ocket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x5, 0x6}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xa, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000280)={r1, r2, 0x0, 0x7, 0x81}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) connect$bt_sco(r3, 0x0, 0x0) 04:48:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x654200, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x40, 0x1}, 0x1}}, 0x18) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r1, 0x3, 0xae, &(0x7f0000000240)="093659a5619689f952d259272a2b64acc6830054cff7f8ce37491242b988962cfde3bb2034756e358767855e9d60f30ff23a1f3ab7b9f7c72858b4019ae907b31cbac91dfb7574c8b60850b7996e3f2bc7aad60c603d211b353c88d666a832e689aae50783800595b53bcdfd29166357059954e232095e7aaeacfdaf27f3c976880ebbe66ec036ea9754f0f3122e460da118a4ff95385a44574c2b8128c27ff0aac04d347ebab4c78ce2cc9ff52e", 0x6, 0x3, 0x5, 0x6, 0x7, 0x3, 0x400, 'syz0\x00'}) 04:48:14 executing program 1: socket(0x10, 0x2, 0x7) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x2, 0x7) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) 04:48:14 executing program 2: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x9}, 0xf) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) 04:48:14 executing program 4: socket(0x11, 0xf00844c33dd4352f, 0x0) 04:48:14 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x654200, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x40, 0x1}, 0x1}}, 0x18) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r1, 0x3, 0xae, &(0x7f0000000240)="093659a5619689f952d259272a2b64acc6830054cff7f8ce37491242b988962cfde3bb2034756e358767855e9d60f30ff23a1f3ab7b9f7c72858b4019ae907b31cbac91dfb7574c8b60850b7996e3f2bc7aad60c603d211b353c88d666a832e689aae50783800595b53bcdfd29166357059954e232095e7aaeacfdaf27f3c976880ebbe66ec036ea9754f0f3122e460da118a4ff95385a44574c2b8128c27ff0aac04d347ebab4c78ce2cc9ff52e", 0x6, 0x3, 0x5, 0x6, 0x7, 0x3, 0x400, 'syz0\x00'}) 04:48:14 executing program 4: socket(0x11, 0xf00844c33dd4352f, 0x0) socket(0x11, 0xf00844c33dd4352f, 0x0) (async) 04:48:14 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x654200, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x40, 0x1}, 0x1}}, 0x18) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r1, 0x3, 0xae, &(0x7f0000000240)="093659a5619689f952d259272a2b64acc6830054cff7f8ce37491242b988962cfde3bb2034756e358767855e9d60f30ff23a1f3ab7b9f7c72858b4019ae907b31cbac91dfb7574c8b60850b7996e3f2bc7aad60c603d211b353c88d666a832e689aae50783800595b53bcdfd29166357059954e232095e7aaeacfdaf27f3c976880ebbe66ec036ea9754f0f3122e460da118a4ff95385a44574c2b8128c27ff0aac04d347ebab4c78ce2cc9ff52e", 0x6, 0x3, 0x5, 0x6, 0x7, 0x3, 0x400, 'syz0\x00'}) 04:48:14 executing program 4: socket(0x2b, 0x4, 0x0) 04:48:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff24ec}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x800]}]}, 0x70}}, 0x20000000) 04:48:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x654200, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x40, 0x1}, 0x1}}, 0x18) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r1, 0x3, 0xae, &(0x7f0000000240)="093659a5619689f952d259272a2b64acc6830054cff7f8ce37491242b988962cfde3bb2034756e358767855e9d60f30ff23a1f3ab7b9f7c72858b4019ae907b31cbac91dfb7574c8b60850b7996e3f2bc7aad60c603d211b353c88d666a832e689aae50783800595b53bcdfd29166357059954e232095e7aaeacfdaf27f3c976880ebbe66ec036ea9754f0f3122e460da118a4ff95385a44574c2b8128c27ff0aac04d347ebab4c78ce2cc9ff52e", 0x6, 0x3, 0x5, 0x6, 0x7, 0x3, 0x400, 'syz0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x654200, 0x0) (async) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x40, 0x1}, 0x1}}, 0x18) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) (async) write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7, 0x21, 0x1}, 0x7) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x1) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000180)={r2, r1, 0x3, 0xae, &(0x7f0000000240)="093659a5619689f952d259272a2b64acc6830054cff7f8ce37491242b988962cfde3bb2034756e358767855e9d60f30ff23a1f3ab7b9f7c72858b4019ae907b31cbac91dfb7574c8b60850b7996e3f2bc7aad60c603d211b353c88d666a832e689aae50783800595b53bcdfd29166357059954e232095e7aaeacfdaf27f3c976880ebbe66ec036ea9754f0f3122e460da118a4ff95385a44574c2b8128c27ff0aac04d347ebab4c78ce2cc9ff52e", 0x6, 0x3, 0x5, 0x6, 0x7, 0x3, 0x400, 'syz0\x00'}) (async) 04:48:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:48:15 executing program 2: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 04:48:15 executing program 4: socket(0x2b, 0x4, 0x0) 04:48:15 executing program 1: socket(0x10, 0x80000, 0x7) 04:48:15 executing program 4: socket(0x2b, 0x4, 0x0) socket(0x2b, 0x4, 0x0) (async) 04:48:15 executing program 1: socket(0x10, 0x80000, 0x7) 04:48:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x0, 0x80c, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:15 executing program 4: socket(0x3, 0x1, 0xffff7ffe) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) 04:48:15 executing program 1: socket(0x10, 0x80000, 0x7) 04:48:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff24ec}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x800]}]}, 0x70}}, 0x20000000) 04:48:15 executing program 4: socket(0x3, 0x1, 0xffff7ffe) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) socket(0x3, 0x1, 0xffff7ffe) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) (async) 04:48:15 executing program 2: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 04:48:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:48:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x0, 0x80c, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:15 executing program 1: