10d8e8394e5ce778a8bf17ee6e874335a770306e5b3d201d5e45d063a8e480c831363e120d97ac20eb88c0921ce82a02bf4de1747e7409a8f72a08902ed7fd1800a085ce9b9232678789f310daeede6e3aeb494275a1105183075f38bdd1c771ffc09a77dbf7622b20a4a177df03343656e36673423be03fff6370fb713f3953736e641637c9dbe4743822690287c7ff598b7f9c16cb022a51aba104f03685353bcf549b372cb9614349e65cb27ce584f07df5187ec80886d0093cc26ad3ed7bb85254845992397f0db1ec8ef78ef099174da521563281f31e42cbc0161d57b938c72bfde369dd30d0be6f67fe81826fe339a37ff9d856d49e7775c47c85599f091770500c0fe105d2762fb03b25cc49cd90feafce7cbbb8d7229e30bf137c0eb39d8ebddd03b6d8fd538d509b25621df53895017e582a4ea777d03d6e6588104b9687e95f76fdd25351a169860c63364e0dd1f639a9a8bc3e83e25f44122a9e23f048de485908c1e28a00972219d801882e905dfe8d4cecec62233fd679841d6335effa5e39d53688dbac403509c503635039b4eae7c537df6ccd9bcff6502d700ee5a2979418501cd93dfe0a8225c23731b591c9bdbccfa086ba5991a34d0c14633128e7ff9fff83e54a5fc41fc9f067569f9e35ffdf33e6f9c7be571ac847d0f0e81f4caed1260ed6eed500aafef7a1177c1e2306405d6024ff6a84266b316e0c221383247f1a2e744d87c6f83684bc2c5a2327fdaec4077b234d026fbc4fe23c46229c35ab55abd6731a0b6e785835e55c7673a0d1d2decae00a07e33aa7db38054ff09abc2bcbd33223ec785958927455f27ba5a36b2c77839535cf27740f374720522021507c567250e78848d10f535ea41b68776606b2eda97ca2e20a38c7419df5aaad3775acf44028007c446b45a96d6e68e1cd61916cdb183322c6a4e91ed4461d4f4cc1d37da789ae658b18ba505a44a7e59c577b11fbcfd1f42483d2a890882be9dd7441fe9a5cc5daa4ef7bd67464c83e9f63f4e0bc9ffe723c5fcb6cd76810e3546b0862c9461e1a21d3508dfeeb4fd922d1afdbde0c85df3ac6f6b3b34add6784a64780b2e66aab5caf6324a1dc8cab4f236b37b75bb373eed710b0b3b6607dbc75f40a1adcf308d39c885e9c541e28c99777978a386327b12061e340df50d1a1904e32df8c8a521ee17fb8fe27466f5aa24197aea94618627002c461015caa75e25b27bebb0218f4040ee6159c0dd9f9731a8631646396fb6f9e113ba8d14175ba940288cedfc0d742cec9c0f620f955af45ea62a5b010c7daf32e09e46b3a351f03faf2e87b6a71d475df587eefda8ed0a333c1bab44d887b619899b44c68c82657133315a8d37c531330a61ed517d53f9781d513e1e33dd9df7535ad3afec77a0f3416c66501d68d988056be2e48c3c139a332bf964c8a2fb9f32492039ff6fc0fade5613148176b7c877c7107ac080b60a011553477bfbfe18c0ca07b8b2f356ecafbd624a4da4477afe6b3959463b53cb36235a43bd9c384a7aa4b264436a0864c9734365bc9c89d7f074620ad31c690b8b705f8bcc12a03933b23a7619ecfefc95da6e0cbd58eca26eb5eb020b2f105a92a2d7751fb314b30824b486384cfe63492a0dcbccce1cb1584dc79a41f3f9a9f0a6c09869b10471eb95bb24bc429e169d7dbff08a23c2fe5aaae87d766aca29930c20fef79a81b953278a04056e442f31b4902865ddcda05b4022bb36f7a14008fd6f7b20c4395b12551cb0c8c8233d8a9d590254e82834de39d8f086059e6eb4c49e82ba5bfac6dc7740d7b09973ee12de025216545801437cc789ff6720d0b7db75556cbe9130c10a75ae421490afbfdd62fd8663a9555f1d4df1aee23152a6af9496104a6b14e18f796ea006b1805f9814fc60f29508292f9244816"}, 0x1010}}, 0x800)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x9145, &(0x7f0000000180)=0x4)
setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), 0x4)

03:07:19 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080))
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x3f, 0x2)
shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000))

03:07:19 executing program 1:
socketpair(0x14, 0x0, 0x0, 0x0)

03:07:19 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:19 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d638a1c71e80327d31bfe751ae4"})

03:07:19 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x62, 0x1, 0x41c}}}, 0x7)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200000, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SELECT(r0, 0x40045408)

03:07:19 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x40200, 0x80000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x3})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000140)={{0x1, 0x4, 0x4, 0x2, 'syz0\x00', 0xff}, 0x0, [0x8, 0x100000000, 0x33, 0x1, 0x4, 0x9, 0x0, 0x0, 0x26, 0x1, 0x2, 0xffff, 0x4, 0xd370, 0x800, 0x6a99, 0x3, 0x2b, 0x185, 0x14000000000, 0x3, 0xef, 0x1, 0x1, 0x9, 0x7, 0x80000000, 0x8000, 0x8d2, 0x10001, 0x4b81ab02, 0xa1, 0x1, 0x10000, 0x3, 0x7, 0x1, 0x2, 0x1ff, 0xd0e, 0x80000000, 0x9a6d, 0xb475, 0x6, 0x0, 0x7e89726a, 0x1ff, 0x2, 0xdc3, 0x7ff, 0x7, 0x9, 0x8, 0x200, 0x8, 0x2, 0x2, 0xffff, 0x8, 0x81, 0x8, 0xfffffffffffeffff, 0x800, 0x5, 0x8001, 0x0, 0x1, 0x4, 0x100000000, 0x27, 0x1ff, 0x8, 0x9, 0x7ff, 0x5, 0x1, 0x6f7, 0x0, 0x80000000000000, 0xff, 0x9, 0x3, 0x0, 0x5, 0x401, 0x1, 0x10000, 0x0, 0x3, 0xfff, 0x811c, 0x6, 0x5ac, 0x7, 0x400, 0xffffffffffffff27, 0xfff, 0x400, 0x84e, 0x3ff, 0x6, 0x1ff, 0x0, 0x7, 0x10000000, 0x0, 0x4, 0x66, 0x0, 0x7fff, 0x20, 0x77, 0x7ff, 0x6, 0x9, 0x10000, 0x8c, 0x1, 0x8, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x4, 0x0, 0x2, 0x3, 0x2, 0x9, 0x3]})
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x90200)

03:07:19 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default]})

03:07:19 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:19 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
bind$phonet(r0, &(0x7f0000000080)={0x23, 0x4, 0x8, 0x6d}, 0x10)
openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1a3b80, 0x0)

03:07:19 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000011000d0001001101020009170e000300040007"], 0x16)

03:07:19 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d648a1c71e80327d31bfe751ae4"})

03:07:19 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x1})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0xfffffffffffffffa, 0x9, 0x100000000})

03:07:19 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d688a1c71e80327d31bfe751ae4"})

03:07:19 executing program 3:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="020000040000000100ae4159f2bc375b779544f32d93dee4e49b45e05ecb277275f38508b53195866dfa95fb19ca00654fa20714fc27eb431293"], 0x9)

[ 2194.055149][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2194.063489][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:20 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default]})

03:07:20 executing program 5:
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000100))

[ 2194.183213][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2194.192659][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:20 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:20 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d698a1c71e80327d31bfe751ae4"})

03:07:20 executing program 0:
socketpair(0xa, 0xc46665b60b238a2f, 0x0, &(0x7f0000000000))
socketpair(0x25, 0x4, 0x1000, &(0x7f0000000040))

03:07:20 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @default]})

03:07:20 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000640)={0x2, 0x28, &(0x7f0000000600)=""/40})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1f37de0d, 0xc100)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x0, 0x3, 0x5d, 0x401, 'syz0\x00', 0x1f}, 0x0, [0x10000, 0x7, 0x0, 0xffffffff, 0xa3b6, 0x7ff, 0x3, 0x7, 0x6, 0x2, 0x4, 0x3, 0x5, 0x5, 0x4, 0x1, 0x5, 0xfffffffffffffffe, 0x2c3b, 0xfffffffffffff800, 0xffff, 0xfffffffffffffffa, 0x8, 0x100000000, 0x5963155c, 0x57, 0x3, 0x7a6, 0x5, 0x0, 0x9, 0x100000000, 0x4, 0x1, 0x8, 0x80, 0x43, 0x168, 0x4, 0xd76, 0x31, 0x4, 0x9, 0x1, 0x100000000, 0x5, 0x5, 0x3ff, 0x1aae, 0xffff, 0x4, 0xffffffffffffffdd, 0xff, 0x5, 0x95c0, 0xbfd2, 0x101, 0x101, 0xc5, 0x2, 0x4, 0x200, 0x1, 0x6, 0x800, 0x8, 0x448, 0xe9a, 0x3, 0x89, 0xa5, 0x6, 0x6, 0x0, 0x8001, 0x14bc, 0x95e, 0x101, 0x3, 0x7, 0x5, 0x3, 0x1, 0xcac, 0x4, 0x9, 0x1, 0x9, 0xf80, 0x7ff, 0x10000, 0x8, 0x50a, 0x2, 0x0, 0x89ed, 0x200, 0x7180, 0x200, 0x9, 0xfffffffffffffffa, 0xd2, 0xbdb3, 0x5, 0x2, 0x5, 0x9, 0x3, 0x6d, 0x0, 0x3, 0x101, 0x2, 0xfffffffffffff801, 0x1ff, 0x80000000, 0x8001, 0x400, 0x3, 0x3ff, 0x4, 0x1ff, 0x74680, 0x8, 0x4, 0x0, 0x0, 0x2]})
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x6, 0x8}, {0xffbd, 0x4, 0x9d53, 0x4}}}}, 0x15)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000680)={{0x1, 0x1, 0x2, 0x2, 0x1}})

03:07:20 executing program 4:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:20 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x60002)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, '\x00', 0x8})

03:07:20 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d6c8a1c71e80327d31bfe751ae4"})

03:07:20 executing program 4:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

[ 2194.488552][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:20 executing program 0:
socketpair(0xa, 0x3, 0xffffffff, &(0x7f0000000000))

[ 2194.531589][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:20 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)

03:07:20 executing program 3:
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040207fd030900a3a877540225ca674feaaa9fb1580caf000003"], 0xa)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x28400, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x4})

03:07:20 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d6f8a1c71e80327d31bfe751ae4"})

03:07:20 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x4, 0x4, [0x8000]})

03:07:20 executing program 0:
ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x8001, &(0x7f0000000140)=0x2)
socketpair(0x28, 0x2, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x2, &(0x7f0000000100)=0x4)
socketpair(0xb, 0x2, 0x52b, &(0x7f00000000c0))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000001c0)="dfca221f0b0ce9550139c8589ed21c915fcf1f6ce78e0f1b055744d559541347c29cd3dbec140a20e7da9aefb3808b66873b141ea4704db599c12a8a912fcbfcd95f81bdf97f96a0a429aaa753cb3145a7a0d6c20393dbb183f9a06787ead0dd7d1471e70448d656f50d605ae698ff2312b754fcb5ec6850bac956b9f14861d53f2c4acdce55acd6f83649f32f1f965f24e39d10e41840fbd7822955d2bcd68ad4d564dab27ed5515f932cdf6e8ff1592977962e0287225f0c50378a09b9fda00bc78d4434124b974ba2291a7ad8d2a741f06397e0e815f83a284ea4a927e935dd89ee54", 0xe4, 0x800, 0x0, 0x0)
ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402)

03:07:20 executing program 4:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:20 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:20 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:20 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140), 0x2)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x0, 0x70bd29, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(0xffffffffffffffff, 0x80045113, &(0x7f0000000100))
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:20 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d708a1c71e80327d31bfe751ae4"})

03:07:20 executing program 0:
socketpair(0x25, 0x3, 0x800, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x7}, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
bind$phonet(r1, &(0x7f0000000080)={0x23, 0x1, 0x96, 0x2}, 0x10)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000000c0))

03:07:20 executing program 4:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:20 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d748a1c71e80327d31bfe751ae4"})

03:07:20 executing program 3:
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x1, @sdr={0x4745504a, 0x7}})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2194.975050][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
[ 2195.009373][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:20 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d758a1c71e80327d31bfe751ae4"})

03:07:20 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000600)={0x3, 0x3, 0x1})

03:07:21 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

[ 2195.122243][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 0
03:07:21 executing program 5:
ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1faa})

03:07:21 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:21 executing program 4:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:21 executing program 0:
socketpair(0xa, 0x3, 0x4, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0xf06, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x1)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4c844}, 0x40000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x401, 0x39, 0x2, {0x3, @pix_mp={0x3, 0x10001, 0x32314d59, 0x7, 0x5, [{0xe3, 0x6}, {0x0, 0x6}, {0x80000000, 0x7}, {0x7, 0x1}, {0x8, 0xb92d}, {0x5, 0x8000}, {0x3, 0x8}, {0x2}], 0xd9, 0x5, 0x2, 0x1, 0x2}}, 0x389db592})
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000280)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000002c0)={r3, 0x80000})
openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x22002, 0x0)

03:07:21 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d788a1c71e80327d31bfe751ae4"})

03:07:21 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)

03:07:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x7fffffff})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x5, 0x1, 0x3, 0x0, '\x00', 0x3})

03:07:21 executing program 4:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:21 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:21 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d7a8a1c71e80327d31bfe751ae4"})

03:07:21 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x1, 0x2)
ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000000))
recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/216, 0xd8, 0x40010043, &(0x7f0000000140)={0x23, 0x4, 0x0, 0x81}, 0x10)

03:07:21 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1fc, 0x105100)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000000)=0x5)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:21 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:21 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:21 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80227d31bfe751ae4"})

03:07:21 executing program 0:
bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)

03:07:21 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{0x6, 0x4, 0x797b0e47, 0x1, '\x00', 0x8001}, 0x0, [0xa5ba, 0x9, 0x8001, 0xa68, 0x100, 0x0, 0x2, 0x8, 0x3, 0x6, 0x1ff, 0x10001, 0xcbd2, 0x7ff, 0xd4, 0x666, 0xc6f, 0x5, 0xffffffff, 0x2, 0xfffffffffffffffe, 0x3, 0x4a382bdb, 0x0, 0x2, 0x9, 0xdb, 0x3, 0xfff, 0x5, 0x0, 0x9, 0x400, 0x7f, 0x52f5, 0x3, 0x2a38ba51, 0x5, 0xd64, 0x7fff, 0x2, 0x98, 0x1, 0x20e2, 0x4, 0x1, 0x3, 0xffffffff, 0x3, 0x3, 0x3, 0x0, 0x0, 0x5, 0x48d8b0d4, 0x100000001, 0x404d, 0x5, 0x20, 0x2, 0x10001, 0x6, 0x8001, 0xffffffff, 0x4, 0xff, 0x3, 0xbed, 0x2, 0x59, 0x2, 0x1, 0x8, 0x1, 0x8, 0x0, 0x10000, 0x9, 0x2, 0x1, 0x9, 0xf947, 0x200, 0x51c, 0x0, 0x473d, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x100000000, 0x31b, 0x8, 0x2, 0x5, 0x8f46, 0xffffffff, 0x0, 0xfffffffffffffffd, 0x1, 0x30000000, 0xaf, 0xc820, 0x24, 0x0, 0x5, 0x1, 0x6, 0x80, 0x6, 0x8, 0xb658, 0x9, 0x7cc, 0x6, 0x7, 0x80, 0x2, 0x8, 0x4, 0x2, 0x3e5, 0x3, 0x5, 0x1, 0x9, 0x7fff, 0x4]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x100000001, 0x6bac03)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0xadd8, 0x0, 0x4, 0x10, 0x1b5a, {r1, r2/1000+10000}, {0x1, 0x8, 0x2, 0x2, 0x72, 0x3e, "f7e14cc2"}, 0xffffffff, 0x2, @userptr=0x7f, 0x4})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:21 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:21 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))

03:07:21 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e81827d31bfe751ae4"})

03:07:21 executing program 0:
socketpair(0x28, 0x4, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @rose}, [@remote, @default, @default, @bcast, @remote, @rose, @null, @bcast]}, &(0x7f0000000240)=0x48, 0x80000)
ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000080))
sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x400, 0x70bd26, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x802)

03:07:21 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:21 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)

03:07:21 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:21 executing program 3:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040))

03:07:21 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:21 executing program 1:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:21 executing program 0:
socketpair(0x10, 0x6, 0x8, &(0x7f0000000000))

03:07:22 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0x40080)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:22 executing program 1:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:22 executing program 3:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040))

03:07:22 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x2})

03:07:22 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:22 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4002, 0x0)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x7)
socketpair(0xa, 0x0, 0xfffffffc, &(0x7f0000000040))
syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000140)={0x1, 0x3, 0x9, 0x80000000, 0x8})

03:07:22 executing program 5:
mmap$qrtrtun(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000c, 0x10010, 0xffffffffffffffff, 0xfffffffffffffffa)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
socketpair(0x25, 0x3, 0x9, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000180)="35a9f4d2bee6fdb3869867823d8d49595c3e73127c2fd11bcb37c35ad5b2992025ae5b1ea1ae9bfc9c28", 0x2a)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140)=0x3, 0x4)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0='bpq0\x00', 0xeb, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

03:07:22 executing program 1:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:22 executing program 3:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040))

03:07:22 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x3})

03:07:22 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:22 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000040)=""/54)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

03:07:22 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000))
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100))

03:07:22 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x4})

03:07:22 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:22 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0xfffe00)

03:07:22 executing program 3:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040))

03:07:22 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:22 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x5})

03:07:22 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:22 executing program 3:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040))

03:07:22 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x9)

03:07:22 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={[], 0x10}}, 0x8)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x200008, 0x3})

03:07:22 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x6})

03:07:22 executing program 1:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:22 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:22 executing program 3:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040))

03:07:23 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:23 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:23 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:07:23 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x7})

03:07:23 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:23 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)

03:07:23 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0xc0481)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000040)=0x7fffffff)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080))

03:07:23 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x8})

03:07:23 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:23 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:23 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000000c0)=0x7, &(0x7f0000000100)=0x41)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000040)=0x9, 0x4)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000080), 0x2)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4)

03:07:23 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)

03:07:23 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)

03:07:23 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x9})

03:07:23 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:23 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:23 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1d1000, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0)
r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x40, @none, 0x4e97, 0x1}, 0xe)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r4)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0xfffffffe}})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000140)={0x5, 0x0, 0x1})

03:07:24 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xa})

03:07:24 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:24 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))

03:07:24 executing program 4:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:24 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:24 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:24 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xb})

03:07:24 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4000000000004, 0x22002)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

03:07:24 executing program 4:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:24 executing program 1:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)=0x2)

03:07:24 executing program 0:
socketpair(0x15, 0x3, 0x2, &(0x7f0000000000))

03:07:24 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:24 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xc})

03:07:24 executing program 5:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x202a6cd37e31e4e9)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000140)={0xfffffffc, 0x20, [0x4, 0x6, 0xfffffffc, 0x3, 0x7, 0x401, 0xff, 0x1000]})
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x4, 0xffffff01, 0x20, 0x0, 0xc})

03:07:24 executing program 4:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:24 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0)

03:07:24 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:24 executing program 0:
socketpair(0x28, 0x803, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x4, 0x0, 0x1, 0x1}, 0x11, 0x3, 0x0, 0x0, "55b2571d8ec6e921e6ca0e5d50dd37fa055da6af90cee1dec16e908da79b67704df2d9f9fb3670c9912bb229f3ca2287daf934cbb6561224739d283fb471eed7"}, 0x48}, 0x1, 0x0, 0x0, 0x20000098}, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x4)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x4)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x82000, 0x0)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x80}, 0x2)

03:07:24 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xd})

03:07:24 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))

03:07:24 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:24 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0)

03:07:24 executing program 3:
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:24 executing program 0:
ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040))
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x200000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000140), 0x2)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1})
socketpair(0xf, 0x2, 0x0, &(0x7f0000000000))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qrtr-tun\x00', 0x10000)

03:07:24 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))

03:07:24 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xe})

03:07:24 executing program 3:
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:24 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0)

03:07:24 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:24 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))

03:07:25 executing program 0:
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5111)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:25 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x10})

03:07:25 executing program 3:
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:25 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000))

03:07:25 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:07:25 executing program 4:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:25 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x11})

03:07:25 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000))

03:07:25 executing program 3:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:25 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), 0x2)

03:07:25 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:07:25 executing program 4:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:25 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000))

03:07:25 executing program 3:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:25 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x12})

03:07:25 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000000))

03:07:25 executing program 0:
socketpair(0xa, 0x3, 0xd2, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="790000006404000225bd7000fedbdf259e4e9c44e2e53a568a4a0b29252fb7552e1e94057aab5acae80ad82172d254e3c093f2768a663c00276a2f1db84b518e3f3156852586a4f6e721d6de51a2f84699a2009dc92b000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x800)

03:07:25 executing program 4:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:25 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x11})

03:07:25 executing program 3:
socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:25 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x18})

03:07:25 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
ioctl$SNDCTL_TMR_METRONOME(0xffffffffffffffff, 0x40045407)

03:07:25 executing program 1:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))

03:07:25 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

03:07:25 executing program 4:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x25})

03:07:26 executing program 3:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:26 executing program 4:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:26 executing program 1:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)

03:07:26 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

03:07:26 executing program 3:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x5c})

03:07:26 executing program 0:
getitimer(0x1, &(0x7f0000000040))
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:26 executing program 4:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:26 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

03:07:26 executing program 1:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10002, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40000, 0x0)
ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000001c0))
sendto$phonet(r0, &(0x7f0000000040)="ab11d988833f3749b1540ee3eaa6c328b7d7abfd4aaeb48d2b10bcb59c050d66356701adff2a6a26222590c234c9e07dc873f1e74fbc91d97ac39683fe324ca93b7ea3124c3dc97bbc71edb0dd0f99fcaca81d49ba7b375c15d5833c70609a91ce501ae7c78b921a6feebc1076e556936e982c9aa340b19da97afb07a5e03457ec2d0fd37bd950c4f0d3c7396c81b18cad2f8ea2e669136b864c2cee2c0bb6b3825747950f4fce4616bd4418470651fdf06227dee5e7faceb3ae71", 0xbb, 0x4008000, &(0x7f0000000100)={0x23, 0x9, 0x3, 0x5}, 0x10)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:26 executing program 3:
socketpair(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000000))

03:07:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x300})

03:07:26 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)

03:07:26 executing program 4:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:26 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:26 executing program 1:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, &(0x7f0000000000)=0x48)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
getpeername$netrom(r1, &(0x7f0000000100)={{0x3, @bcast}, [@null, @remote, @netrom, @netrom, @rose, @remote, @null, @netrom]}, &(0x7f0000000180)=0x48)

03:07:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x500})

03:07:26 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)

03:07:26 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000040))

03:07:26 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:26 executing program 1:
socketpair(0x18, 0x3, 0x1, &(0x7f0000000000))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

03:07:26 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x600})

03:07:26 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)

03:07:26 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:26 executing program 3:
socketpair(0x1e, 0x2, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:26 executing program 1:
socketpair(0x18, 0x3, 0x1, &(0x7f0000000000))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

03:07:26 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
socketpair(0x28, 0x2, 0x2259, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={[], 0x11}}, 0x8)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x92400, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x8, 0x9, 0x4, 0x0, 0x2, {0x77359400}, {0x2, 0x2, 0x4, 0x4, 0x20, 0x0, "1547fba5"}, 0x2d, 0x2, @fd=r2, 0x6})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000240)={0x0, 0x6, 0x1, 0x0, 0x8})
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=0x18)

03:07:26 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x700})

03:07:27 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:27 executing program 5:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
socketpair(0x28, 0x3, 0xfffffffc, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$phonet(r0, &(0x7f0000000340)=""/55, 0x37, 0x20, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000200)={0x3ff, 0x7, 0x4, 0x2, 0x6, {r2, r3/1000+10000}, {0x3, 0x71df98b2097362c2, 0x7, 0x81, 0x5, 0x9, "f45a8d37"}, 0xfff, 0x4, @planes=&(0x7f00000001c0)={0x2, 0x6, @fd, 0x5a39abac}, 0x4d, 0x0, <r4=>r1})
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x3ff, 0x0, 0x4, 0x70000, 0x1, {0x77359400}, {0x3, 0x8, 0x40, 0x1, 0x4, 0x5, "ff8e151c"}, 0x380, 0x2, @planes=&(0x7f0000000080)={0x7, 0x9, @userptr=0x596b, 0xb36}, 0x80000001, 0x0, r4})
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000380))
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x1)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000440))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000, 'syz1\x00', 0x4})
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000640)={0x3, &(0x7f0000000480)=[{@fixed}, {@fixed}, {@fixed}]})

03:07:27 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:27 executing program 1:
socketpair(0x18, 0x3, 0x1, &(0x7f0000000000))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

03:07:27 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x900})

03:07:27 executing program 4:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

03:07:27 executing program 5:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @rose, @netrom, @remote, @default, @bcast, @rose, @default]}, 0x0)

03:07:27 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:27 executing program 1:
socketpair(0x18, 0x3, 0x1, &(0x7f0000000000))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

03:07:27 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x9)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x2)

03:07:27 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x438, 0x3f4, 0x4, 0x70bd26, 0x25dfdbfb, {0x2, 0x2, 0x28, [0x1000, 0xbb94, 0x5, 0x3, 0x22d09f07, 0x1, 0xd3cd, 0x1, 0xffffffff, 0x6, 0x5, 0x1c5, 0x3ff, 0xffff8000, 0xfff, 0x7f, 0x1, 0x6, 0x3, 0x3, 0x0, 0x2, 0x6, 0x4, 0x0, 0x3ff, 0x3, 0x100, 0x400, 0x5, 0x800, 0x200, 0x1f, 0x6c4b, 0x2, 0x8, 0x7, 0x4b0, 0x3, 0x8, 0x1000, 0xd71, 0x8, 0x10000, 0x400, 0x2, 0x80000001, 0x5, 0x8, 0x80000001, 0x1, 0x7f, 0x6d4, 0x4, 0x5, 0x4, 0x8, 0x101, 0x0, 0x76, 0x6, 0x9, 0x12c, 0x6], [0x40, 0x5, 0x80000000, 0x7d, 0x91b, 0x2, 0x10001, 0x800, 0x1000, 0x2, 0xffff, 0x0, 0x2, 0x84a, 0xffffd6b9, 0x1a31, 0x80, 0x6, 0x3, 0x0, 0x43, 0x6, 0xffff, 0x3ff, 0x4, 0x4, 0x9870000, 0xb87, 0x7, 0x3553, 0x7, 0x7, 0x7fff, 0x6, 0x7fffffff, 0x8000, 0x401, 0x0, 0x4, 0x100, 0xfffffffa, 0x2, 0x400, 0x100, 0x1ff, 0x2, 0x0, 0x8, 0xffffff21, 0x5, 0xf17, 0x5, 0x200, 0x8, 0x78a, 0x8000, 0x100, 0x1b69, 0x7, 0x3, 0x1f, 0x1, 0x2, 0x5], [0x1, 0x3, 0x21, 0x7, 0x0, 0x2, 0x7fff, 0xff, 0x5, 0x5, 0x8, 0x6, 0x6, 0x933, 0x3, 0x6, 0x3, 0x9, 0x9, 0x100, 0x52b8, 0x1, 0x80000001, 0x6, 0x80000000, 0x5, 0x1, 0x2, 0x0, 0x2, 0x200, 0x4, 0x8, 0x1ff, 0x1, 0x6, 0x80000001, 0xffffffff, 0x0, 0x8, 0x80000000, 0x4, 0x5, 0x40, 0x3ff, 0x1, 0x3ff, 0x5153, 0x40, 0x99d8442, 0x7ff, 0x80000000, 0x2e2, 0x3abf, 0x1f, 0x8, 0x20, 0xbf5, 0x8, 0x800, 0x8, 0x2, 0x3, 0x9], [0x1d2, 0xe52, 0x6000000, 0x6, 0x6, 0x7d52, 0xfbaf, 0x0, 0x4, 0x1ff, 0x7fff, 0xbe, 0x6, 0x9, 0x5, 0x7, 0x4, 0x8001, 0x5, 0x9, 0x7fff, 0x78, 0x6, 0x9, 0x2, 0x8f, 0xffffffff, 0x200, 0x1, 0x0, 0x6, 0x3, 0x6a, 0x7ff, 0x7fff, 0xfffffff8, 0x9, 0x1, 0x10001, 0x4, 0x37f3, 0x1000, 0xa4e, 0x2, 0x2, 0xffff, 0x5, 0x1f, 0x7fff, 0x0, 0x4, 0x2, 0xfffffff7, 0x3, 0x7e, 0x40, 0x10001, 0x1000, 0x8001, 0x9c2, 0x401, 0x7ff, 0x7, 0xa948], 0x16, ['#\xc9\x00', '#-\x00', '\xbdv)[\x00', '\\--&\'%\'(\'\x00', '\x00']}, ["", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x1}, 0x4)

03:07:27 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xa00})

03:07:27 executing program 4:
socketpair(0x2c, 0x80007, 0xffff7ffd, &(0x7f0000000000))
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_sctp(0xa, 0x1, 0x84)

03:07:27 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040))
getpeername$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000))

03:07:27 executing program 1:
socketpair(0x18, 0x3, 0x1, &(0x7f0000000000))

03:07:27 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x438, 0x3f4, 0x4, 0x70bd26, 0x25dfdbfb, {0x2, 0x2, 0x28, [0x1000, 0xbb94, 0x5, 0x3, 0x22d09f07, 0x1, 0xd3cd, 0x1, 0xffffffff, 0x6, 0x5, 0x1c5, 0x3ff, 0xffff8000, 0xfff, 0x7f, 0x1, 0x6, 0x3, 0x3, 0x0, 0x2, 0x6, 0x4, 0x0, 0x3ff, 0x3, 0x100, 0x400, 0x5, 0x800, 0x200, 0x1f, 0x6c4b, 0x2, 0x8, 0x7, 0x4b0, 0x3, 0x8, 0x1000, 0xd71, 0x8, 0x10000, 0x400, 0x2, 0x80000001, 0x5, 0x8, 0x80000001, 0x1, 0x7f, 0x6d4, 0x4, 0x5, 0x4, 0x8, 0x101, 0x0, 0x76, 0x6, 0x9, 0x12c, 0x6], [0x40, 0x5, 0x80000000, 0x7d, 0x91b, 0x2, 0x10001, 0x800, 0x1000, 0x2, 0xffff, 0x0, 0x2, 0x84a, 0xffffd6b9, 0x1a31, 0x80, 0x6, 0x3, 0x0, 0x43, 0x6, 0xffff, 0x3ff, 0x4, 0x4, 0x9870000, 0xb87, 0x7, 0x3553, 0x7, 0x7, 0x7fff, 0x6, 0x7fffffff, 0x8000, 0x401, 0x0, 0x4, 0x100, 0xfffffffa, 0x2, 0x400, 0x100, 0x1ff, 0x2, 0x0, 0x8, 0xffffff21, 0x5, 0xf17, 0x5, 0x200, 0x8, 0x78a, 0x8000, 0x100, 0x1b69, 0x7, 0x3, 0x1f, 0x1, 0x2, 0x5], [0x1, 0x3, 0x21, 0x7, 0x0, 0x2, 0x7fff, 0xff, 0x5, 0x5, 0x8, 0x6, 0x6, 0x933, 0x3, 0x6, 0x3, 0x9, 0x9, 0x100, 0x52b8, 0x1, 0x80000001, 0x6, 0x80000000, 0x5, 0x1, 0x2, 0x0, 0x2, 0x200, 0x4, 0x8, 0x1ff, 0x1, 0x6, 0x80000001, 0xffffffff, 0x0, 0x8, 0x80000000, 0x4, 0x5, 0x40, 0x3ff, 0x1, 0x3ff, 0x5153, 0x40, 0x99d8442, 0x7ff, 0x80000000, 0x2e2, 0x3abf, 0x1f, 0x8, 0x20, 0xbf5, 0x8, 0x800, 0x8, 0x2, 0x3, 0x9], [0x1d2, 0xe52, 0x6000000, 0x6, 0x6, 0x7d52, 0xfbaf, 0x0, 0x4, 0x1ff, 0x7fff, 0xbe, 0x6, 0x9, 0x5, 0x7, 0x4, 0x8001, 0x5, 0x9, 0x7fff, 0x78, 0x6, 0x9, 0x2, 0x8f, 0xffffffff, 0x200, 0x1, 0x0, 0x6, 0x3, 0x6a, 0x7ff, 0x7fff, 0xfffffff8, 0x9, 0x1, 0x10001, 0x4, 0x37f3, 0x1000, 0xa4e, 0x2, 0x2, 0xffff, 0x5, 0x1f, 0x7fff, 0x0, 0x4, 0x2, 0xfffffff7, 0x3, 0x7e, 0x40, 0x10001, 0x1000, 0x8001, 0x9c2, 0x401, 0x7ff, 0x7, 0xa948], 0x16, ['#\xc9\x00', '#-\x00', '\xbdv)[\x00', '\\--&\'%\'(\'\x00', '\x00']}, ["", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x1}, 0x4)

03:07:27 executing program 4:
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000640402002dbd7000fedbdf2546531a32dffdd63b5f858f5add15b10d6bf4aa1ba706fd73ba3d7337c76dffef51d6bacb81454ca8483d03108368c99555c6dfaf7693b85e3e1c1b120a358b8c3ec4779bfcdcafacc3e4c3754500"], 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x4840)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000080)={"e335b2e76afd8a1fb59d4f989f3a3b79e23aebe85764fe000403d305f330", 0x6, 0x0, 0x401, 0x5, 0x4, 0x9, 0x7fff, 0xd, [0x6, 0x8, 0x8, 0x3, 0x80, 0x6, 0x2, 0x100, 0x9, 0x9, 0x9, 0x400, 0xc6a1, 0x6, 0x1, 0xfffffff9, 0x7fffffff, 0x1f, 0x1]})
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x6, 0x2, 0x2})

03:07:27 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xb00})

03:07:27 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

03:07:27 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x1)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bind$can_raw(r1, &(0x7f0000000040), 0x10)

03:07:27 executing program 1:
socketpair(0x0, 0x3, 0x1, &(0x7f0000000000))