socket(0x9, 0xa, 0x4ad) 04:48:15 executing program 4: socket(0x3, 0x1, 0xffff7ffe) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) socket(0x3, 0x1, 0xffff7ffe) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) (async) 04:48:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x0, 0x80c, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket(0x0, 0x80c, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) 04:48:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:15 executing program 1: socket(0x9, 0xa, 0x4ad) 04:48:15 executing program 2: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 04:48:15 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x111000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000600)) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2480, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000600)) r8 = epoll_create(0x80000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4, r5, r6, r7, r1, r8], 0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) 04:48:16 executing program 4: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x2, 0x2, 0x3fc1}) socket(0x1d, 0x2, 0x408) 04:48:16 executing program 1: socket(0x9, 0xa, 0x4ad) 04:48:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x111000, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x111000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x81000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000600)) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2480, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000600)) r8 = epoll_create(0x80000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4, r5, r6, r7, r1, r8], 0x6) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) 04:48:16 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) (rerun: 32) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:48:16 executing program 2: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) 04:48:16 executing program 1: r0 = socket(0x10, 0x2, 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "a89c163a34b97dc4", "c08c9809192d313c43fdaa57e6e64d2adbca1389d156da683347580df88b3aa9", "d38a7a9f", "02166d7c9cbb889d"}, 0x38) 04:48:16 executing program 4: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x2, 0x2, 0x3fc1}) socket(0x1d, 0x2, 0x408) (async) socket(0x1d, 0x2, 0x408) 04:48:16 executing program 4: ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000000)={0x2, 0x2, 0x3fc1}) socket(0x1d, 0x2, 0x408) [ 1123.672956][T21986] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1125.000320][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:48:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x111000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RLINK(r1, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x81000, 0x0, 0xffffffffffffffff}) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000600)) (async) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2480, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000600)) r8 = epoll_create(0x80000000) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r4, r5, r6, r7, r1, r8], 0x6) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) 04:48:16 executing program 4: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x4}}}, 0x18) socket(0x2b, 0x5, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xe8fe}, 0xb) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) socket(0x6, 0x1, 0xc001) 04:48:16 executing program 1: r0 = socket(0x10, 0x2, 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "a89c163a34b97dc4", "c08c9809192d313c43fdaa57e6e64d2adbca1389d156da683347580df88b3aa9", "d38a7a9f", "02166d7c9cbb889d"}, 0x38) 04:48:16 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) 04:48:16 executing program 2: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) 04:48:16 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) 04:48:16 executing program 4: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x4}}}, 0x18) socket(0x2b, 0x5, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xe8fe}, 0xb) (async) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xe8fe}, 0xb) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) socket(0x6, 0x1, 0xc001) 04:48:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7, 0xb52, 0xc0, r2, 0x2, '\x00', 0x0, r3, 0x3, 0x1, 0x4, 0xb}, 0x48) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)) 04:48:16 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000140), 0x8) 04:48:16 executing program 1: r0 = socket(0x10, 0x2, 0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "a89c163a34b97dc4", "c08c9809192d313c43fdaa57e6e64d2adbca1389d156da683347580df88b3aa9", "d38a7a9f", "02166d7c9cbb889d"}, 0x38) 04:48:16 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async, rerun: 64) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async, rerun: 64) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7, 0xb52, 0xc0, r2, 0x2, '\x00', 0x0, r3, 0x3, 0x1, 0x4, 0xb}, 0x48) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)) 04:48:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:17 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111601, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r0, 0x0, 0xffffffffffffff10) 04:48:17 executing program 4: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x4}}}, 0x18) (async) socket(0x2b, 0x5, 0x0) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) (async) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xe8fe}, 0xb) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) socket(0x6, 0x1, 0xc001) 04:48:17 executing program 2: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:17 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x50) 