03:07:27 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

03:07:27 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000000c0)={0x438, 0x3f4, 0x4, 0x70bd26, 0x25dfdbfb, {0x2, 0x2, 0x28, [0x1000, 0xbb94, 0x5, 0x3, 0x22d09f07, 0x1, 0xd3cd, 0x1, 0xffffffff, 0x6, 0x5, 0x1c5, 0x3ff, 0xffff8000, 0xfff, 0x7f, 0x1, 0x6, 0x3, 0x3, 0x0, 0x2, 0x6, 0x4, 0x0, 0x3ff, 0x3, 0x100, 0x400, 0x5, 0x800, 0x200, 0x1f, 0x6c4b, 0x2, 0x8, 0x7, 0x4b0, 0x3, 0x8, 0x1000, 0xd71, 0x8, 0x10000, 0x400, 0x2, 0x80000001, 0x5, 0x8, 0x80000001, 0x1, 0x7f, 0x6d4, 0x4, 0x5, 0x4, 0x8, 0x101, 0x0, 0x76, 0x6, 0x9, 0x12c, 0x6], [0x40, 0x5, 0x80000000, 0x7d, 0x91b, 0x2, 0x10001, 0x800, 0x1000, 0x2, 0xffff, 0x0, 0x2, 0x84a, 0xffffd6b9, 0x1a31, 0x80, 0x6, 0x3, 0x0, 0x43, 0x6, 0xffff, 0x3ff, 0x4, 0x4, 0x9870000, 0xb87, 0x7, 0x3553, 0x7, 0x7, 0x7fff, 0x6, 0x7fffffff, 0x8000, 0x401, 0x0, 0x4, 0x100, 0xfffffffa, 0x2, 0x400, 0x100, 0x1ff, 0x2, 0x0, 0x8, 0xffffff21, 0x5, 0xf17, 0x5, 0x200, 0x8, 0x78a, 0x8000, 0x100, 0x1b69, 0x7, 0x3, 0x1f, 0x1, 0x2, 0x5], [0x1, 0x3, 0x21, 0x7, 0x0, 0x2, 0x7fff, 0xff, 0x5, 0x5, 0x8, 0x6, 0x6, 0x933, 0x3, 0x6, 0x3, 0x9, 0x9, 0x100, 0x52b8, 0x1, 0x80000001, 0x6, 0x80000000, 0x5, 0x1, 0x2, 0x0, 0x2, 0x200, 0x4, 0x8, 0x1ff, 0x1, 0x6, 0x80000001, 0xffffffff, 0x0, 0x8, 0x80000000, 0x4, 0x5, 0x40, 0x3ff, 0x1, 0x3ff, 0x5153, 0x40, 0x99d8442, 0x7ff, 0x80000000, 0x2e2, 0x3abf, 0x1f, 0x8, 0x20, 0xbf5, 0x8, 0x800, 0x8, 0x2, 0x3, 0x9], [0x1d2, 0xe52, 0x6000000, 0x6, 0x6, 0x7d52, 0xfbaf, 0x0, 0x4, 0x1ff, 0x7fff, 0xbe, 0x6, 0x9, 0x5, 0x7, 0x4, 0x8001, 0x5, 0x9, 0x7fff, 0x78, 0x6, 0x9, 0x2, 0x8f, 0xffffffff, 0x200, 0x1, 0x0, 0x6, 0x3, 0x6a, 0x7ff, 0x7fff, 0xfffffff8, 0x9, 0x1, 0x10001, 0x4, 0x37f3, 0x1000, 0xa4e, 0x2, 0x2, 0xffff, 0x5, 0x1f, 0x7fff, 0x0, 0x4, 0x2, 0xfffffff7, 0x3, 0x7e, 0x40, 0x10001, 0x1000, 0x8001, 0x9c2, 0x401, 0x7ff, 0x7, 0xa948], 0x16, ['#\xc9\x00', '#-\x00', '\xbdv)[\x00', '\\--&\'%\'(\'\x00', '\x00']}, ["", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x1}, 0x4)

03:07:27 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:27 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xc00})

03:07:27 executing program 1:
socketpair(0x0, 0x3, 0x1, &(0x7f0000000000))

03:07:27 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

03:07:27 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)

03:07:28 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

03:07:28 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xd00})

03:07:28 executing program 0:
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x1, 0x22, 0x2, {0x1, @pix_mp={0x3ff, 0x5, 0x30314442, 0x0, 0xa, [{0x5, 0xfffffffa}, {0x40, 0x1}, {0x1000, 0x8}, {0x3, 0x69}, {0xd28, 0x3}, {0xb2e, 0x99}, {0x8001, 0x5}, {0x1f, 0x6f31}], 0x7, 0x6, 0x4, 0x2, 0x2}}, 0xf3a})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000001c0)={0x14, 0xd95f})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000180)={0x3, 0x5, 0x2e4, 0x1000, r2})
socketpair(0x29, 0x3, 0x4, &(0x7f0000000040))
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000200)={0x1, 0xcd14, 0x5, 0x4800, r0})

03:07:28 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:28 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040000000000200300"], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x280, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000140)=0xc0ac)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200), 0x2)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4}, {0x3, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x101, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)

03:07:28 executing program 1:
socketpair(0x0, 0x3, 0x1, &(0x7f0000000000))

03:07:28 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x6, 0x20, [0xa2, 0x7fffffff, 0x401, 0x1f, 0x0, 0x9, 0x7f, 0x0]})

[ 2202.344136][ T8469] Bluetooth: hci3: Received unexpected HCI Event 00000000
03:07:28 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xe00})

03:07:28 executing program 3:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040000000000200300"], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x280, 0x0)
ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000140)=0xc0ac)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000200), 0x2)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4}, {0x3, 0x0, 0x1, 0x1}}], 0x10)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x101, 0x2)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4)

03:07:28 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))
socketpair(0x1e, 0x1, 0xfff, &(0x7f0000000040))

03:07:28 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x1100})

03:07:28 executing program 1:
socketpair(0x18, 0x0, 0x1, &(0x7f0000000000))

03:07:28 executing program 0:
socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
socketpair(0x6, 0x800, 0x100, &(0x7f0000000040))
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

03:07:28 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000100))

[ 2202.586684][ T8469] Bluetooth: hci3: Received unexpected HCI Event 00000000
03:07:28 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SELECT(r1, 0x40045408)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x8, 0x1f}, 0x2)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="02733e2b059424765fbcbd8a848a606d89425c0c0e7d56b159a060cf1e8443d44e08ff11c4ee97b107399e0faba67af0439e55c6558365334f305e0db90c027ae031d7d2b64158d4be5b97b7f294c39b663a850cd9a6c8f21a2afdc3fd0aa6abd110f262f5cf16c7b4bee8d3842f16b0fa7249ec41e3a3b636e7b4cafd80c4bd82989f23529f9b4dea8d92c5ecb6442401f0a02ef856a54b361a1cce13ebe36d53593906b2f2a10aeda4d986710e035e221ede29cb760510b1073101a353224ac167e3a8d9f0ce06d92e3ee3d04baea9dcb6bc81707deba594046809e8"], 0x9)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x309282, 0x0)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000280), 0x2)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c800277fdefb03fdd547326311ac53268c2a40a3ae884645eafdef8360c2a5d82833ff55a40adb79b3725c0741157b9261e259152421586d082f24fe2fb3cc68e7fb95b974e8ba050715eb2d30a3bbbb5d020d410769262ea3dfdd4d2f62cc94847c256bdf5c0b59b1c2471edcb92ea2b339cda8f2ecd400ee5aec9564f4344324f89a5dec67fd95b7a6e7ee91902c58a4cfc566616850a768b1e7"], 0x2b)

03:07:28 executing program 1:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000000))

03:07:28 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
socketpair(0xa, 0x3, 0xfffffffd, &(0x7f0000000000))

03:07:28 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x321242, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

[ 2202.747696][ T8469] Bluetooth: hci3: ACL packet for unknown connection handle 3699
03:07:28 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xe, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:28 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x1200})

03:07:28 executing program 0:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x80000005, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)

03:07:28 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:28 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:28 executing program 1:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000000))

03:07:28 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x8, 0x4)

03:07:28 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x1800})

03:07:28 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x80000005, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)

03:07:29 executing program 4:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:29 executing program 1:
socketpair(0x18, 0x0, 0x0, &(0x7f0000000000))

03:07:29 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x80000005, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)

03:07:29 executing program 5:
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:29 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x2500})

03:07:29 executing program 4:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:29 executing program 1:
socketpair(0x18, 0x0, 0x1, 0x0)

03:07:29 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x7)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:29 executing program 5:
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:29 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x5c00})

03:07:29 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x80000005, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))
openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)

03:07:29 executing program 1:
socketpair(0x18, 0x0, 0x1, 0x0)

03:07:29 executing program 4:
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:29 executing program 5:
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:29 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xff00})

03:07:29 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x80000005, 0x4)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))

03:07:29 executing program 1:
socketpair(0x18, 0x0, 0x1, 0x0)

03:07:29 executing program 0:
socketpair(0x5, 0x5, 0x0, &(0x7f0000000000))
socketpair(0x5, 0x4, 0x4, &(0x7f0000000040))
socketpair(0x2a, 0x1, 0x8, &(0x7f0000000080))

03:07:29 executing program 4:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:29 executing program 5:
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:29 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x1000000})

03:07:29 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000300)=0x80000005, 0x4)

03:07:29 executing program 1:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
clock_gettime(0x2, &(0x7f00000000c0))
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00')
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1)

03:07:29 executing program 4:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:29 executing program 5:
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:29 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000))
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{@fixed}, {@fixed}, {}]})

03:07:29 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x2000000})

03:07:29 executing program 0:
socketpair(0x26, 0x6, 0x0, &(0x7f0000000000))

03:07:29 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:29 executing program 4:
r0 = syz_open_dev$sndctrl(0x0, 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:29 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000))
socketpair(0x28, 0x800, 0x401, &(0x7f0000000080))

03:07:30 executing program 5:
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:30 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x3000000})

03:07:30 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:30 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x1ff, &(0x7f0000000080)=0x2)

03:07:30 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:30 executing program 3:
socketpair(0x11, 0x3, 0x7f, &(0x7f0000000000))

03:07:30 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x4080)

03:07:30 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:30 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x4000000})

03:07:30 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:30 executing program 3:
socketpair(0x0, 0x3, 0x7f, &(0x7f0000000000))

03:07:30 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x4080)

03:07:30 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x5000000})

03:07:30 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:30 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x3f, 0x4)

03:07:30 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x4080)

03:07:30 executing program 3:
socketpair(0x0, 0x3, 0x7f, &(0x7f0000000000))

03:07:30 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:30 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x6000000})

03:07:30 executing program 4:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:30 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:30 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:30 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x7000000})

03:07:30 executing program 3:
socketpair(0x0, 0x3, 0x7f, &(0x7f0000000000))

03:07:30 executing program 4:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:30 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040))

03:07:30 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:30 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:30 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x8000000})

03:07:31 executing program 3:
socketpair(0x11, 0x0, 0x7f, &(0x7f0000000000))

03:07:31 executing program 4:
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000140)={0x1, 0xffffffe0})

03:07:31 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:31 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:31 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x9000000})

03:07:31 executing program 3:
socketpair(0x11, 0x0, 0x7f, &(0x7f0000000000))

03:07:31 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x6, 0x4)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))

03:07:31 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0)

03:07:31 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:31 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:31 executing program 3:
socketpair(0x11, 0x0, 0x7f, &(0x7f0000000000))

03:07:31 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xa000000})

03:07:31 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0)

03:07:31 executing program 0:
syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x8, 0x2)
socketpair(0x45, 0x0, 0x20000000, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0xc0000, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x4c, 0x1c, [0x80000000, 0xfff, 0xffff, 0x8, 0x3, 0x8, 0x9]})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
bind$phonet(r1, &(0x7f00000000c0)={0x23, 0x3, 0x8, 0x8}, 0x10)
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000)

03:07:31 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:31 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:31 executing program 3:
socketpair(0x11, 0x3, 0x0, &(0x7f0000000000))

03:07:31 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, 0x0)

03:07:31 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xb000000})

03:07:31 executing program 0:
pselect6(0x40, &(0x7f0000000040)={0x6, 0x4, 0x10000, 0x1000, 0xff, 0x0, 0x5c5}, &(0x7f0000000080)={0x1000, 0x8a28, 0x1, 0x2, 0x6, 0x7f, 0x0, 0x401}, &(0x7f00000000c0)={0xfffffffffffffff8, 0x6, 0x5, 0x80000000, 0xfe, 0xb5, 0x8001, 0x400}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x9]}, 0x8})
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:31 executing program 3:
socketpair(0x11, 0x3, 0x0, 0x0)

03:07:31 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:31 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x10, 0x3f5, 0x400, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:31 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x0, 0xffffffe0})

03:07:31 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xc000000})

03:07:31 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000080)={0x7f, 0x0, 0x4, 0x0, 0x2, {0x77359400}, {0x5, 0xc, 0x5, 0x1, 0x40, 0x2, "63d8456f"}, 0x1, 0x3, @planes=&(0x7f0000000040)={0x3, 0x64c, @userptr, 0x3}, 0x9, 0x0, r1})
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:31 executing program 3:
socketpair(0x11, 0x3, 0x0, 0x0)

03:07:31 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:31 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:31 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x0, 0xffffffe0})

03:07:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xd000000})

03:07:32 executing program 3:
socketpair(0x11, 0x3, 0x0, 0x0)

03:07:32 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:32 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:32 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x0, 0xffffffe0})

03:07:32 executing program 0:
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x200000, 0x0)
sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x453, 0x400, 0x70bd2d, 0x25dfdbfc, "23a71d055c40bc093b377c2a244abe001a79efb26dd7538aa094033f6ff8f54a8bfeaa13194d47883b4d0c84ce7ce41bfc585fc96000240367e5517a80a67b12ff4e809b3fd90be3dc25bceb64ae5bf0b3565f723f21f0ae058301734a29122032157b72ea77381bc325f2acd5bf8623624672cb9602132192ad58", ["", "", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x10)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x20, &(0x7f00000000c0)=0x1)

03:07:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xe000000})

03:07:32 executing program 3:
socketpair(0xa, 0x3, 0x68000000, &(0x7f0000000000))

03:07:32 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:32 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:32 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1})

03:07:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x10000000})

03:07:32 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:32 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4080)

03:07:32 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:32 executing program 0:
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000))

03:07:32 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1})

03:07:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x11000000})

03:07:32 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:32 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={0x0}}, 0x4080)

03:07:32 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:32 executing program 0:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0))
socketpair(0x29, 0x2, 0x8, &(0x7f0000000100))

03:07:32 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x200, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x1})

03:07:32 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:32 executing program 5:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={0x0}}, 0x0)

03:07:32 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x12000000})

03:07:32 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xd, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:32 executing program 0:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0x1e67, 0x5, 0x0, 0x8})

03:07:32 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x18000000})

03:07:33 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000001c0)=""/24)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000140)=0x8, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000003c0)=0xd93, &(0x7f0000000400)=0x2)
setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7ff, 0x2)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000340)=0xede7, &(0x7f0000000380)=0x2)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x400, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x200, 0x0, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000080)={"7daa25b79cbfbccb6341585ee18506f77d394da7f45cb3f2e58717f3f42b", 0x80000001, 0x1, 0x1, 0x4, 0x1, 0x8, 0x7, 0x4, [0x5, 0x3, 0x1, 0xfffffffe, 0x81, 0x9, 0x33a, 0x6dfe, 0x8, 0x1, 0x2a, 0x80, 0x400, 0x7, 0x9, 0x7ff, 0x7, 0x2, 0x1]})
socketpair(0x23, 0x800, 0x6, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000004c0))
sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000f70463d50300022bbd7000fbdbdf2508000000070000002e2f66696c65302e2f66696c65"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0)
socketpair(0xb, 0xa, 0x0, &(0x7f0000000000))

03:07:33 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x25000000})

03:07:33 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 0:
socketpair(0xa, 0x80000, 0x40, &(0x7f0000000040))
socketpair(0x0, 0x2, 0x6, &(0x7f0000000000))
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x100, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x814)
socketpair(0x2c, 0x6, 0x7, &(0x7f0000000080))

03:07:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x5c000000})

03:07:33 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0xff000000})

03:07:33 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0x1e67, 0x5, 0x0, 0x8})

03:07:33 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 0:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x401, 0x4)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:33 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0x1e67, 0x5, 0x0, 0x8})

03:07:33 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:33 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x2]})

03:07:34 executing program 0:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x2)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x20, 0x4)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2)
socketpair(0xa, 0x3, 0x0, &(0x7f0000000000))

03:07:34 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0x1e67, 0x5, 0x0, 0x8})

03:07:34 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x3]})

03:07:34 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

03:07:34 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x4]})

03:07:34 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:34 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x5]})

03:07:34 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))

03:07:34 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:34 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 1:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:34 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:34 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x6]})

03:07:34 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:34 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 1:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:35 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x7]})

03:07:35 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 1:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x8]})

03:07:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x9]})

03:07:35 executing program 1:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:07:35 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xa]})

03:07:35 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:35 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xb, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:35 executing program 1:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:07:35 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xb]})

03:07:35 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0xa, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0xc, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xc]})

03:07:36 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 1:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:07:36 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 3:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

03:07:36 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xd]})

03:07:36 executing program 3:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

03:07:36 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 1:
socketpair(0xa, 0x5, 0x0, 0x0)

03:07:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xe]})

03:07:36 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 3:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)

03:07:36 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:36 executing program 1:
socketpair(0xa, 0x5, 0x0, 0x0)

03:07:36 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x10]})

03:07:36 executing program 3:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:36 executing program 1:
socketpair(0xa, 0x5, 0x0, 0x0)

03:07:36 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:36 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:36 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x11]})

03:07:36 executing program 3:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))

03:07:37 executing program 1:
socketpair(0xa, 0x5, 0x0, &(0x7f0000000000))
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:37 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:37 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x12]})

03:07:37 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 3:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:37 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x9, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x18]})

03:07:37 executing program 3:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:37 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x25]})

03:07:37 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 3:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:37 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x5c]})

03:07:37 executing program 3:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:07:37 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:37 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x300]})

03:07:37 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 3:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:07:38 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x500]})

03:07:38 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x600]})

03:07:38 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 3:
socketpair(0xa, 0x0, 0x0, &(0x7f0000000000))

03:07:38 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x700]})

03:07:38 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 3:
socketpair(0xa, 0x5, 0x0, 0x0)

03:07:38 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x900]})

03:07:38 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:38 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:38 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xa00]})

03:07:38 executing program 3:
socketpair(0xa, 0x5, 0x0, 0x0)

03:07:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:38 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xb00]})