04:48:17 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x7, 0xb52, 0xc0, r2, 0x2, '\x00', 0x0, r3, 0x3, 0x1, 0x4, 0xb}, 0x48) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)) 04:48:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000cb0b980a6d562ac5698000000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x6101}, 0x24004010) socket(0x2, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x626}, 0xf) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x0, 0xfff}) 04:48:17 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 32) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111601, 0x0) (rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r0, 0x0, 0xffffffffffffff10) 04:48:17 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:48:17 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000cb0b980a6d562ac5698000000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x6101}, 0x24004010) (async) socket(0x2, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x626}, 0xf) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x0, 0xfff}) 04:48:17 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x50) [ 1127.080110][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:48:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x6, 0x3da, 0x9}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:18 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:48:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000cb0b980a6d562ac5698000000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x6101}, 0x24004010) socket(0x2, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x626}, 0xf) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x0, 0xfff}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000cb0b980a6d562ac5698000000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x6101}, 0x24004010) (async) socket(0x2, 0x2, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) (async) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x626}, 0xf) (async) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x0, 0xfff}) (async) 04:48:18 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111601, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r0, 0x0, 0xffffffffffffff10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111601, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) connect$bt_sco(r0, 0x0, 0xffffffffffffff10) (async) 04:48:18 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x50) 04:48:18 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:48:18 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:18 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74) connect$bt_sco(r0, 0x0, 0x700) 04:48:18 executing program 2: r0 = socket(0x0, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:18 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:18 executing program 1: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x748, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44890}, 0x40050) socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x1) 04:48:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74) connect$bt_sco(r0, 0x0, 0x700) 04:48:19 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xe0e0e0e0}) socket(0x2, 0x2, 0x0) 04:48:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:19 executing program 2: r0 = socket(0x0, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:19 executing program 1: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x748, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44890}, 0x40050) (async) socket(0x10, 0x2, 0x7) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x1) 04:48:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x6, 0x3da, 0x9}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x6, 0x3da, 0x9}) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:48:19 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xe0e0e0e0}) socket(0x2, 0x2, 0x0) 04:48:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000000)=""/116, &(0x7f0000000080)=0x74) (async) connect$bt_sco(r0, 0x0, 0x700) 04:48:19 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xe0e0e0e0}) (rerun: 64) socket(0x2, 0x2, 0x0) 04:48:19 executing program 1: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x748, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44890}, 0x40050) (async) socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40015}, 0x1) 04:48:19 executing program 4: socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:48:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/232, &(0x7f0000000000)=0xe8) write$cgroup_freezer_state(r1, &(0x7f00000002c0)='FROZEN\x00', 0x7) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x200101, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250400000014000100fc020000000000000000000000000000080003000500000008000200ff0000001400040000010000000000004450ffff0000000005000600f200000010000400070000000100000006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20068004) 04:48:19 executing program 2: r0 = socket(0x0, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14bc0000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffff, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}]}, 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x40000) io_uring_setup(0xaec, &(0x7f0000000140)={0x0, 0xbf7e, 0x900, 0x1, 0xf9, 0x0, r1}) 04:48:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x6, 0x3da, 0x9}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:19 executing program 4: socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 04:48:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/232, &(0x7f0000000000)=0xe8) (async) write$cgroup_freezer_state(r1, &(0x7f00000002c0)='FROZEN\x00', 0x7) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x200101, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250400000014000100fc020000000000000000000000000000080003000500000008000200ff0000001400040000010000000000004450ffff0000000005000600f200000010000400070000000100000006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20068004) 04:48:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14bc0000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffff, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}]}, 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x40000) (async) io_uring_setup(0xaec, &(0x7f0000000140)={0x0, 0xbf7e, 0x900, 0x1, 0xf9, 0x0, r1}) 04:48:19 executing program 4: socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 04:48:19 executing program 2: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/232, &(0x7f0000000000)=0xe8) write$cgroup_freezer_state(r1, &(0x7f00000002c0)='FROZEN\x00', 0x7) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x200101, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250400000014000100fc020000000000000000000000000000080003000500000008000200ff0000001400040000010000000000004450ffff0000000005000600f200000010000400070000000100000006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20068004) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/232, &(0x7f0000000000)=0xe8) (async) write$cgroup_freezer_state(r1, &(0x7f00000002c0)='FROZEN\x00', 0x7) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x200101, 0x0) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250400000014000100fc020000000000000000000000000000080003000500000008000200ff0000001400040000010000000000004450ffff0000000005000600f200000010000400070000000100000006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x20068004) (async) 04:48:19 executing program 1: r0 = socket(0x10, 0x2, 0x7) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25030000001000040007000000ffff00000000000014000100fe80000000000000000000000000001314000100fe8000000000000000000000000000bbfabd9c6b2b2d8c37934156717b76fc2f0f10635977c770b59217ec901c718db1f7c93e8febb15afa0b806f10805dec08b10abc1df01ac9b7ba860fc7f501000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="735a863a", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=0xf5) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4) 04:48:19 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14bc0000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xa9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xffff, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}]}, 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c880}, 0x40000) io_uring_setup(0xaec, &(0x7f0000000140)={0x0, 0xbf7e, 0x900, 0x1, 0xf9, 0x0, r1}) 04:48:19 executing program 4: r0 = socket(0x28, 0x2, 0x7fffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xa69, 0x7, 0x4, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) 04:48:19 executing program 2: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:19 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000000)=""/191) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x6000, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x2d}, 0x10) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x20) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket(0x23, 0x800, 0x8) connect$bt_sco(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000001c0)={0x20, 0x37, 0x1, {0x2, 0xff, 0x3, 0x0, 0x2, '\xc7^'}}, 0x20) [ 1129.160057][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) 04:48:20 executing program 4: socket(0x28, 0x2, 0x7fffffff) (async) r0 = socket(0x28, 0x2, 0x7fffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xa69, 0x7, 0x4, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) 04:48:20 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/125, &(0x7f0000000100)=0x7d) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x2, 0x3, 0x400}) write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x1}, 0xb) syz_open_dev$media(&(0x7f0000000040), 0x4ad, 0x800) connect$bt_sco(r0, &(0x7f0000000000)={0x2, @none}, 0xffffffffffffffa7) 04:48:20 executing program 1: r0 = socket(0x10, 0x2, 0x7) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25030000001000040007000000ffff00000000000014000100fe80000000000000000000000000001314000100fe8000000000000000000000000000bbfabd9c6b2b2d8c37934156717b76fc2f0f10635977c770b59217ec901c718db1f7c93e8febb15afa0b806f10805dec08b10abc1df01ac9b7ba860fc7f501000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="735a863a", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=0xf5) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4) 04:48:20 executing program 2: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:20 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000000)=""/191) (async) ioctl$NBD_DISCONNECT(r0, 0xab08) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x1) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x6000, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x2d}, 0x10) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x20) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r7 = socket(0x23, 0x800, 0x8) connect$bt_sco(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000001c0)={0x20, 0x37, 0x1, {0x2, 0xff, 0x3, 0x0, 0x2, '\xc7^'}}, 0x20) 04:48:20 executing program 2: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:20 executing program 4: r0 = socket(0x28, 0x2, 0x7fffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xa69, 0x7, 0x4, 0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) 04:48:20 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/125, &(0x7f0000000100)=0x7d) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x2, 