03:07:39 executing program 3:
socketpair(0xa, 0x5, 0x0, 0x0)

03:07:39 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xc00]})

03:07:39 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x8, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x7, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xd00]})

03:07:39 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x4, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:39 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x4, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xe00]})

03:07:39 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x6, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x1100]})

03:07:39 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:39 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x1200]})

03:07:40 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400000, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x0, 0x9}}}, 0x9)

03:07:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x1800]})

03:07:40 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 5:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400000, 0x0)
r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x40, 0xc8, 0x0, 0x9}}}, 0x9)

03:07:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x2500]})

03:07:40 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:40 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:07:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x5c00]})

03:07:40 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:07:40 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xff00]})

03:07:40 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc074510c, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:40 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:41 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:07:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x1000000]})

03:07:41 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x5, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, 0x0)

03:07:41 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x2000000]})

03:07:41 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, 0x0)

03:07:41 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x3000000]})

03:07:41 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, 0x0)

03:07:41 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:07:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x4000000]})

03:07:41 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:07:41 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x5000000]})

03:07:41 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x20, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 0:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000))

03:07:41 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, 0x0)

03:07:42 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x6000000]})

03:07:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:42 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, 0x0)

03:07:42 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x7000000]})

03:07:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:42 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, 0x0)

03:07:42 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x8000000]})

03:07:42 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505609, 0x0)

03:07:42 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x3, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x9000000]})

03:07:42 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4440)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0xc4800, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@echo=0xdee7)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))

03:07:42 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xa000000]})

03:07:42 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

03:07:42 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:42 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xb000000]})

03:07:43 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050565d, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xc000000]})

03:07:43 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c90080c7d70d68d1cef1ae6df11c392a4ee9a92d9eb751b252f6d54971f88a80993a64caa02efd7ad998102a521a5f16b4c9c0b908fdd2d787e47b71d97dd04ccbadcc2fcf0d3a872d9eee526d3d0a6f0989b78f23ef04d8a8dfa7d29577ac73f10caff6aabb3ea088ec753459aca0cda6850b5af0ae20d70ad0260f241ceeb16c7053e5a86e1e0a3307dac7e07d17de922e6efe013579965df04b6e69c3198915249c039855730e5ec97fee37286300bbd04feddc65a5a3065107903fa0f39d00229b5972c574ebe307ced94faf57dfed77f1dc7c6962d75ccb976be1f93b8275568478c7545675d2a0645258ccf63c97b87071947209fa5d10d20c978412fda2778e0c25ca55ad6c0ce1dd4be98c0824b5537633812feb59eb16ad12fb45cac34ffad382e434824041d670eeffe9c29a956d307accfe8086ae87a215707fe9a6dd6e698a9fc1dfc0ec779e50e05a81c8669ccd9ceb743e25bc0340d65b7d6b250b00d63d60e5740c1477374749a222c383c26d"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2, <r3=>0x0})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})
r5 = syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffc, 0x2)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000600)={r3})
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000500)={0x2, @pix_mp={0x800, 0x7, 0x38415262, 0x1, 0x1, [{0x7, 0x1}, {0x4, 0x2}, {0xb9bb, 0x1}, {0x3, 0x4}, {0x8000, 0x1}, {0x7fffffff, 0x2}, {0x1, 0x5}, {0x6ec}], 0x8, 0x0, 0x5}})

03:07:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, 0x0)

03:07:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xd000000]})

03:07:43 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2, <r3=>0x0})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})
r5 = syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffc, 0x2)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000600)={r3})
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000500)={0x2, @pix_mp={0x800, 0x7, 0x38415262, 0x1, 0x1, [{0x7, 0x1}, {0x4, 0x2}, {0xb9bb, 0x1}, {0x3, 0x4}, {0x8000, 0x1}, {0x7fffffff, 0x2}, {0x1, 0x5}, {0x6ec}], 0x8, 0x0, 0x5}})

03:07:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, 0x0)

03:07:43 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xe000000]})

03:07:43 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2, <r3=>0x0})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})
r5 = syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffc, 0x2)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000600)={r3})
ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000500)={0x2, @pix_mp={0x800, 0x7, 0x38415262, 0x1, 0x1, [{0x7, 0x1}, {0x4, 0x2}, {0xb9bb, 0x1}, {0x3, 0x4}, {0x8000, 0x1}, {0x7fffffff, 0x2}, {0x1, 0x5}, {0x6ec}], 0x8, 0x0, 0x5}})

03:07:43 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, 0x0)

03:07:43 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x10000000]})

03:07:43 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c90080c7d70d68d1cef1ae6df11c392a4ee9a92d9eb751b252f6d54971f88a80993a64caa02efd7ad998102a521a5f16b4c9c0b908fdd2d787e47b71d97dd04ccbadcc2fcf0d3a872d9eee526d3d0a6f0989b78f23ef04d8a8dfa7d29577ac73f10caff6aabb3ea088ec753459aca0cda6850b5af0ae20d70ad0260f241ceeb16c7053e5a86e1e0a3307dac7e07d17de922e6efe013579965df04b6e69c3198915249c039855730e5ec97fee37286300bbd04feddc65a5a3065107903fa0f39d00229b5972c574ebe307ced94faf57dfed77f1dc7c6962d75ccb976be1f93b8275568478c7545675d2a0645258ccf63c97b87071947209fa5d10d20c978412fda2778e0c25ca55ad6c0ce1dd4be98c0824b5537633812feb59eb16ad12fb45cac34ffad382e434824041d670eeffe9c29a956d307accfe8086ae87a215707fe9a6dd6e698a9fc1dfc0ec779e50e05a81c8669ccd9ceb743e25bc0340d65b7d6b250b00d63d60e5740c1477374749a222c383c26d"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2, <r3=>0x0})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})
syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffc, 0x2)
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000600)={r3})

03:07:43 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x11000000]})

03:07:43 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})
syz_open_dev$vim2m(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffc, 0x2)

03:07:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x12000000]})

03:07:44 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0505611, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406)
ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x177, 0xff, 0x1})

03:07:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x18000000]})

03:07:44 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, 0x0)

03:07:44 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406)

03:07:44 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, 0x0)

03:07:44 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={<r1=>0x0})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x400, 0x56555959, 0x3, @stepwise={0xfff, 0x7ff, 0xffffffff, 0x9, 0x2, 0xffff66e5}})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x25000000]})

03:07:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406)

03:07:44 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={<r1=>0x0})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x400, 0x56555959, 0x3, @stepwise={0xfff, 0x7ff, 0xffffffff, 0x9, 0x2, 0xffff66e5}})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:44 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, 0x0)

03:07:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x5c000000]})

03:07:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03c90080c7d70d68d1cef1ae6df11c392a4ee9a92d9eb751b252f6d54971f88a80993a64caa02efd7ad998102a521a5f16b4c9c0b908fdd2d787e47b71d97dd04ccbadcc2fcf0d3a872d9eee526d3d0a6f0989b78f23ef04d8a8dfa7d29577ac73f10caff6aabb3ea088ec753459aca0cda6850b5af0ae20d70ad0260f241ceeb16c7053e5a86e1e0a3307dac7e07d17de922e6efe013579965df04b6e69c3198915249c039855730e5ec97fee37286300bbd04feddc65a5a3065107903fa0f39d00229b5972c574ebe307ced94faf57dfed77f1dc7c6962d75ccb976be1f93b8275568478c7545675d2a0645258ccf63c97b87071947209fa5d10d20c978412fda2778e0c25ca55ad6c0ce1dd4be98c0824b5537633812feb59eb16ad12fb45cac34ffad382e434824041d670eeffe9c29a956d307accfe8086ae87a215707fe9a6dd6e698a9fc1dfc0ec779e50e05a81c8669ccd9ceb743e25bc0340d65b7d6b250b00d63d60e5740c1477374749a222c383c26d"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)

03:07:44 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0xff000000]})

03:07:44 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={<r1=>0x0})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x400, 0x56555959, 0x3, @stepwise={0xfff, 0x7ff, 0xffffffff, 0x9, 0x2, 0xffff66e5}})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r1})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:44 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc050560f, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:44 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:44 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140))
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000100)={0x400, 0x56555959, 0x3, @stepwise={0xfff, 0x7ff, 0xffffffff, 0x9, 0x2, 0xffff66e5}})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:45 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, 0x0)

03:07:45 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x1, @sdr={0x31324d4e, 0xfffffc00}})

03:07:45 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x2]})

03:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:45 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, 0x0)

03:07:45 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="7444b10800000000000000c9a575b19522b20d27c2fa38438cf6ad07e2ea69db3d2c1ff47913b2a4ea4b9924238992dd76f29fbe8a998b8c50ff88c873d9eb10d17ef7a1a27ae45e4833a3a27a20a7d7029246d6bdfa9ce5c43a69592bea69cd92b13143e23c3e61d5d070191c506879329fd8ac912aa8b1130995e40907e22cd0ddb69bb90469c87674c0aa079fc6805a8d3c59d2d47063395aa7d9c34c7658d82943fb13575db1af283e878356fb59e81fc107d1b6965e318510ba5128fcfb00b9111cf6e18a1d1fb42de62367c4052423511c92dbbcca8833a94d2e102e18707d33"], 0x9)

03:07:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x3]})

03:07:45 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, 0x0)

03:07:45 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})

03:07:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x4]})

03:07:45 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040))

03:07:45 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x5]})

03:07:45 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x60, 0x2)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:45 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x6]})

03:07:45 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)

03:07:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:45 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x7]})

03:07:46 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)

03:07:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x8]})

03:07:46 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x84)

03:07:46 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x9]})

03:07:46 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:46 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:46 executing program 0:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xa]})

03:07:46 executing program 3:
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:46 executing program 4:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))

03:07:46 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, 0x0)

03:07:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xb]})

03:07:46 executing program 3:
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:46 executing program 4:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:46 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, 0x0)

03:07:46 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:46 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xc]})

03:07:46 executing program 3:
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:47 executing program 4:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:47 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, 0x0)

03:07:47 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xd]})

03:07:47 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:47 executing program 4:
socketpair(0x0, 0x5, 0x0, &(0x7f0000000000))

03:07:47 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xe]})

03:07:47 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:47 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

03:07:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x10]})

03:07:47 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:47 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

03:07:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x11]})

03:07:47 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:47 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

03:07:47 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:47 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x12]})

03:07:47 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, 0x0)

03:07:47 executing program 1:
socketpair(0xa, 0x2, 0x0, &(0x7f0000000040))
read$sequencer(0xffffffffffffffff, &(0x7f0000000000)=""/18, 0x12)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x400, @any, 0x4, 0x1}, 0xe)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)

03:07:47 executing program 3:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:47 executing program 4:
socketpair(0x1, 0x5, 0x0, 0x0)

03:07:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x18]})

03:07:48 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, 0x0)

03:07:48 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 4:
socketpair(0x1, 0x5, 0x0, 0x0)

03:07:48 executing program 3:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x25]})

03:07:48 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, 0x0)

03:07:48 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 3:
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x8, 0x7f, 0x87})

03:07:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x5c]})

03:07:48 executing program 4:
socketpair(0x1, 0x5, 0x0, 0x0)

03:07:48 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0)

03:07:48 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 4:
socketpair(0xa, 0x3, 0xc, &(0x7f0000000000))

03:07:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x300]})

03:07:48 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0)

03:07:48 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x500]})

03:07:48 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:48 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0)

03:07:48 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:48 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x600]})

03:07:48 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:48 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x0, 0x8, 0x7f, 0x87})

03:07:49 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x700]})

03:07:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:49 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x0, 0x8, 0x7f, 0x87})

03:07:49 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x900]})

03:07:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x0, 0x8, 0x7f, 0x87})

03:07:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xa00]})

03:07:49 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x8, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:49 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x0, 0x7f, 0x87})

03:07:49 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x8, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xb00]})

03:07:49 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4, 0x0, 0x0, 0x87})

03:07:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000480)=@t={0x4})

03:07:49 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x8, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:49 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xc00]})

03:07:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:49 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:50 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xd00]})

03:07:50 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:50 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xe00]})

03:07:50 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

03:07:50 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:50 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x1100]})

03:07:50 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

03:07:50 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x5, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:50 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

03:07:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x1200]})

03:07:50 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x5, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:50 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x1800]})

03:07:50 executing program 3:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:50 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x5, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:51 executing program 5:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, 0x0)

03:07:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x2500]})

03:07:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, 0x0)

03:07:51 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x5c00]})

03:07:51 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, 0x0)

03:07:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xff00]})

03:07:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x1000000]})

03:07:51 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:51 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:51 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2226.010360][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:07:51 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x2000000]})

03:07:51 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:52 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2226.145132][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:07:52 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x3000000]})

03:07:52 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

[ 2226.306795][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:07:52 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:52 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x4000000]})

03:07:52 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:52 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:52 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x5000000]})

03:07:52 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

03:07:52 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:52 executing program 4:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 3 (fault-call:1 fault-nth:0):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 1:
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x6000000]})

03:07:52 executing program 0:
syz_emit_vhci(0x0, 0x0)

03:07:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, 0x0)

[ 2226.844678][T26616] FAULT_INJECTION: forcing a failure.
[ 2226.844678][T26616] name failslab, interval 1, probability 0, space 0, times 0
03:07:52 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2226.887260][T26616] CPU: 1 PID: 26616 Comm: syz-executor.3 Not tainted 5.11.0-rc4-syzkaller #0
[ 2226.896168][T26616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2226.906259][T26616] Call Trace:
[ 2226.909565][T26616]  dump_stack+0x183/0x22e
[ 2226.913932][T26616]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2226.919690][T26616]  ? show_regs_print_info+0x12/0x12
[ 2226.924927][T26616]  ? __might_sleep+0x100/0x100
[ 2226.929733][T26616]  ? __lock_acquire+0x5e40/0x5e40
03:07:52 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2226.934802][T26616]  should_fail+0x384/0x4b0
[ 2226.939256][T26616]  ? tomoyo_realpath_from_path+0xd8/0x610
[ 2226.945025][T26616]  should_failslab+0x5/0x20
[ 2226.949564][T26616]  __kmalloc+0x84/0x330
[ 2226.953759][T26616]  ? trace_kfree+0x43/0xd0
[ 2226.958392][T26616]  ? kfree+0x2f/0x2a0
[ 2226.962418][T26616]  tomoyo_realpath_from_path+0xd8/0x610
[ 2226.968013][T26616]  tomoyo_path_number_perm+0x1fb/0x790
[ 2226.973525][T26616]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2226.979203][T26616]  ? tomoyo_check_path_acl+0x1c0/0x1c0
03:07:52 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2226.984754][T26616]  ? __fget_files+0x34f/0x380
[ 2226.989509][T26616]  security_file_ioctl+0x55/0xb0
[ 2226.994486][T26616]  __se_sys_ioctl+0x48/0x170
[ 2226.999120][T26616]  do_syscall_64+0x2d/0x70
[ 2227.003571][T26616]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2227.009533][T26616] RIP: 0033:0x45e219
[ 2227.013463][T26616] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
03:07:52 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:52 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2227.033113][T26616] RSP: 002b:00007f0c59099c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2227.041561][T26616] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2227.049563][T26616] RDX: 0000000020000080 RSI: 00000000c0205648 RDI: 0000000000000003
[ 2227.057586][T26616] RBP: 00007f0c59099ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2227.065718][T26616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2227.073722][T26616] R13: 00007ffd362f165f R14: 00007f0c5909a9c0 R15: 000000000119bf8c
03:07:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x7000000]})

03:07:53 executing program 0 (fault-call:0 fault-nth:0):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2227.294851][T26642] FAULT_INJECTION: forcing a failure.
[ 2227.294851][T26642] name failslab, interval 1, probability 0, space 0, times 0
[ 2227.324468][T26616] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2227.331725][T26642] CPU: 0 PID: 26642 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0
[ 2227.341560][T26642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2227.351817][T26642] Call Trace:
[ 2227.355141][T26642]  dump_stack+0x183/0x22e
[ 2227.359497][T26642]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2227.365332][T26642]  ? show_regs_print_info+0x12/0x12
[ 2227.370571][T26642]  ? __might_sleep+0x100/0x100
[ 2227.375363][T26642]  ? __lock_acquire+0x5e40/0x5e40
[ 2227.381543][T26642]  should_fail+0x384/0x4b0
[ 2227.385989][T26642]  ? __alloc_skb+0x7b/0x500
[ 2227.390522][T26642]  should_failslab+0x5/0x20
[ 2227.395524][T26642]  kmem_cache_alloc_node+0x65/0x330
[ 2227.401875][T26642]  __alloc_skb+0x7b/0x500
[ 2227.406712][T26642]  vhci_write+0xb7/0x400
[ 2227.410976][T26642]  ? iov_iter_init+0x37/0x110
[ 2227.416761][T26642]  vfs_write+0xa39/0xc90
[ 2227.421687][T26642]  ? file_end_write+0x220/0x220
[ 2227.426605][T26642]  ? __fdget_pos+0x1d8/0x2f0
[ 2227.431237][T26642]  ? ksys_write+0x72/0x2a0
[ 2227.435678][T26642]  ksys_write+0x171/0x2a0
[ 2227.440735][T26642]  ? __ia32_sys_read+0x80/0x80
[ 2227.445532][T26642]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2227.451890][T26642]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2227.458313][T26642]  do_syscall_64+0x2d/0x70
[ 2227.462937][T26642]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2227.469014][T26642] RIP: 0033:0x417ab1
[ 2227.472926][T26642] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
03:07:53 executing program 3 (fault-call:1 fault-nth:1):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:53 executing program 5 (fault-call:1 fault-nth:0):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:53 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:53 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x8000000]})