0x3, 0x400}) write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x1}, 0xb) (async) syz_open_dev$media(&(0x7f0000000040), 0x4ad, 0x800) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x2, @none}, 0xffffffffffffffa7) 04:48:20 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000000)=""/191) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$char_usb(0xc, 0xb4, 0x1) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x6000, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x2d}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x20) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket(0x23, 0x800, 0x8) connect$bt_sco(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000001c0)={0x20, 0x37, 0x1, {0x2, 0xff, 0x3, 0x0, 0x2, '\xc7^'}}, 0x20) 04:48:20 executing program 1: r0 = socket(0x10, 0x2, 0x7) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25030000001000040007000000ffff00000000000014000100fe80000000000000000000000000001314000100fe8000000000000000000000000000bbfabd9c6b2b2d8c37934156717b76fc2f0f10635977c770b59217ec901c718db1f7c93e8febb15afa0b806f10805dec08b10abc1df01ac9b7ba860fc7f501000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="735a863a", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=0xf5) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4) socket(0x10, 0x2, 0x7) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25030000001000040007000000ffff00000000000014000100fe80000000000000000000000000001314000100fe8000000000000000000000000000bbfabd9c6b2b2d8c37934156717b76fc2f0f10635977c770b59217ec901c718db1f7c93e8febb15afa0b806f10805dec08b10abc1df01ac9b7ba860fc7f501000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="735a863a", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4800) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=0xf5) (async) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x9, 0x4) (async) 04:48:20 executing program 2: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) 04:48:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) 04:48:21 executing program 4: r0 = socket(0x1d, 0x4, 0xff) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000340)=0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/247, &(0x7f0000000100)=0xf7) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "c89c5a53a041cff1", "99b7db33776e6bc7734dc8f8ce4de37d", "a59a9693", "5e06fdc496291c49"}, 0x28) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000002c0)={0x0, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0], 0x2, r2}) 04:48:21 executing program 2: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) 04:48:21 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000080)=""/125, &(0x7f0000000100)=0x7d) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r3, 0x40184810, &(0x7f0000000180)={0x2, 0x2, 0x1, 0x2, 0x3, 0x400}) (async) write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x1}, 0xb) (async) syz_open_dev$media(&(0x7f0000000040), 0x4ad, 0x800) connect$bt_sco(r0, &(0x7f0000000000)={0x2, @none}, 0xffffffffffffffa7) 04:48:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r2, 0xc}, 0x10) 04:48:21 executing program 1: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) pidfd_open(0xffffffffffffffff, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 04:48:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async, rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r2, 0xc}, 0x10) (rerun: 32) 04:48:21 executing program 2: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) 04:48:21 executing program 4: r0 = socket(0x1d, 0x4, 0xff) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000340)=0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/247, &(0x7f0000000100)=0xf7) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "c89c5a53a041cff1", "99b7db33776e6bc7734dc8f8ce4de37d", "a59a9693", "5e06fdc496291c49"}, 0x28) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000002c0)={0x0, 0x4}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x10000) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0], 0x2, r2}) 04:48:21 executing program 1: socket(0x1d, 0x2, 0x7) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) pidfd_open(0xffffffffffffffff, 0x0) (async) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 04:48:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 04:48:21 executing program 2: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) 04:48:21 executing program 4: r0 = socket(0x1d, 0x4, 0xff) (async, rerun: 32) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000340)=0x2) (rerun: 32) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000000)=""/247, &(0x7f0000000100)=0xf7) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "c89c5a53a041cff1", "99b7db33776e6bc7734dc8f8ce4de37d", "a59a9693", "5e06fdc496291c49"}, 0x28) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000002c0)={0x0, 0x4}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x9, 0x10000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000180)=[0x0, 0x0], 0x2, r2}) 04:48:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r2, 0xc}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, r2, 0xc}, 0x10) (async) 04:48:21 executing program 2: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:21 executing program 1: socket(0x1d, 0x2, 0x7) (async, rerun: 32) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 32) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) (async) pidfd_open(0xffffffffffffffff, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 04:48:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 04:48:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 04:48:21 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) socket(0x2, 0x2, 0x0) r1 = socket(0x5, 0x2, 0xfffffe00) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x91a9}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000041) 04:48:21 executing program 2: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:21 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) io_uring_setup(0x50d3, &(0x7f0000000080)={0x0, 0xfcfa, 0x80, 0x3, 0x131, 0x0, r0}) 04:48:21 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xfffffd10) 04:48:21 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x80, 0x2, 0x5}, 0x19fa}}, 0x18) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:22 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) io_uring_setup(0x50d3, &(0x7f0000000080)={0x0, 0xfcfa, 0x80, 0x3, 0x131, 0x0, r0}) (async) io_uring_setup(0x50d3, &(0x7f0000000080)={0x0, 0xfcfa, 0x80, 0x3, 0x131, 0x0, r0}) 04:48:22 executing program 2: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) pidfd_open(0xffffffffffffffff, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 04:48:22 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0xfffffd10) 04:48:22 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) socket(0x2, 0x2, 0x0) r1 = socket(0x5, 0x2, 0xfffffe00) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x91a9}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000041) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) (async) socket(0x2, 0x2, 0x0) (async) socket(0x5, 0x2, 0xfffffe00) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x91a9}) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000041) (async) 04:48:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:22 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x80, 0x2, 0x5}, 0x19fa}}, 0x18) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) [ 1131.240171][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:22 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x80, 0x2, 0x5}, 0x19fa}}, 0x18) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:22 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0xfffffd10) 04:48:22 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) io_uring_setup(0x50d3, &(0x7f0000000080)={0x0, 0xfcfa, 0x80, 0x3, 0x131, 0x0, r0}) (async) io_uring_setup(0x50d3, &(0x7f0000000080)={0x0, 0xfcfa, 0x80, 0x3, 0x131, 0x0, r0}) 04:48:22 executing program 2: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) pidfd_open(0xffffffffffffffff, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 04:48:22 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async, rerun: 32) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) (async, rerun: 32) socket(0x2, 0x2, 0x0) r1 = socket(0x5, 0x2, 0xfffffe00) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none, 0x91a9}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000041) (rerun: 64) 04:48:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0xffffffa3, 0x0, 0x6, 0x1000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x1}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x2}, 0xfffffe96) 04:48:22 executing program 2: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) pidfd_open(0xffffffffffffffff, 0x0) ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08) 04:48:22 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$char_usb(r2, &(0x7f0000000080)="e57cf62bee40177584bf32f424478aa5c2ad7a352c76ba1444fc4fc167eb9537056fd65ce905ff0c5b2b1d3bc6284c0f90a964ab5311fe4fe88ccf4d66e2a3661af8263cfa4a028b48ae2193f6f0b1bba0c044776198fce88512bb7acd994cff17cf88a310e0a7d5051173e542dd65db6d7083071177d6ff4437a0ddd5f4dd5da37cc796112b397185d232b4fa377d4d382ee6e0c298be80d36e8e55a76405411cc86fed89b108a3", 0xa8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 04:48:22 executing program 2: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) pidfd_open(0xffffffffffffffff, 0x0) 04:48:22 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0xffffffa3, 0x0, 0x6, 0x1000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x1}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x2}, 0xfffffe96) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0xffffffa3, 0x0, 0x6, 0x1000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) (async) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x1}) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x2}, 0xfffffe96) (async) 04:48:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:23 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x7) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x5, 0x6d1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) 04:48:23 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$char_usb(r2, &(0x7f0000000080)="e57cf62bee40177584bf32f424478aa5c2ad7a352c76ba1444fc4fc167eb9537056fd65ce905ff0c5b2b1d3bc6284c0f90a964ab5311fe4fe88ccf4d66e2a3661af8263cfa4a028b48ae2193f6f0b1bba0c044776198fce88512bb7acd994cff17cf88a310e0a7d5051173e542dd65db6d7083071177d6ff4437a0ddd5f4dd5da37cc796112b397185d232b4fa377d4d382ee6e0c298be80d36e8e55a76405411cc86fed89b108a3", 0xa8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 04:48:23 executing program 4: socket(0x22, 0x80000, 0xffffffff) 04:48:23 executing program 2: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGFLAG(r0, 0x8004480e, &(0x7f0000000000)) 04:48:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0xffffffa3, 0x0, 0x6, 0x1000, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) (async) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x1}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x2}, 0xfffffe96) 04:48:23 executing program 2: socket(0x1d, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) 04:48:23 