[ 2227.492549][T26642] RSP: 002b:00007fb099de1c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2227.502147][T26642] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1
[ 2227.510230][T26642] RDX: 0000000000000009 RSI: 0000000020000240 RDI: 00000000000000f1
[ 2227.519152][T26642] RBP: 00007fb099de1ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2227.528077][T26642] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000
[ 2227.536070][T26642] R13: 00007fffc2f64d8f R14: 00007fb099de29c0 R15: 000000000119bf8c
[ 2227.599460][T26649] FAULT_INJECTION: forcing a failure.
[ 2227.599460][T26649] name failslab, interval 1, probability 0, space 0, times 0
[ 2227.624014][T26650] FAULT_INJECTION: forcing a failure.
[ 2227.624014][T26650] name failslab, interval 1, probability 0, space 0, times 0
[ 2227.637608][T26649] CPU: 0 PID: 26649 Comm: syz-executor.5 Not tainted 5.11.0-rc4-syzkaller #0
[ 2227.646398][T26649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2227.656476][T26649] Call Trace:
[ 2227.659771][T26649]  dump_stack+0x183/0x22e
[ 2227.664161][T26649]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2227.670855][T26649]  ? show_regs_print_info+0x12/0x12
[ 2227.677141][T26649]  ? __might_sleep+0x100/0x100
[ 2227.682632][T26649]  ? __lock_acquire+0x5e40/0x5e40
[ 2227.687691][T26649]  should_fail+0x384/0x4b0
[ 2227.693731][T26649]  ? tomoyo_realpath_from_path+0xd8/0x610
[ 2227.699479][T26649]  should_failslab+0x5/0x20
[ 2227.704002][T26649]  __kmalloc+0x84/0x330
[ 2227.708181][T26649]  ? trace_kfree+0x43/0xd0
[ 2227.712618][T26649]  ? kfree+0x2f/0x2a0
[ 2227.717425][T26649]  tomoyo_realpath_from_path+0xd8/0x610
[ 2227.723006][T26649]  tomoyo_path_number_perm+0x1fb/0x790
[ 2227.728868][T26649]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2227.734524][T26649]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2227.740278][T26649]  ? __fget_files+0x34f/0x380
[ 2227.744999][T26649]  security_file_ioctl+0x55/0xb0
[ 2227.751200][T26649]  __se_sys_ioctl+0x48/0x170
[ 2227.755951][T26649]  do_syscall_64+0x2d/0x70
[ 2227.760405][T26649]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2227.766662][T26649] RIP: 0033:0x45e219
[ 2227.771722][T26649] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2227.791347][T26649] RSP: 002b:00007fb615077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
03:07:53 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:53 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2227.800003][T26649] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2227.808994][T26649] RDX: 0000000020000080 RSI: 00000000c0205648 RDI: 0000000000000003
[ 2227.817169][T26649] RBP: 00007fb615077ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2227.825164][T26649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2227.833157][T26649] R13: 00007ffc4a53014f R14: 00007fb6150789c0 R15: 000000000119bf8c
[ 2227.865597][T26649] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2227.880302][T26650] CPU: 1 PID: 26650 Comm: syz-executor.3 Not tainted 5.11.0-rc4-syzkaller #0
[ 2227.889242][T26650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2227.899326][T26650] Call Trace:
[ 2227.902652][T26650]  dump_stack+0x183/0x22e
[ 2227.907028][T26650]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
03:07:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x9000000]})

03:07:53 executing program 4:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2227.912788][T26650]  ? show_regs_print_info+0x12/0x12
[ 2227.918119][T26650]  ? __might_sleep+0x100/0x100
[ 2227.922925][T26650]  ? __lock_acquire+0x5e40/0x5e40
[ 2227.927996][T26650]  should_fail+0x384/0x4b0
[ 2227.932449][T26650]  ? tomoyo_encode2+0x25a/0x560
[ 2227.937335][T26650]  should_failslab+0x5/0x20
[ 2227.941909][T26650]  __kmalloc+0x84/0x330
[ 2227.946603][T26650]  tomoyo_encode2+0x25a/0x560
[ 2227.952190][T26650]  tomoyo_realpath_from_path+0x5c3/0x610
[ 2227.957893][T26650]  tomoyo_path_number_perm+0x1fb/0x790
[ 2227.963734][T26650]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2227.969430][T26650]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2227.976075][T26650]  ? __fget_files+0x34f/0x380
[ 2227.981581][T26650]  security_file_ioctl+0x55/0xb0
[ 2227.986789][T26650]  __se_sys_ioctl+0x48/0x170
[ 2227.992373][T26650]  do_syscall_64+0x2d/0x70
[ 2227.997455][T26650]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2228.004449][T26650] RIP: 0033:0x45e219
[ 2228.008388][T26650] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2228.028765][T26650] RSP: 002b:00007f0c59099c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2228.038153][T26650] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2228.046151][T26650] RDX: 0000000020000080 RSI: 00000000c0205648 RDI: 0000000000000003
[ 2228.055162][T26650] RBP: 00007f0c59099ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2228.065070][T26650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2228.073673][T26650] R13: 00007ffd362f165f R14: 00007f0c5909a9c0 R15: 000000000119bf8c
03:07:54 executing program 5 (fault-call:1 fault-nth:1):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:54 executing program 0 (fault-call:0 fault-nth:1):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:54 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

[ 2228.232212][T26662] FAULT_INJECTION: forcing a failure.
[ 2228.232212][T26662] name failslab, interval 1, probability 0, space 0, times 0
[ 2228.278399][T26662] CPU: 1 PID: 26662 Comm: syz-executor.5 Not tainted 5.11.0-rc4-syzkaller #0
[ 2228.287522][T26662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2228.297695][T26662] Call Trace:
[ 2228.301001][T26662]  dump_stack+0x183/0x22e
[ 2228.305362][T26662]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2228.311295][T26662]  ? show_regs_print_info+0x12/0x12
[ 2228.316536][T26662]  ? __might_sleep+0x100/0x100
[ 2228.321331][T26662]  ? __lock_acquire+0x5e40/0x5e40
[ 2228.326554][T26662]  should_fail+0x384/0x4b0
[ 2228.331888][T26662]  ? tomoyo_encode2+0x25a/0x560
[ 2228.336956][T26662]  should_failslab+0x5/0x20
[ 2228.341871][T26662]  __kmalloc+0x84/0x330
[ 2228.346080][T26662]  tomoyo_encode2+0x25a/0x560
[ 2228.350825][T26662]  tomoyo_realpath_from_path+0x5c3/0x610
[ 2228.356702][T26662]  tomoyo_path_number_perm+0x1fb/0x790
[ 2228.363139][T26662]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2228.369103][T26662]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2228.374893][T26662]  ? __fget_files+0x34f/0x380
[ 2228.380061][T26662]  security_file_ioctl+0x55/0xb0
[ 2228.385629][T26662]  __se_sys_ioctl+0x48/0x170
[ 2228.390748][T26662]  do_syscall_64+0x2d/0x70
[ 2228.396216][T26662]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2228.403233][T26662] RIP: 0033:0x45e219
[ 2228.408112][T26662] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2228.428543][T26662] RSP: 002b:00007fb615077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2228.437350][T26662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2228.445349][T26662] RDX: 0000000020000080 RSI: 00000000c0205648 RDI: 0000000000000003
[ 2228.445487][T26650] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2228.453330][T26662] RBP: 00007fb615077ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2228.453344][T26662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2228.453355][T26662] R13: 00007ffc4a53014f R14: 00007fb6150789c0 R15: 000000000119bf8c
[ 2228.467987][T26667] FAULT_INJECTION: forcing a failure.
[ 2228.467987][T26667] name failslab, interval 1, probability 0, space 0, times 0
[ 2228.526913][T26667] CPU: 1 PID: 26667 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0
[ 2228.535733][T26667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2228.545819][T26667] Call Trace:
[ 2228.549117][T26667]  dump_stack+0x183/0x22e
[ 2228.549263][T26662] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2228.553463][T26667]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2228.553489][T26667]  ? show_regs_print_info+0x12/0x12
[ 2228.553508][T26667]  ? __lock_acquire+0x5e40/0x5e40
[ 2228.553524][T26667]  ? __alloc_skb+0x7b/0x500
[ 2228.553543][T26667]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2228.553565][T26667]  should_fail+0x384/0x4b0
[ 2228.593191][T26667]  ? vhci_write+0xb7/0x400
[ 2228.599107][T26667]  should_failslab+0x5/0x20
[ 2228.604640][T26667]  __kmalloc_node_track_caller+0x89/0x3d0
[ 2228.610534][T26667]  ? trace_kmem_cache_alloc_node+0x43/0xf0
[ 2228.616580][T26667]  ? kmem_cache_alloc_node+0x216/0x330
[ 2228.622041][T26667]  ? __alloc_skb+0x7b/0x500
[ 2228.626549][T26667]  ? vhci_write+0xb7/0x400
[ 2228.630970][T26667]  __alloc_skb+0xbd/0x500
[ 2228.635304][T26667]  vhci_write+0xb7/0x400
[ 2228.639532][T26667]  ? iov_iter_init+0x37/0x110
[ 2228.644198][T26667]  vfs_write+0xa39/0xc90
[ 2228.648434][T26667]  ? file_end_write+0x220/0x220
[ 2228.653306][T26667]  ? __fdget_pos+0x1d8/0x2f0
[ 2228.657889][T26667]  ? ksys_write+0x72/0x2a0
[ 2228.662301][T26667]  ksys_write+0x171/0x2a0
[ 2228.666622][T26667]  ? __ia32_sys_read+0x80/0x80
[ 2228.671376][T26667]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2228.677350][T26667]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2228.683417][T26667]  do_syscall_64+0x2d/0x70
[ 2228.687828][T26667]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2228.693728][T26667] RIP: 0033:0x417ab1
[ 2228.697615][T26667] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2228.718087][T26667] RSP: 002b:00007fb099de1c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
03:07:54 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:54 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xa000000]})

03:07:54 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

[ 2228.726676][T26667] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1
[ 2228.734641][T26667] RDX: 0000000000000009 RSI: 0000000020000240 RDI: 00000000000000f1
[ 2228.742777][T26667] RBP: 00007fb099de1ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2228.750791][T26667] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001
[ 2228.758802][T26667] R13: 00007fffc2f64d8f R14: 00007fb099de29c0 R15: 000000000119bf8c
03:07:54 executing program 5 (fault-call:1 fault-nth:2):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xb000000]})

03:07:54 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

03:07:54 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:54 executing program 0 (fault-call:0 fault-nth:2):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:54 executing program 1:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2228.965314][T26679] FAULT_INJECTION: forcing a failure.
[ 2228.965314][T26679] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2229.026252][T26679] CPU: 1 PID: 26679 Comm: syz-executor.5 Not tainted 5.11.0-rc4-syzkaller #0
[ 2229.035083][T26679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2229.045160][T26679] Call Trace:
[ 2229.049095][T26679]  dump_stack+0x183/0x22e
[ 2229.053466][T26679]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2229.059939][T26679]  ? show_regs_print_info+0x12/0x12
[ 2229.065174][T26679]  ? __lock_acquire+0x5e40/0x5e40
[ 2229.071267][T26679]  should_fail+0x384/0x4b0
03:07:54 executing program 4 (fault-call:1 fault-nth:0):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xc000000]})

[ 2229.075736][T26679]  _copy_from_user+0x2d/0x170
[ 2229.080535][T26679]  video_usercopy+0x3cb/0x2330
[ 2229.085358][T26679]  ? tomoyo_path_number_perm+0x5c1/0x790
[ 2229.091038][T26679]  ? video_ioctl2+0x30/0x30
[ 2229.095659][T26679]  ? v4l_printk_ioctl+0x130/0x130
[ 2229.100712][T26679]  ? do_vfs_ioctl+0x82a/0x1a70
[ 2229.105520][T26679]  ? smack_log+0xe3/0x4e0
[ 2229.109877][T26679]  ? __x32_compat_sys_ioctl+0x80/0x80
[ 2229.115293][T26679]  ? smk_access+0x480/0x480
[ 2229.119829][T26679]  ? smk_access+0x44b/0x480
[ 2229.125638][T26679]  ? smk_tskacc+0x300/0x370
[ 2229.130176][T26679]  ? smack_file_ioctl+0x2e3/0x390
[ 2229.135249][T26679]  ? smack_file_alloc_security+0xd0/0xd0
[ 2229.140930][T26679]  v4l2_ioctl+0x181/0x1d0
[ 2229.145288][T26679]  ? v4l2_poll+0x290/0x290
[ 2229.149738][T26679]  __se_sys_ioctl+0xfb/0x170
[ 2229.155173][T26679]  do_syscall_64+0x2d/0x70
[ 2229.159628][T26679]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2229.165558][T26679] RIP: 0033:0x45e219
[ 2229.169477][T26679] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2229.180838][T26693] FAULT_INJECTION: forcing a failure.
[ 2229.180838][T26693] name failslab, interval 1, probability 0, space 0, times 0
[ 2229.189263][T26679] RSP: 002b:00007fb615077c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2229.189295][T26679] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2229.189306][T26679] RDX: 0000000020000080 RSI: 00000000c0205648 RDI: 0000000000000003
03:07:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xd000000]})

[ 2229.189318][T26679] RBP: 00007fb615077ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2229.189328][T26679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2229.189338][T26679] R13: 00007ffc4a53014f R14: 00007fb6150789c0 R15: 000000000119bf8c
[ 2229.201029][T26695] FAULT_INJECTION: forcing a failure.
[ 2229.201029][T26695] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:07:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

[ 2229.337346][T26695] CPU: 1 PID: 26695 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0
[ 2229.346169][T26695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2229.356343][T26695] Call Trace:
[ 2229.359654][T26695]  dump_stack+0x183/0x22e
[ 2229.364015][T26695]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2229.369766][T26695]  ? show_regs_print_info+0x12/0x12
[ 2229.375011][T26695]  ? __lock_acquire+0x5e40/0x5e40
[ 2229.380047][T26695]  ? __kmalloc_node_track_caller+0x2ca/0x3d0
[ 2229.386053][T26695]  should_fail+0x384/0x4b0
[ 2229.391596][T26695]  _copy_from_iter_full+0x1da/0xa40
[ 2229.397693][T26695]  ? __phys_addr_symbol+0x2b/0x70
[ 2229.402752][T26695]  ? __check_object_size+0x2f3/0x3f0
[ 2229.408053][T26695]  vhci_write+0x143/0x400
[ 2229.413395][T26695]  vfs_write+0xa39/0xc90
[ 2229.418654][T26695]  ? file_end_write+0x220/0x220
[ 2229.423557][T26695]  ? __fdget_pos+0x1d8/0x2f0
[ 2229.428195][T26695]  ? ksys_write+0x72/0x2a0
[ 2229.432625][T26695]  ksys_write+0x171/0x2a0
[ 2229.436973][T26695]  ? __ia32_sys_read+0x80/0x80
[ 2229.441763][T26695]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2229.448866][T26695]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2229.454876][T26695]  do_syscall_64+0x2d/0x70
[ 2229.459308][T26695]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2229.466232][T26695] RIP: 0033:0x417ab1
[ 2229.470295][T26695] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 64 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2229.489920][T26695] RSP: 002b:00007fb099de1c50 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2229.498799][T26695] RAX: ffffffffffffffda RBX: 000000000119bf80 RCX: 0000000000417ab1
[ 2229.506792][T26695] RDX: 0000000000000009 RSI: 0000000020000240 RDI: 00000000000000f1
[ 2229.514777][T26695] RBP: 00007fb099de1ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2229.522880][T26695] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000002
03:07:55 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2229.531460][T26695] R13: 00007fffc2f64d8f R14: 00007fb099de29c0 R15: 000000000119bf8c
[ 2229.553726][T26693] CPU: 0 PID: 26693 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
[ 2229.562561][T26693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2229.572641][T26693] Call Trace:
[ 2229.575942][T26693]  dump_stack+0x183/0x22e
[ 2229.580306][T26693]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2229.586058][T26693]  ? show_regs_print_info+0x12/0x12
[ 2229.591289][T26693]  ? __might_sleep+0x100/0x100
[ 2229.596079][T26693]  ? __lock_acquire+0x5e40/0x5e40
[ 2229.601142][T26693]  should_fail+0x384/0x4b0
[ 2229.605581][T26693]  ? tomoyo_realpath_from_path+0xd8/0x610
[ 2229.611324][T26693]  should_failslab+0x5/0x20
[ 2229.615852][T26693]  __kmalloc+0x84/0x330
[ 2229.620208][T26693]  ? trace_kfree+0x43/0xd0
[ 2229.624647][T26693]  ? kfree+0x2f/0x2a0
[ 2229.628659][T26693]  tomoyo_realpath_from_path+0xd8/0x610
03:07:55 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2229.634250][T26693]  tomoyo_path_number_perm+0x1fb/0x790
[ 2229.639755][T26693]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2229.645683][T26693]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2229.651215][T26693]  ? __fget_files+0x34f/0x380
[ 2229.655931][T26693]  security_file_ioctl+0x55/0xb0
[ 2229.660900][T26693]  __se_sys_ioctl+0x48/0x170
[ 2229.665521][T26693]  do_syscall_64+0x2d/0x70
[ 2229.669959][T26693]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2229.675875][T26693] RIP: 0033:0x45e219
[ 2229.679797][T26693] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2229.700173][T26693] RSP: 002b:00007f8595759c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2229.708960][T26693] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2229.718289][T26693] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2229.727959][T26693] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2229.737293][T26693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2229.747213][T26693] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
03:07:55 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:55 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

03:07:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xe000000]})

03:07:55 executing program 0 (fault-call:0 fault-nth:3):
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2229.809268][T26693] ERROR: Out of memory at tomoyo_realpath_from_path.
03:07:55 executing program 4 (fault-call:1 fault-nth:1):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:55 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:55 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, 0x0)

[ 2229.968766][T26717] FAULT_INJECTION: forcing a failure.
[ 2229.968766][T26717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2229.968782][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:07:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x10000000]})