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301402, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 04:48:23 executing program 4: socket(0x22, 0x80000, 0xffffffff) 04:48:23 executing program 1: gettid() (async) r0 = socket(0x10, 0x2, 0x7) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x5, 0x6d1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) 04:48:23 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$char_usb(r2, &(0x7f0000000080)="e57cf62bee40177584bf32f424478aa5c2ad7a352c76ba1444fc4fc167eb9537056fd65ce905ff0c5b2b1d3bc6284c0f90a964ab5311fe4fe88ccf4d66e2a3661af8263cfa4a028b48ae2193f6f0b1bba0c044776198fce88512bb7acd994cff17cf88a310e0a7d5051173e542dd65db6d7083071177d6ff4437a0ddd5f4dd5da37cc796112b397185d232b4fa377d4d382ee6e0c298be80d36e8e55a76405411cc86fed89b108a3", 0xa8) (async) write$char_usb(r2, &(0x7f0000000080)="e57cf62bee40177584bf32f424478aa5c2ad7a352c76ba1444fc4fc167eb9537056fd65ce905ff0c5b2b1d3bc6284c0f90a964ab5311fe4fe88ccf4d66e2a3661af8263cfa4a028b48ae2193f6f0b1bba0c044776198fce88512bb7acd994cff17cf88a310e0a7d5051173e542dd65db6d7083071177d6ff4437a0ddd5f4dd5da37cc796112b397185d232b4fa377d4d382ee6e0c298be80d36e8e55a76405411cc86fed89b108a3", 0xa8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, 0x0, 0x0) 04:48:23 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301402, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 04:48:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd27, 0xfff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x800, 0x6, 0x6, 0xfffffffe, 0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0xc9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r4, r6, 0xff00, 0xf3, &(0x7f0000000040)="ac0db03742ca5b11eb043d01dae6e77cb890c29b22d407486e0135310f22ab5b8a07e606c9946edc5f57cd2f28e05e5adab9a4c69b693ce0737697abb792a7172c4011f211b227ae66492382fa6ef83352e7df4097405c12ee7319d128b1fd25c00c6ff9771e2acf218dc1c4d80a22c1c88ef49d11456034c6ce3127d4c9381ea7b369ac686e5d487ad9f7b3683003666756fec7b87beb8e9b98ac9ec18ab2552a24502348b8f01d555edeb082ce9350470deaf9fc68ed56dd298e308f0e0d8cc7aa7a28437c406f235f21df0bbf8946e09828e467f99205f036a5f4e2995ab56df141f4b5214d7434eb8c2573c835b9a4d66f", 0x5, 0x0, 0x3, 0x5000, 0x7, 0x0, 0x6, 'syz0\x00'}) connect$bt_sco(r3, &(0x7f0000000000), 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 04:48:24 executing program 4: socket(0x22, 0x80000, 0xffffffff) 04:48:24 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301402, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301402, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) (async) 04:48:24 executing program 1: gettid() r0 = socket(0x10, 0x2, 0x7) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x5, 0x6d1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) gettid() (async) socket(0x10, 0x2, 0x7) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x5, 0x6d1}) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) (async) 04:48:24 executing program 2: socket(0x1d, 0x2, 0x7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 04:48:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040), 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:24 executing program 2: socket(0x1d, 0x2, 0x7) 04:48:24 executing program 4: socket(0x9, 0x6, 0x401) 04:48:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x88f5, 0x10000, 0x807, 0x1, 0x42, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080)="3831fee27af6d7be8da4678fb31218df1ea5508499958af4876440b69d16a6cb7dbc3b31467b1dae48edc399edf6e082cc00658f595d29868b71c94e45ee4a0ce3affb09cc823e42a153b576eede0306c49de346b7c870578485238e85b2b11ab0dee851cac22c877d8b2df425fa78bdf4eb4f67bcfec66f7e794b4682252a34761ae749ceb1c2e9c78cc923", &(0x7f0000000140)=@buf="faa509a6543b70a2c7b7a08cb85d1b715bb5bda5efd0954aa77889fd27b4df1d8366d3b944882ea37252a6643991f04f5ff691324e9ab48725b9a0b19b21c84db181d217569d020dad5d566c4f1630ea739fde242d89a9a96898c3a7348a4a10d42e0a", 0x4}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:24 executing program 1: socket(0x25, 0x80c, 0x3) 04:48:24 executing program 2: socket(0x0, 0x2, 0x7) 04:48:24 executing program 4: socket(0x9, 0x6, 0x401) [ 1133.320400][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd27, 0xfff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x800, 0x6, 0x6, 0xfffffffe, 0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0xc9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r4, r6, 0xff00, 0xf3, &(0x7f0000000040)="ac0db03742ca5b11eb043d01dae6e77cb890c29b22d407486e0135310f22ab5b8a07e606c9946edc5f57cd2f28e05e5adab9a4c69b693ce0737697abb792a7172c4011f211b227ae66492382fa6ef83352e7df4097405c12ee7319d128b1fd25c00c6ff9771e2acf218dc1c4d80a22c1c88ef49d11456034c6ce3127d4c9381ea7b369ac686e5d487ad9f7b3683003666756fec7b87beb8e9b98ac9ec18ab2552a24502348b8f01d555edeb082ce9350470deaf9fc68ed56dd298e308f0e0d8cc7aa7a28437c406f235f21df0bbf8946e09828e467f99205f036a5f4e2995ab56df141f4b5214d7434eb8c2573c835b9a4d66f", 0x5, 0x0, 0x3, 0x5000, 0x7, 0x0, 0x6, 'syz0\x00'}) connect$bt_sco(r3, &(0x7f0000000000), 0x8) (async) connect$bt_sco(r3, &(0x7f0000000000), 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 04:48:24 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x88f5, 0x10000, 0x807, 0x1, 0x42, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080)="3831fee27af6d7be8da4678fb31218df1ea5508499958af4876440b69d16a6cb7dbc3b31467b1dae48edc399edf6e082cc00658f595d29868b71c94e45ee4a0ce3affb09cc823e42a153b576eede0306c49de346b7c870578485238e85b2b11ab0dee851cac22c877d8b2df425fa78bdf4eb4f67bcfec66f7e794b4682252a34761ae749ceb1c2e9c78cc923", &(0x7f0000000140)=@buf="faa509a6543b70a2c7b7a08cb85d1b715bb5bda5efd0954aa77889fd27b4df1d8366d3b944882ea37252a6643991f04f5ff691324e9ab48725b9a0b19b21c84db181d217569d020dad5d566c4f1630ea739fde242d89a9a96898c3a7348a4a10d42e0a", 