[ 2230.064463][T26721] FAULT_INJECTION: forcing a failure.
[ 2230.064463][T26721] name failslab, interval 1, probability 0, space 0, times 0
[ 2230.102170][T26721] CPU: 0 PID: 26721 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
03:07:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2230.110991][T26721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2230.121081][T26721] Call Trace:
[ 2230.124387][T26721]  dump_stack+0x183/0x22e
[ 2230.128849][T26721]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2230.134603][T26721]  ? show_regs_print_info+0x12/0x12
[ 2230.139836][T26721]  ? __might_sleep+0x100/0x100
[ 2230.144638][T26721]  ? __lock_acquire+0x5e40/0x5e40
[ 2230.149702][T26721]  should_fail+0x384/0x4b0
[ 2230.154238][T26721]  ? tomoyo_encode2+0x25a/0x560
[ 2230.159115][T26721]  should_failslab+0x5/0x20
[ 2230.163647][T26721]  __kmalloc+0x84/0x330
[ 2230.167855][T26721]  tomoyo_encode2+0x25a/0x560
[ 2230.172576][T26721]  tomoyo_realpath_from_path+0x5c3/0x610
[ 2230.178257][T26721]  tomoyo_path_number_perm+0x1fb/0x790
[ 2230.183762][T26721]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2230.189434][T26721]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2230.194972][T26721]  ? __fget_files+0x34f/0x380
[ 2230.199692][T26721]  security_file_ioctl+0x55/0xb0
[ 2230.204663][T26721]  __se_sys_ioctl+0x48/0x170
[ 2230.209287][T26721]  do_syscall_64+0x2d/0x70
[ 2230.213742][T26721]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2230.219788][T26721] RIP: 0033:0x45e219
[ 2230.223702][T26721] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2230.243440][T26721] RSP: 002b:00007f8595759c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2230.251883][T26721] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
03:07:56 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2230.259879][T26721] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2230.267940][T26721] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2230.276085][T26721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2230.284087][T26721] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
[ 2230.323186][T26717] CPU: 1 PID: 26717 Comm: syz-executor.0 Not tainted 5.11.0-rc4-syzkaller #0
[ 2230.332293][T26717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2230.342367][T26717] Call Trace:
[ 2230.345902][T26717]  dump_stack+0x183/0x22e
[ 2230.350760][T26717]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2230.358230][T26717]  ? show_regs_print_info+0x12/0x12
[ 2230.364414][T26717]  ? __lock_acquire+0x5e40/0x5e40
[ 2230.370591][T26717]  ? snprintf+0xc0/0x110
[ 2230.375481][T26717]  should_fail+0x384/0x4b0
[ 2230.381514][T26717]  _copy_to_user+0x2d/0x130
[ 2230.386163][T26717]  simple_read_from_buffer+0xd9/0x160
[ 2230.392332][T26717]  proc_fail_nth_read+0x195/0x210
[ 2230.398418][T26717]  ? proc_fault_inject_write+0x370/0x370
[ 2230.404667][T26717]  ? rw_verify_area+0x1b8/0x370
[ 2230.409869][T26717]  ? fsnotify_perm+0x2fd/0x4d0
[ 2230.415973][T26717]  ? proc_fault_inject_write+0x370/0x370
[ 2230.421640][T26717]  vfs_read+0x294/0xc20
[ 2230.426224][T26717]  ? mutex_lock_io_nested+0x60/0x60
[ 2230.433423][T26717]  ? kernel_read+0x70/0x70
[ 2230.438366][T26717]  ? __fget_files+0x34f/0x380
[ 2230.444384][T26717]  ? mutex_lock_nested+0x1a/0x20
[ 2230.450485][T26717]  ? __fdget_pos+0x24e/0x2f0
[ 2230.456892][T26717]  ? ksys_read+0x72/0x2a0
[ 2230.462887][T26717]  ksys_read+0x171/0x2a0
[ 2230.468757][T26717]  ? vfs_write+0xc90/0xc90
[ 2230.474727][T26717]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2230.482244][T26717]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2230.488574][T26717]  do_syscall_64+0x2d/0x70
[ 2230.493677][T26717]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2230.501384][T26717] RIP: 0033:0x417b11
[ 2230.506301][T26717] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2230.521445][T26721] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2230.527116][T26717] RSP: 002b:00007fb099de1c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2230.542711][T26717] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000417b11
[ 2230.552011][T26717] RDX: 000000000000000f RSI: 00007fb099de1cb0 RDI: 0000000000000003
[ 2230.560349][T26717] RBP: 00007fb099de1ca0 R08: 0000000000000000 R09: 0000000000000000
03:07:56 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2230.568697][T26717] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000003
[ 2230.577972][T26717] R13: 00007fffc2f64d8f R14: 00007fb099de29c0 R15: 000000000119bf8c
03:07:56 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:56 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:56 executing program 4 (fault-call:1 fault-nth:2):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:56 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x11000000]})

03:07:56 executing program 1 (fault-call:1 fault-nth:0):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:56 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2230.816855][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2230.830733][T26740] FAULT_INJECTION: forcing a failure.
[ 2230.830733][T26740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2230.880576][T26740] CPU: 0 PID: 26740 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
[ 2230.889491][T26740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2230.893099][T26746] FAULT_INJECTION: forcing a failure.
[ 2230.893099][T26746] name failslab, interval 1, probability 0, space 0, times 0
[ 2230.899585][T26740] Call Trace:
[ 2230.899603][T26740]  dump_stack+0x183/0x22e
[ 2230.899628][T26740]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2230.899650][T26740]  ? show_regs_print_info+0x12/0x12
03:07:56 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2230.899670][T26740]  ? __lock_acquire+0x5e40/0x5e40
[ 2230.899693][T26740]  should_fail+0x384/0x4b0
[ 2230.940234][T26740]  _copy_from_user+0x2d/0x170
[ 2230.944943][T26740]  video_usercopy+0x3cb/0x2330
[ 2230.949742][T26740]  ? tomoyo_path_number_perm+0x5c1/0x790
[ 2230.955438][T26740]  ? video_ioctl2+0x30/0x30
[ 2230.960075][T26740]  ? v4l_printk_ioctl+0x130/0x130
[ 2230.965159][T26740]  ? do_vfs_ioctl+0x82a/0x1a70
[ 2230.970161][T26740]  ? smack_log+0xe3/0x4e0
[ 2230.975422][T26740]  ? __x32_compat_sys_ioctl+0x80/0x80
03:07:56 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2230.981450][T26740]  ? smk_access+0x480/0x480
[ 2230.986802][T26740]  ? smk_access+0x44b/0x480
[ 2230.992180][T26740]  ? smk_tskacc+0x300/0x370
[ 2230.996734][T26740]  ? smack_file_ioctl+0x2e3/0x390
[ 2231.001803][T26740]  ? smack_file_alloc_security+0xd0/0xd0
[ 2231.007496][T26740]  v4l2_ioctl+0x181/0x1d0
[ 2231.011896][T26740]  ? v4l2_poll+0x290/0x290
[ 2231.016342][T26740]  __se_sys_ioctl+0xfb/0x170
[ 2231.020976][T26740]  do_syscall_64+0x2d/0x70
[ 2231.025429][T26740]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2231.031475][T26740] RIP: 0033:0x45e219
[ 2231.035404][T26740] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2231.055444][T26740] RSP: 002b:00007f8595759c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2231.064009][T26740] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2231.072007][T26740] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2231.079997][T26740] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2231.088874][T26740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2231.096867][T26740] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
[ 2231.104867][T26746] CPU: 1 PID: 26746 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0
[ 2231.113746][T26746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2231.123833][T26746] Call Trace:
[ 2231.127131][T26746]  dump_stack+0x183/0x22e
[ 2231.131489][T26746]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2231.137233][T26746]  ? show_regs_print_info+0x12/0x12
[ 2231.142547][T26746]  ? __might_sleep+0x100/0x100
[ 2231.147347][T26746]  ? __lock_acquire+0x5e40/0x5e40
[ 2231.152467][T26746]  should_fail+0x384/0x4b0
[ 2231.156924][T26746]  ? tomoyo_realpath_from_path+0xd8/0x610
[ 2231.162723][T26746]  should_failslab+0x5/0x20
[ 2231.167696][T26746]  __kmalloc+0x84/0x330
[ 2231.171908][T26746]  ? trace_kfree+0x43/0xd0
[ 2231.176352][T26746]  ? kfree+0x2f/0x2a0
[ 2231.181368][T26746]  tomoyo_realpath_from_path+0xd8/0x610
[ 2231.188047][T26746]  tomoyo_path_number_perm+0x1fb/0x790
[ 2231.193551][T26746]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2231.200348][T26746]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2231.206676][T26746]  ? __fget_files+0x34f/0x380
[ 2231.211879][T26746]  security_file_ioctl+0x55/0xb0
[ 2231.216862][T26746]  __se_sys_ioctl+0x48/0x170
[ 2231.222107][T26746]  do_syscall_64+0x2d/0x70
[ 2231.226965][T26746]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2231.233568][T26746] RIP: 0033:0x45e219
[ 2231.238214][T26746] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2231.258703][T26746] RSP: 002b:00007f8f35249c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2231.267511][T26746] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2231.275800][T26746] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
03:07:57 executing program 4 (fault-call:1 fault-nth:3):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x12000000]})

[ 2231.284908][T26746] RBP: 00007f8f35249ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2231.293707][T26746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2231.302558][T26746] R13: 00007ffe0fb821bf R14: 00007f8f3524a9c0 R15: 000000000119bf8c
03:07:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x18000000]})

[ 2231.415919][ T8469] Bluetooth: hci0: ACL packet for unknown connection handle 0
[ 2231.423763][ T8469] Bluetooth: hci0: ACL packet for unknown connection handle 0
03:07:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2231.502817][T26746] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2231.519175][T26758] FAULT_INJECTION: forcing a failure.
[ 2231.519175][T26758] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:07:57 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x4, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2231.550852][T26758] CPU: 0 PID: 26758 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
[ 2231.559679][T26758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2231.569798][T26758] Call Trace:
[ 2231.573118][T26758]  dump_stack+0x183/0x22e
[ 2231.577512][T26758]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2231.583280][T26758]  ? show_regs_print_info+0x12/0x12
[ 2231.588523][T26758]  ? __lock_acquire+0x5e40/0x5e40
[ 2231.593622][T26758]  should_fail+0x384/0x4b0
[ 2231.598185][T26758]  _copy_to_user+0x2d/0x130
03:07:57 executing program 1 (fault-call:1 fault-nth:1):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2231.602738][T26758]  video_usercopy+0xf6e/0x2330
[ 2231.607555][T26758]  ? v4l_printk_ioctl+0x130/0x130
[ 2231.612640][T26758]  ? do_vfs_ioctl+0x82a/0x1a70
[ 2231.617455][T26758]  ? smack_log+0xe3/0x4e0
[ 2231.621824][T26758]  ? __x32_compat_sys_ioctl+0x80/0x80
[ 2231.627244][T26758]  ? smk_access+0x480/0x480
[ 2231.631786][T26758]  ? smk_access+0x44b/0x480
[ 2231.636322][T26758]  ? smk_tskacc+0x300/0x370
[ 2231.640870][T26758]  ? smack_file_ioctl+0x2e3/0x390
[ 2231.645936][T26758]  ? smack_file_alloc_security+0xd0/0xd0
[ 2231.651624][T26758]  v4l2_ioctl+0x181/0x1d0
[ 2231.655990][T26758]  ? v4l2_poll+0x290/0x290
[ 2231.660434][T26758]  __se_sys_ioctl+0xfb/0x170
[ 2231.665064][T26758]  do_syscall_64+0x2d/0x70
[ 2231.669524][T26758]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2231.675452][T26758] RIP: 0033:0x45e219
[ 2231.679376][T26758] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2231.699534][T26758] RSP: 002b:00007f8595759c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2231.700902][ T8469] Bluetooth: hci0: Received unexpected HCI Event 00000000
[ 2231.708005][T26758] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2231.708031][T26758] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2231.708044][T26758] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2231.708055][T26758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
03:07:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5100, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:57 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x54a0, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:57 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x5, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2231.708066][T26758] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
[ 2231.761730][ T8469] Bluetooth: hci0: Received unexpected HCI Event 00000000
[ 2231.818817][T26767] FAULT_INJECTION: forcing a failure.
[ 2231.818817][T26767] name failslab, interval 1, probability 0, space 0, times 0
[ 2231.850142][T26767] CPU: 1 PID: 26767 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0
[ 2231.859216][T26767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2231.869568][T26767] Call Trace:
[ 2231.873391][T26767]  dump_stack+0x183/0x22e
[ 2231.878260][T26767]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2231.884015][T26767]  ? show_regs_print_info+0x12/0x12
[ 2231.889284][T26767]  ? __might_sleep+0x100/0x100
[ 2231.894470][T26767]  ? __lock_acquire+0x5e40/0x5e40
[ 2231.899886][T26767]  should_fail+0x384/0x4b0
[ 2231.904339][T26767]  ? tomoyo_encode2+0x25a/0x560
[ 2231.909223][T26767]  should_failslab+0x5/0x20
[ 2231.913844][T26767]  __kmalloc+0x84/0x330
[ 2231.918043][T26767]  tomoyo_encode2+0x25a/0x560
[ 2231.922765][T26767]  tomoyo_realpath_from_path+0x5c3/0x610
[ 2231.928787][T26767]  tomoyo_path_number_perm+0x1fb/0x790
[ 2231.934459][T26767]  ? rcu_read_lock_sched_held+0x87/0x110
[ 2231.940122][T26767]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 2231.945671][T26767]  ? __fget_files+0x34f/0x380
[ 2231.950631][T26767]  security_file_ioctl+0x55/0xb0
[ 2231.955905][T26767]  __se_sys_ioctl+0x48/0x170
[ 2231.960636][T26767]  do_syscall_64+0x2d/0x70
[ 2231.965486][T26767]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2231.971416][T26767] RIP: 0033:0x45e219
[ 2231.975402][T26767] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2231.995037][T26767] RSP: 002b:00007f8f35249c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2232.004408][T26767] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
03:07:57 executing program 4 (fault-call:1 fault-nth:4):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:57 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x25000000]})

03:07:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2232.012458][T26767] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2232.021323][T26767] RBP: 00007f8f35249ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2232.029336][T26767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2232.037352][T26767] R13: 00007ffe0fb821bf R14: 00007f8f3524a9c0 R15: 000000000119bf8c
[ 2232.055396][T26767] ERROR: Out of memory at tomoyo_realpath_from_path.
03:07:58 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x54a1, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:58 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:07:58 executing program 1 (fault-call:1 fault-nth:2):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2232.136068][T26781] FAULT_INJECTION: forcing a failure.
[ 2232.136068][T26781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2232.186629][T26781] CPU: 1 PID: 26781 Comm: syz-executor.4 Not tainted 5.11.0-rc4-syzkaller #0
[ 2232.195765][T26781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2232.208621][T26781] Call Trace:
[ 2232.211934][T26781]  dump_stack+0x183/0x22e
[ 2232.217021][T26781]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2232.223496][T26781]  ? show_regs_print_info+0x12/0x12
[ 2232.228746][T26781]  ? __lock_acquire+0x5e40/0x5e40
[ 2232.233882][T26781]  ? snprintf+0xc0/0x110
[ 2232.239124][T26781]  should_fail+0x384/0x4b0
[ 2232.246027][T26781]  _copy_to_user+0x2d/0x130
[ 2232.250616][T26781]  simple_read_from_buffer+0xd9/0x160
[ 2232.256491][T26781]  proc_fail_nth_read+0x195/0x210
[ 2232.261635][T26781]  ? proc_fault_inject_write+0x370/0x370
[ 2232.267424][T26781]  ? rw_verify_area+0x1b8/0x370
[ 2232.273895][T26781]  ? fsnotify_perm+0x2fd/0x4d0
[ 2232.279727][T26781]  ? proc_fault_inject_write+0x370/0x370
[ 2232.286290][T26781]  vfs_read+0x294/0xc20
[ 2232.291348][T26781]  ? mutex_lock_io_nested+0x60/0x60
[ 2232.296702][T26781]  ? kernel_read+0x70/0x70
[ 2232.302665][T26781]  ? __fget_files+0x34f/0x380
[ 2232.307662][T26781]  ? mutex_lock_nested+0x1a/0x20
[ 2232.312721][T26781]  ? __fdget_pos+0x24e/0x2f0
[ 2232.318081][T26781]  ? ksys_read+0x72/0x2a0
[ 2232.322444][T26781]  ksys_read+0x171/0x2a0
[ 2232.326725][T26781]  ? vfs_write+0xc90/0xc90
[ 2232.331259][T26781]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2232.337271][T26781]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2232.343379][T26781]  do_syscall_64+0x2d/0x70
[ 2232.348616][T26781]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2232.354741][T26781] RIP: 0033:0x417b11
[ 2232.360627][T26781] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2232.381103][T26781] RSP: 002b:00007f8595759c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2232.389540][T26781] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417b11
[ 2232.397626][T26781] RDX: 000000000000000f RSI: 00007f8595759cb0 RDI: 0000000000000004
[ 2232.406659][T26781] RBP: 00007f8595759ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2232.414836][T26781] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[ 2232.423791][T26781] R13: 00007ffc6bb24e0f R14: 00007f859575a9c0 R15: 000000000119bf8c
03:07:58 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x2, 0x0, 0x0, 0x4}}, 0x9)

03:07:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x5c000000]})

[ 2232.434035][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2232.447202][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2232.574982][T26795] FAULT_INJECTION: forcing a failure.
[ 2232.574982][T26795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2232.592169][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 2
[ 2232.599764][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 2
03:07:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:58 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2232.621746][T26795] CPU: 1 PID: 26795 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0
[ 2232.630553][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2232.640664][T26795] Call Trace:
[ 2232.644063][T26795]  dump_stack+0x183/0x22e
[ 2232.648531][T26795]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2232.654961][T26795]  ? show_regs_print_info+0x12/0x12
[ 2232.661394][T26795]  ? __lock_acquire+0x5e40/0x5e40
[ 2232.666463][T26795]  should_fail+0x384/0x4b0
03:07:58 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x3, 0x0, 0x0, 0x4}}, 0x9)

[ 2232.671225][T26795]  _copy_from_user+0x2d/0x170
[ 2232.675932][T26795]  video_usercopy+0x3cb/0x2330
[ 2232.680728][T26795]  ? tomoyo_path_number_perm+0x5c1/0x790
[ 2232.686393][T26795]  ? video_ioctl2+0x30/0x30
[ 2232.690929][T26795]  ? v4l_printk_ioctl+0x130/0x130
[ 2232.695978][T26795]  ? do_vfs_ioctl+0x82a/0x1a70
[ 2232.700780][T26795]  ? smack_log+0xe3/0x4e0
[ 2232.705230][T26795]  ? __x32_compat_sys_ioctl+0x80/0x80
[ 2232.711893][T26795]  ? smk_access+0x480/0x480
[ 2232.716581][T26795]  ? smk_access+0x44b/0x480
03:07:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0xff000000]})

[ 2232.721123][T26795]  ? smk_tskacc+0x300/0x370
[ 2232.725927][T26795]  ? smack_file_ioctl+0x2e3/0x390
[ 2232.731102][T26795]  ? smack_file_alloc_security+0xd0/0xd0
[ 2232.737938][T26795]  v4l2_ioctl+0x181/0x1d0
[ 2232.742302][T26795]  ? v4l2_poll+0x290/0x290
[ 2232.746748][T26795]  __se_sys_ioctl+0xfb/0x170
[ 2232.751727][T26795]  do_syscall_64+0x2d/0x70
[ 2232.756573][T26795]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2232.762496][T26795] RIP: 0033:0x45e219
[ 2232.766414][T26795] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2232.787063][T26795] RSP: 002b:00007f8f35249c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2232.796216][T26795] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2232.804908][T26795] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2232.813899][T26795] RBP: 00007f8f35249ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2232.822556][T26795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2232.831687][T26795] R13: 00007ffe0fb821bf R14: 00007f8f3524a9c0 R15: 000000000119bf8c
[ 2232.890961][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 3
[ 2232.900316][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 3
03:07:58 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:58 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x4, 0x0, 0x0, 0x4}}, 0x9)

03:07:58 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:58 executing program 1 (fault-call:1 fault-nth:3):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2233.124810][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 4
[ 2233.133320][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 4
03:07:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2233.182818][T26820] FAULT_INJECTION: forcing a failure.
[ 2233.182818][T26820] name fail_usercopy, interval 1, probability 0, space 0, times 0
03:07:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x2]})

[ 2233.234217][T26820] CPU: 1 PID: 26820 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0
[ 2233.243211][T26820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2233.253407][T26820] Call Trace:
[ 2233.256794][T26820]  dump_stack+0x183/0x22e
[ 2233.261458][T26820]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2233.267208][T26820]  ? show_regs_print_info+0x12/0x12
[ 2233.272435][T26820]  ? __lock_acquire+0x5e40/0x5e40
[ 2233.277677][T26820]  should_fail+0x384/0x4b0
03:07:59 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2233.282140][T26820]  _copy_to_user+0x2d/0x130
[ 2233.286881][T26820]  video_usercopy+0xf6e/0x2330
[ 2233.291753][T26820]  ? v4l_printk_ioctl+0x130/0x130
[ 2233.297663][T26820]  ? do_vfs_ioctl+0x82a/0x1a70
[ 2233.302581][T26820]  ? smack_log+0xe3/0x4e0
[ 2233.307351][T26820]  ? __x32_compat_sys_ioctl+0x80/0x80
[ 2233.312756][T26820]  ? smk_access+0x480/0x480
[ 2233.317286][T26820]  ? smk_access+0x44b/0x480
[ 2233.322691][T26820]  ? smk_tskacc+0x300/0x370
[ 2233.328230][T26820]  ? smack_file_ioctl+0x2e3/0x390
[ 2233.333436][T26820]  ? smack_file_alloc_security+0xd0/0xd0
[ 2233.339116][T26820]  v4l2_ioctl+0x181/0x1d0
[ 2233.345442][T26820]  ? v4l2_poll+0x290/0x290
[ 2233.350383][T26820]  __se_sys_ioctl+0xfb/0x170
[ 2233.355731][T26820]  do_syscall_64+0x2d/0x70
[ 2233.360669][T26820]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2233.367616][T26820] RIP: 0033:0x45e219
[ 2233.371533][T26820] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 2233.391211][T26820] RSP: 002b:00007f8f35249c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2233.399764][T26820] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[ 2233.408558][T26820] RDX: 0000000020000080 RSI: 00000000c0205647 RDI: 0000000000000003
[ 2233.416977][T26820] RBP: 00007f8f35249ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2233.425823][T26820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
03:07:59 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x5, 0x0, 0x0, 0x4}}, 0x9)

[ 2233.434511][T26820] R13: 00007ffe0fb821bf R14: 00007f8f3524a9c0 R15: 000000000119bf8c
03:07:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x3]})

03:07:59 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2233.612915][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 5
[ 2233.628297][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 5
03:07:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x6, 0x0, 0x0, 0x4}}, 0x9)

03:07:59 executing program 1 (fault-call:1 fault-nth:4):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x4]})

03:07:59 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2233.803518][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 6
[ 2233.812877][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 6
03:07:59 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x7, 0x0, 0x0, 0x4}}, 0x9)

03:07:59 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2233.903022][T26849] FAULT_INJECTION: forcing a failure.
[ 2233.903022][T26849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2233.951163][T26849] CPU: 1 PID: 26849 Comm: syz-executor.1 Not tainted 5.11.0-rc4-syzkaller #0
[ 2233.960153][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2233.970231][T26849] Call Trace:
[ 2233.973532][T26849]  dump_stack+0x183/0x22e
[ 2233.977890][T26849]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2233.983632][T26849]  ? show_regs_print_info+0x12/0x12
[ 2233.988859][T26849]  ? __lock_acquire+0x5e40/0x5e40
[ 2233.994139][T26849]  ? snprintf+0xc0/0x110
03:07:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:07:59 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x5]})

[ 2233.998415][T26849]  should_fail+0x384/0x4b0
[ 2234.002878][T26849]  _copy_to_user+0x2d/0x130
[ 2234.007409][T26849]  simple_read_from_buffer+0xd9/0x160
[ 2234.012814][T26849]  proc_fail_nth_read+0x195/0x210
[ 2234.017881][T26849]  ? proc_fault_inject_write+0x370/0x370
[ 2234.023556][T26849]  ? rw_verify_area+0x1b8/0x370
[ 2234.028435][T26849]  ? fsnotify_perm+0x2fd/0x4d0
[ 2234.033255][T26849]  ? proc_fault_inject_write+0x370/0x370
[ 2234.038923][T26849]  vfs_read+0x294/0xc20
[ 2234.043120][T26849]  ? mutex_lock_io_nested+0x60/0x60
03:07:59 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2234.048351][T26849]  ? kernel_read+0x70/0x70
[ 2234.052808][T26849]  ? __fget_files+0x34f/0x380
[ 2234.057534][T26849]  ? mutex_lock_nested+0x1a/0x20
[ 2234.062497][T26849]  ? __fdget_pos+0x24e/0x2f0
[ 2234.067207][T26849]  ? ksys_read+0x72/0x2a0
[ 2234.071576][T26849]  ksys_read+0x171/0x2a0
[ 2234.075866][T26849]  ? vfs_write+0xc90/0xc90
[ 2234.080481][T26849]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2234.086495][T26849]  ? syscall_enter_from_user_mode+0x24/0x190
[ 2234.092508][T26849]  do_syscall_64+0x2d/0x70
03:08:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2234.096969][T26849]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2234.102976][T26849] RIP: 0033:0x417b11
[ 2234.106886][T26849] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 2234.126513][T26849] RSP: 002b:00007f8f35249c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000
[ 2234.134958][T26849] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417b11
[ 2234.142984][T26849] RDX: 000000000000000f RSI: 00007f8f35249cb0 RDI: 0000000000000004
03:08:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x6]})

[ 2234.151002][T26849] RBP: 00007f8f35249ca0 R08: 0000000000000000 R09: 0000000000000000
[ 2234.159021][T26849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[ 2234.167024][T26849] R13: 00007ffe0fb821bf R14: 00007f8f3524a9c0 R15: 000000000119bf8c
03:08:00 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2234.257572][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 7
[ 2234.268104][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 7
03:08:00 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x8, 0x0, 0x0, 0x4}}, 0x9)

03:08:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x7]})

03:08:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2234.527585][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 8
[ 2234.535463][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 8
03:08:00 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x10, 0x0, 0x0, 0x4}}, 0x9)

03:08:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x8]})

03:08:00 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2234.709512][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 16
[ 2234.718206][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 16
03:08:00 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4c01, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x300, 0x0, 0x0, 0x4}}, 0x9)

03:08:00 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x9]})

03:08:00 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x541b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2234.925096][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 768
[ 2234.941565][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 768
03:08:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5421, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:00 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x500, 0x0, 0x0, 0x4}}, 0x9)

03:08:01 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xa]})

03:08:01 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5450, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2235.178638][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1280
[ 2235.197136][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1280
03:08:01 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x600, 0x0, 0x0, 0x4}}, 0x9)

03:08:01 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5451, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xb]})

[ 2235.413391][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1536
[ 2235.437787][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1536
03:08:01 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5452, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045108, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40345410, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x700, 0x0, 0x0, 0x4}}, 0x9)

03:08:01 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xc]})

03:08:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045407, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x5460, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0xfff, 0x0, 0x0, 0x4}}, 0x9)

[ 2235.695236][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1792
[ 2235.703522][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1792
03:08:01 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xd]})

[ 2235.848215][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 4095
[ 2235.857283][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 4095
03:08:01 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:08:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xe]})

03:08:01 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x6364, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:01 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x2, 0x0, 0x4}}, 0x9)

[ 2235.990160][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2236.000213][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:01 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x10]})

03:08:01 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8913, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045612, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2236.157774][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2236.169131][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:02 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x3, 0x0, 0x4}}, 0x9)

03:08:02 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8914, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x11]})

03:08:02 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

[ 2236.832042][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2236.839624][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:02 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x12]})

03:08:02 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x2, 0x4}}, 0x9)

[ 2236.939185][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2236.949524][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:02 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x8933, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc01064b5, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:02 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x18]})

03:08:03 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40000000, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2237.184841][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2237.192748][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:03 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x3, 0x4}}, 0x9)

03:08:03 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80045105, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x25]})

03:08:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2237.347270][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2237.356986][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:03 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:08:03 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020565e, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2237.524971][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2237.534771][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:03 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x5c]})

03:08:03 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x2}}}, 0x9)

03:08:03 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205667, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x300]})

03:08:03 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40045402, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2237.798467][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2237.807157][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x500]})

03:08:03 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x3}}}, 0x9)

03:08:03 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2237.972905][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2237.981512][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x600]})

03:08:04 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x4}}}, 0x9)

03:08:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2238.533755][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2238.542000][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:04 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40345410, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x700]})

03:08:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x5}}}, 0x9)

[ 2238.706079][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2238.715364][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:04 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x6}}}, 0x9)

03:08:04 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40085112, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x900]})

[ 2238.896846][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2238.907235][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:04 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x7}}}, 0x9)

03:08:04 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:04 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xa00]})

[ 2239.165639][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2239.175264][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:05 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x8}}}, 0x9)

03:08:05 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0x80805659, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xb00]})

03:08:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020565e, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2239.383698][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2239.393236][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:05 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x10}}}, 0x9)

03:08:05 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xc00]})

03:08:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205667, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2240.050046][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2240.059395][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:05 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x300}}}, 0x9)

03:08:06 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2240.234231][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2240.246246][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:06 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xd00]})

03:08:06 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x500}}}, 0x9)

[ 2240.441425][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2240.455313][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:06 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xe00]})

03:08:06 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x600}}}, 0x9)

03:08:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x700}}}, 0x9)

[ 2240.690693][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2240.698944][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x1100]})

03:08:06 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205667, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x1200]})

[ 2240.894958][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2240.904467][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:06 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x4000}}}, 0x9)

03:08:06 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x1800]})

[ 2241.148069][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2241.156826][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x2500]})

03:08:07 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0xffff}}}, 0x9)

03:08:07 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205667, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2241.389905][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2241.398052][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:07 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9)

03:08:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x5c00]})

03:08:07 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2241.667635][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2241.676062][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:07 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xff00]})

03:08:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x3}}}, 0x9)

03:08:07 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x1000000]})

[ 2241.944496][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2241.956486][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:07 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x4}}}, 0x9)

03:08:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:07 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x2000000]})

03:08:08 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2242.091419][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2242.100543][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0505611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x5}}}, 0x9)

03:08:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2242.288285][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2242.297819][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:08 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc050565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x3000000]})

03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x6}}}, 0x9)

03:08:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x4, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x4000000]})

03:08:08 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2242.562204][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2242.584063][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x5000000]})

03:08:08 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x7}}}, 0x9)

03:08:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x5, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058560f, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2242.829172][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2242.837440][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:08 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x8}}}, 0x9)

03:08:08 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x6000000]})

03:08:08 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x9}}}, 0x9)

[ 2243.001997][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2243.010964][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:08 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x6, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:08 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0xf100}}}, 0x9)

03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2243.078733][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2243.087325][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:09 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x7000000]})

03:08:09 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc058565d, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x8, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2243.296200][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2243.306709][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0c89425, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0xfdef)

03:08:09 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x8000000]})

03:08:09 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x9, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x4, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x20000249)

03:08:09 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x9000000]})

03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xa, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x5, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x7ffff000)

03:08:09 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xa000000]})

03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xb, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x6, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0xfffffdef)

03:08:09 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xb000000]})

03:08:09 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xc, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:09 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x0, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffdef)

03:08:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x4, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xc000000]})

03:08:10 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xd, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x8, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x2, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0xffffffffffffffff)

03:08:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x5, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xd000000]})

03:08:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x9, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x3, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 0:
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0x4, 0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x40010, r1, 0x4)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0x2)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="81ff010100000104000000f1ffffc5beec567f60d44e6c9f35034e00337569"], 0x9)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x1, @fixed={[], 0x10}, 0xff, 0x2}, 0xe)

03:08:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x6, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xe000000]})

03:08:10 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xf, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xa, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x4, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0xfffffffffffffc7a)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xbf}, "c1db55d9e5c284b56cfff9248a7a47cba579ce987a2a9ed84edff2d8ea6cc97b1cdab18c4d45145e7cca16731f05ae7cbce9ca1a7797d038f1bce49b234698b5636a8b5ca403d7a65505f2ebd02651fead6d95c1f0cd4a15ca7a41fe74720ef3a8bc55f4b7f48f4c0bf3d5eba6dfd10b1dc635a56264eef07919735841d78ec9031beefb55dc36d5bf43d8d589dc021099389a19d55dd36a3ae91b37f167bf986b5b9ce8e20fcde4ee72fdd50fc0b7dc10dd8da716fd40112032f22c946cd7"}, 0xc3)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000080))

03:08:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x10000000]})

03:08:10 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x10, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xb, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x5, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x8, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x11000000]})

03:08:10 executing program 0:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x8)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x9)

03:08:10 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x11, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x6, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xc, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x12000000]})

03:08:10 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x9, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:10 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x12, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2245.036052][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:10 executing program 0:
syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x5, 0x8}, {0x7ff, 0xff80, 0x80, 0x8}}}}, 0x15)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2)

03:08:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x18000000]})

[ 2245.176588][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2245.184776][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:11 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x18, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xd, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xa, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 0:
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000000040)={0x1010, 0x464, 0x2, 0x70bd2d, 0x25dfdbfc, "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", ["", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100), 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x2c, 0x3ed, 0x800, 0x70bd2b, 0x25dfdbfd, "3adfeb937cc3cd8814164ceddb848cde647c463e64dd1c40363ea92a", ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)

03:08:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x25000000]})

03:08:11 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x8, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x25, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)
ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xef}, "c226c1c6d9ba0296c5c8be3f4ec35910bd821a228426f253bffe620c508958a4d69b978e5d7c541981c75fd54c0ec0329c41d1c58c32ee19659c19c36d951f9be1428a01d9a0396aae0f1bd853312f629b163dd5b951efad5c89fe2092136d2098ae5092c3c8ae71ec54673faffff6d9ebdb2badc8e29473dedc4302fd379996dcc1d7f36ab0e5688c31fdddcd9d6c74b8ec8311579c2b423760a1fafcf05260877cce75b65e36eba2486f7ad60acbb1290b2b6eeaa3f5d560814ae309f2f189bdb4d08b55e88c8d1c6ea11921197e7fb5e69114895b79fdc696d5b2b4a54fb63e8f2214c92a3ba10250aa3ee3c029"}, 0xf3)

03:08:11 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xb, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x5c, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xf, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x9, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x5c000000]})

[ 2245.607968][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2245.616995][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:11 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xc, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000280)="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", 0x1000})

03:08:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0xff000000]})

03:08:11 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xa, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x10, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@any, 0xf8, 0xa1, "a2ce34", 0x80, 0x4}, {@fixed={[], 0x11}, 0x6, 0x40, "ebf9c0", 0xff, 0x3f}, {@none, 0x6, 0x9, '>\x00K', 0x7fff, 0x5}]}}}, 0x2e)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x448}, 0x1, 0x0, 0x0, 0x2000}, 0x4000)

[ 2245.813672][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2245.827549][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:11 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xd, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x10f, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xb, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x11, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:11 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000))

03:08:11 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xe, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x2]})

03:08:12 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x300, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xc, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xf, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2246.190672][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2246.200288][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:12 executing program 0:
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x9)

03:08:12 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x3]})

03:08:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x12, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xd, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x10, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 0:
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@e={0xff, 0x3, 0xe, 0x98, @SEQ_CONTROLLER=0xff, 0x4, 0x40, 0x7})
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0xfffff800, 0x4)

03:08:12 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x4]})

03:08:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x18, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x11, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xe, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x600, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 0:
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_cmd_rej_unk={{0x1, 0x14, 0x2}, {0x83b}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x3, 0xfa}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0xf4, 0x4e}}, @l2cap_disconn_rsp={{0x7, 0xc4, 0x4}, {0x9, 0x3}}, @l2cap_conn_rsp={{0x3, 0xff, 0x8}, {0x0, 0x0, 0xe877, 0x8}}]}}, 0x32)

03:08:12 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x5]})

03:08:12 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x12, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2246.707718][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2246.715482][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:12 executing program 0:
syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0xa}, [@l2cap_info_rsp={{0xb, 0x4}, {0x7ff, 0x1, "521a9d698655814b9bafc96b36a7c55c1644e91af11cf2cc9d120ab4d628d7c786ab8519bda73ce40ff56b604752c25d3b8a9af40c3f9e416d9577f064d85d1062a77155dfd6f44dd33113f721253f40867b46e25ae7f90998029cee8a269417cfe9b571232cc5e9326c57a7649b1e16568ae46db3b10b4bb87f1790ac204fa434b9a38585fcb945fe4f65f2f65c1ac23f73567e66b5172761b762f839fa4ac0bf93dc951fd258a77874b6af6c3e9a526d03b90ea6a5e36517c3a443"}}, @l2cap_disconn_req={{0x6, 0x5}, {0x1ff, 0x200}}, @l2cap_disconn_rsp={{0x7, 0x4}, {0x8, 0x864}}]}}, 0xfffffffffffffe8d)

03:08:12 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xf, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x25, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x18, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x700, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x6]})

03:08:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x5c, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x10, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x25, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x900, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:12 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x67}, @l2cap_cid_signaling={{0x63}, [@l2cap_move_chan_rsp={{0xf, 0x4, 0x4}, {0x4, 0x8001}}, @l2cap_conf_req={{0x4, 0x8, 0x50}, {0x2, 0x1, [@l2cap_conf_efs={0x6, 0x10, {0x1, 0x1, 0xf000, 0xbe, 0x2, 0x7f}}, @l2cap_conf_efs={0x6, 0x10, {0x8, 0x0, 0x1ff, 0x7fff, 0x7fffffff, 0x80000000}}, @l2cap_conf_efs={0x6, 0x10, {0x4, 0x2, 0x3, 0x7, 0x8, 0x5}}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x1, 0x81, 0x401, 0x2, 0x100}}, @l2cap_conf_ews={0x7, 0x2, 0x7}, @l2cap_conf_ews={0x7, 0x2, 0x3}]}}, @l2cap_move_chan_req={{0xe, 0x6, 0x3}, {0x4, 0x78}}]}}, 0x6c)

03:08:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x7]})

03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x11, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2247.137369][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2247.147561][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x10f, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x5c, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xa00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x8]})

03:08:13 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="190000040000000100"], 0x9)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x4, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x17d1acbc, 0x7fffffff, 0x3, {0x1, @vbi={0x3f, 0xfffffffc, 0x5, 0x7b037c0d, [0x7f, 0x3], [0x56ba, 0xfffffff9], 0x1}}, 0x7})
sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "547a3303a34719e95267295759818888e1ce1f19d09d29e5251c10a0112c911c8cbf867a9fb48951c61c7299396ddbec3c9a11ebedb6c188574b9c8d9a09cacf"}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4000041)

03:08:13 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xb00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x12, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xe7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x9]})

03:08:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x300, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="000e00000000"], 0x9)
syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT, 0x2)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80904, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000080))

03:08:13 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xc00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x18, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x10f, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0xa]})

03:08:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03000004000000ee0a6016e96d72d5e7f6e5ea44355bbf5f2d0773b808d1cf851ef3bb2b4e34660ac0b0f3123d4ce05418a73b0c144464d25677df91600b9cb653271f0e1a491414207910a091dfe74a99235e5a852f222fa316a2928a7f13e8c18f6afbd4ba528dcdd518beb86704c3f292f619de42db16106cbadb5ab14943d88d7421ff09e86bb476a57fe60f386d47dc7aa549000000000000000000d73a052430a9655cc7133e92bb5758627ad25167f87944ab2acd7c15bed075ac5cf37a9b0ee12e7e491b30006025b0ffd46ee696dbfbcdf5e4c1f3e8a858d6ae14134c40519df0c78b8149abaaa2625457f6ee0385451e061f87ec3a396eb34169ac6be14f7f2d7ace2872b3d5855e05f9e944522484581afd60a1aab342a5eee8f05b87cc66ab76b9bc4155424cf701fa265badc27c1ffb146686a6a4cbd97b66142e6a84ec32a2b89bc187bdcdd09789af06f2b1499cefcf2237e270c43a0f49d1e3d27296"], 0x9)

03:08:13 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xd00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x300, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x25, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0xb]})

[ 2247.727440][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2247.735351][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x5c, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 0:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x1, 0x1, 0x4, 0x1, 0x10000, {r0, r1/1000+60000}, {0x7, 0x2, 0x5, 0x2, 0x80, 0x7f, "8599f519"}, 0x5, 0x4, @offset=0x80000000, 0x1000})
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0xc8, 0x0, 0x1, 0x4}}, 0x9)

03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xe7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x600, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0xc]})

03:08:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000000)=0x31b)

03:08:13 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x10f, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1100, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0xd]})

03:08:13 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x600, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x700, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2248.132107][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2248.142347][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:14 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x700, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1200, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0300000000130000000b7ae914328bd44493e4eda401c8a2b50c00000000ed555d13a7261ee59cf7d5ecafbdbf47f928c1f9bafa25c25642ed6cfdf500000081c888122c2b33f8b36411d4b948a5c91d7eefecd8e311e9fc4153dd74f9a9fe61ebe1df8de11c53d1cffb4a88aa6e719c2a29c55d2dd5751c7bd99077df34cb5197710c2bab5af71594c0030c0c8d0fbe57644ada842014e6aee2b15600"/167], 0x9)

03:08:14 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x300, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0xe]})

03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x900, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 0:
ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"618a726b52ba196ed05738e7fd761da680ea2bcb6ef3c25be998fbf46398", 0x4, 0x7ff, 0x80000000, [0x7, 0x2, 0x0, 0x1ff, 0xffff, 0x7fffffff, 0x2, 0x8, 0x6, 0x80, 0x9, 0x6, 0x3, 0x9, 0x89c, 0x1, 0x9, 0x81]})
read$sequencer(0xffffffffffffffff, &(0x7f0000000080)=""/77, 0x4d)

03:08:14 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x900, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2248.350775][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2248.358396][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:14 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1800, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xa00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 0:
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="03008054005e00010011080200010006a0bda63766e5204000c20014090400fbffff7f0c530500ff0009003f1006040002003f060e060306040007020704bce6a19c97a5c644155a7b000180ffff07090400090000010600040001000000117f0200c1ff"], 0x59)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000001c0)={0x2, @pix={0x8, 0x8, 0x59565955, 0x5, 0xa5dd2e9, 0x9, 0xc, 0x4, 0x0, 0x4, 0x3, 0x6}})
ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000140))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

03:08:14 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x10]})

03:08:14 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x2500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2248.547333][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2248.581463][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x11]})

03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xb00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xa00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x600, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x12]})

03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xc00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x4}}, 0x9)

03:08:14 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x5c00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xb00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xd00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x700, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2248.877425][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2248.888248][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:14 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x18]})

03:08:14 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x3, {0x0, 0x0, 0x0, 0x5e}, @l2cap_cid_signaling={{0x5a}, [@l2cap_conn_rsp={{0x3, 0x6, 0x8}, {0x0, 0x0, 0xb708, 0x7f}}, @l2cap_disconn_req={{0x6, 0x1f, 0x4}, {0x7fff, 0x1d3}}, @l2cap_disconn_rsp={{0x7, 0xe, 0x4}, {0x9, 0x6}}, @l2cap_conf_req={{0x4, 0x2, 0x1e}, {0x1000, 0x1090, [@l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x6, 0x4, 0x0, 0x4}}, @l2cap_conf_rfc={0x4, 0x9, {0x2, 0x2, 0x1, 0x1, 0x0, 0x8}}]}}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x77, 0x4a69}}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x7ff}}, @l2cap_info_req={{0xa, 0x4, 0x2}, {0x4}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}}]}}, 0x63)

03:08:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1100, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe7ff, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xc00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x900, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x25]})

[ 2249.141331][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2249.149340][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:15 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xd00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x5c]})

03:08:15 executing program 0:
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x34)
syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000000)=0x19c)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
read$qrtrtun(r0, &(0x7f0000000040)=""/131, 0x83)

03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1200, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xa00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xfdfd, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x300]})

03:08:15 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xe00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1800, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2249.395190][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1802
[ 2249.429212][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 1802
03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x2500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x5c00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xb00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x500]})

03:08:15 executing program 0:
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0300000400001001000b15eba8a1c8d0421ca76eae98b617c5d02ce10f9fc79287361bb2163237107c09dd9f4848714744bfd94be99888a67ad60027ed796e54dddd2b50986ca9f049a588d066e9b6d80a3de17fb8bb0761e5f33a0348342047c872d27b320bf1bf4e5e715ad035b172fa10d63eb7b1b6dd2efc63aeefece0b3c59b78cfbac8b90688742656196830585dfaa4ee68f4049f9304fcf46927cdbc6d46dcd330ccf19875e329b8eed9dfbd8fd75165e9a9cc975c553de928f4eb46c369a4dc321cc7f4fc16725f808e0a328fd64acbde0548801d03cba8c065a154"], 0x9)
syz_emit_vhci(&(0x7f0000000140)=@HCI_VENDOR_PKT, 0x2)
syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x14}, "5d1ba3b999a8ae85b3d6dea04ee96658cda89291"}, 0x18)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)

03:08:15 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xff00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x1100, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xe7ff, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x600]})

03:08:15 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xc00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x1200, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x700]})

[ 2249.727069][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
[ 2249.751206][ T8469] Bluetooth: hci0: SCO packet for unknown connection handle 0
03:08:15 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xffe7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xfdfd, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES32], 0x9)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0)
ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000000)=0x8001)

03:08:15 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xd00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x1800, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x1000000, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0x900]})

03:08:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xff00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:15 executing program 0:
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc8}}}, 0x4)

03:08:15 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0xe00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:16 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x2000000, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:16 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x2500, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0xffe7, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2250.193028][ T8469] ==================================================================
[ 2250.201433][ T8469] BUG: KASAN: null-ptr-deref in amp_read_loc_assoc_final_data+0x183/0x340
[ 2250.210071][ T8469] Write of size 8 at addr 0000000000000030 by task kworker/u5:2/8469
[ 2250.218160][ T8469] 
[ 2250.220501][ T8469] CPU: 1 PID: 8469 Comm: kworker/u5:2 Not tainted 5.11.0-rc4-syzkaller #0
[ 2250.229029][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2250.239131][ T8469] Workqueue: hci0 hci_rx_work
[ 2250.243905][ T8469] Call Trace:
[ 2250.247202][ T8469]  dump_stack+0x183/0x22e
[ 2250.251562][ T8469]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2250.257310][ T8469]  ? _raw_spin_lock_irqsave+0xbf/0x100
[ 2250.262803][ T8469]  ? show_regs_print_info+0x12/0x12
[ 2250.268041][ T8469]  kasan_report+0x154/0x200
[ 2250.272560][ T8469]  ? amp_read_loc_assoc_final_data+0x183/0x340
[ 2250.278744][ T8469]  check_memory_region+0x2b5/0x2f0
[ 2250.283890][ T8469]  amp_read_loc_assoc_final_data+0x183/0x340
[ 2250.289906][ T8469]  ? amp_read_loc_assoc+0x230/0x230
[ 2250.295222][ T8469]  ? rcu_lock_release+0x5/0x20
[ 2250.300053][ T8469]  ? __lock_acquire+0x5e40/0x5e40
[ 2250.305069][ T8469]  ? __mutex_unlock_slowpath+0x17b/0x5a0
[ 2250.310827][ T8469]  hci_event_packet+0x724/0x1be0
[ 2250.315789][ T8469]  ? asan.module_dtor+0x20/0x20
[ 2250.320660][ T8469]  ? _raw_spin_unlock_irqrestore+0x2e/0x60
[ 2250.326478][ T8469]  ? lockdep_hardirqs_on+0x10/0x130
[ 2250.331767][ T8469]  ? hci_send_to_monitor+0x3e/0x4c0
[ 2250.337046][ T8469]  hci_rx_work+0x229/0x410
[ 2250.341500][ T8469]  process_one_work+0x833/0x10c0
[ 2250.346453][ T8469]  ? rescuer_thread+0x16c0/0x16c0
[ 2250.351470][ T8469]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 2250.357019][ T8469]  ? kthread_data+0x4d/0xc0
[ 2250.361512][ T8469]  ? wq_worker_running+0x8b/0x140
[ 2250.366588][ T8469]  worker_thread+0xaa4/0x1460
[ 2250.371272][ T8469]  ? rcu_lock_release+0x20/0x20
[ 2250.376126][ T8469]  kthread+0x39a/0x3c0
[ 2250.380183][ T8469]  ? rcu_lock_release+0x20/0x20
[ 2250.385022][ T8469]  ? kthread_blkcg+0xd0/0xd0
[ 2250.389626][ T8469]  ret_from_fork+0x1f/0x30
03:08:16 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205648, &(0x7f0000000080)={0x3000000, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:16 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x1100, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

03:08:16 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x20, 0x2, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4", 0x0, [0x0, 0x0, 0x0, 0xa00]})

03:08:16 executing program 1:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0205647, &(0x7f0000000080)={0x5c00, 0x0, 0x0, "5b268cb14aaf9a7a2560bf05bd2a87103b803d738a1c71e80327d31bfe751ae4"})

[ 2250.394078][ T8469] ==================================================================
[ 2250.402122][ T8469] Disabling lock debugging due to kernel taint
[ 2250.411881][ T8469] Kernel panic - not syncing: panic_on_warn set ...
[ 2250.419842][ T8469] CPU: 1 PID: 8469 Comm: kworker/u5:2 Tainted: G    B             5.11.0-rc4-syzkaller #0
[ 2250.429739][ T8469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
03:08:16 executing program 0:
syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

[ 2250.441013][ T8469] Workqueue: hci0 hci_rx_work
[ 2250.446703][ T8469] Call Trace:
[ 2250.450003][ T8469]  dump_stack+0x183/0x22e
[ 2250.455374][ T8469]  ? log_buf_vmcoreinfo_setup+0x45d/0x45d
[ 2250.461392][ T8469]  ? show_regs_print_info+0x12/0x12
[ 2250.467270][ T8469]  ? __irq_exit_rcu+0xc6/0x260
[ 2250.472045][ T8469]  ? irq_exit_rcu+0x20/0x20
[ 2250.476564][ T8469]  ? sched_clock_cpu+0x18/0x3c0
[ 2250.481819][ T8469]  panic+0x2e1/0x850
[ 2250.486722][ T8469]  ? schedule_preempt_disabled+0x20/0x20
[ 2250.492376][ T8469]  ? trace_hardirqs_on+0x30/0x80
[ 2250.497432][ T8469]  ? nmi_panic+0x90/0x90
[ 2250.501822][ T8469]  ? preempt_schedule_thunk+0x16/0x18
[ 2250.507834][ T8469]  ? trace_hardirqs_on+0x30/0x80
[ 2250.512787][ T8469]  kasan_report+0x1fb/0x200
[ 2250.517310][ T8469]  ? amp_read_loc_assoc_final_data+0x183/0x340
[ 2250.524411][ T8469]  check_memory_region+0x2b5/0x2f0
[ 2250.530298][ T8469]  amp_read_loc_assoc_final_data+0x183/0x340
[ 2250.536368][ T8469]  ? amp_read_loc_assoc+0x230/0x230
[ 2250.541574][ T8469]  ? rcu_lock_release+0x5/0x20
[ 2250.546355][ T8469]  ? __lock_acquire+0x5e40/0x5e40
[ 2250.553255][ T8469]  ? __mutex_unlock_slowpath+0x17b/0x5a0
[ 2250.560282][ T8469]  hci_event_packet+0x724/0x1be0
[ 2250.566176][ T8469]  ? asan.module_dtor+0x20/0x20
[ 2250.571939][ T8469]  ? _raw_spin_unlock_irqrestore+0x2e/0x60
[ 2250.577969][ T8469]  ? lockdep_hardirqs_on+0x10/0x130
[ 2250.583832][ T8469]  ? hci_send_to_monitor+0x3e/0x4c0
[ 2250.589434][ T8469]  hci_rx_work+0x229/0x410
[ 2250.593902][ T8469]  process_one_work+0x833/0x10c0
[ 2250.599804][ T8469]  ? rescuer_thread+0x16c0/0x16c0
[ 2250.605700][ T8469]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 2250.611659][ T8469]  ? kthread_data+0x4d/0xc0
[ 2250.616428][ T8469]  ? wq_worker_running+0x8b/0x140
[ 2250.623248][ T8469]  worker_thread+0xaa4/0x1460
[ 2250.628996][ T8469]  ? rcu_lock_release+0x20/0x20
[ 2250.634800][ T8469]  kthread+0x39a/0x3c0
[ 2250.639403][ T8469]  ? rcu_lock_release+0x20/0x20
[ 2250.645149][ T8469]  ? kthread_blkcg+0xd0/0xd0
[ 2250.650832][ T8469]  ret_from_fork+0x1f/0x30
[ 2250.658758][ T8469] Kernel Offset: disabled
[ 2250.663088][ T8469] Rebooting in 86400 seconds..