0x4}, 0x20) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:24 executing program 4: socket(0x9, 0x6, 0x401) socket(0x9, 0x6, 0x401) (async) 04:48:24 executing program 1: socket(0x25, 0x80c, 0x3) 04:48:24 executing program 2: socket(0x0, 0x2, 0x7) 04:48:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250200000014000100fc000000000000000000000000000001050006005c0000001800040001000000ad060000000000001c0f00000080000005000600810000000c00"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4042808}, 0x800) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:25 executing program 4: socket(0x2f, 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x79ee8ab3, 0x101}) 04:48:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x88f5, 0x10000, 0x807, 0x1, 0x42, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000080)="3831fee27af6d7be8da4678fb31218df1ea5508499958af4876440b69d16a6cb7dbc3b31467b1dae48edc399edf6e082cc00658f595d29868b71c94e45ee4a0ce3affb09cc823e42a153b576eede0306c49de346b7c870578485238e85b2b11ab0dee851cac22c877d8b2df425fa78bdf4eb4f67bcfec66f7e794b4682252a34761ae749ceb1c2e9c78cc923", &(0x7f0000000140)=@buf="faa509a6543b70a2c7b7a08cb85d1b715bb5bda5efd0954aa77889fd27b4df1d8366d3b944882ea37252a6643991f04f5ff691324e9ab48725b9a0b19b21c84db181d217569d020dad5d566c4f1630ea739fde242d89a9a96898c3a7348a4a10d42e0a", 0x4}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:25 executing program 1: socket(0x25, 0x80c, 0x3) 04:48:25 executing program 4: socket(0x2f, 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x79ee8ab3, 0x101}) socket(0x2f, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x79ee8ab3, 0x101}) (async) 04:48:25 executing program 2: socket(0x0, 0x2, 0x7) 04:48:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x20}, 0x10) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async, rerun: 64) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x20}, 0x10) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:25 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x0, 0x0, 0xb72, 0x2, 0xffff, 0x2, 0x1000, 0x1, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x4, 0xaa4b, 0x0, 0x1, 0x7}) socket(0x10, 0x2, 0x7) 04:48:25 executing program 4: socket(0x2f, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x79ee8ab3, 0x101}) 04:48:25 executing program 2: socket(0x1d, 0x0, 0x7) 04:48:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250200000014000100fc000000000000000000000000000001050006005c0000001800040001000000ad060000000000001c0f00000080000005000600810000000c00"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4042808}, 0x800) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd27, 0xfff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x800, 0x6, 0x6, 0xfffffffe, 0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0xc9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r4, r6, 0xff00, 0xf3, &(0x7f0000000040)="ac0db03742ca5b11eb043d01dae6e77cb890c29b22d407486e0135310f22ab5b8a07e606c9946edc5f57cd2f28e05e5adab9a4c69b693ce0737697abb792a7172c4011f211b227ae66492382fa6ef83352e7df4097405c12ee7319d128b1fd25c00c6ff9771e2acf218dc1c4d80a22c1c88ef49d11456034c6ce3127d4c9381ea7b369ac686e5d487ad9f7b3683003666756fec7b87beb8e9b98ac9ec18ab2552a24502348b8f01d555edeb082ce9350470deaf9fc68ed56dd298e308f0e0d8cc7aa7a28437c406f235f21df0bbf8946e09828e467f99205f036a5f4e2995ab56df141f4b5214d7434eb8c2573c835b9a4d66f", 0x5, 0x0, 0x3, 0x5000, 0x7, 0x0, 0x6, 'syz0\x00'}) connect$bt_sco(r3, &(0x7f0000000000), 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) connect$bt_sco(r0, 0x0, 0x0) 04:48:25 executing program 2: socket(0x1d, 0x0, 0x7) 04:48:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x20}, 0x10) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:25 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) socket(0x2, 0x2, 0x0) 04:48:25 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:25 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x0, 0x0, 0xb72, 0x2, 0xffff, 0x2, 0x1000, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x4, 0xaa4b, 0x0, 0x1, 0x7}) (async, rerun: 32) socket(0x10, 0x2, 0x7) (rerun: 32) 04:48:26 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) socket(0x2, 0x2, 0x0) 04:48:26 executing program 2: socket(0x1d, 0x0, 0x7) 04:48:26 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x3}) connect$bt_sco(r0, 0x0, 0x700) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000340)={r3, 0x3}) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0], 0x2, r5}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, '/dev/dri/renderD128\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/dlm-control\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x5011}, 0x42000) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000280)=""/42, &(0x7f00000002c0)=0x2a) 04:48:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf250200000014000100fc000000000000000000000000000001050006005c0000001800040001000000ad060000000000001c0f00000080000005000600810000000c00"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4042808}, 0x800) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) 04:48:26 executing program 4: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) socket(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) socket(0x2, 0x2, 0x0) (async) 04:48:26 executing program 2: socket(0x1d, 0x2, 0x0) 04:48:26 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:26 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x3}) connect$bt_sco(r0, 0x0, 0x700) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000340)={r3, 0x3}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000340)={r3, 0x3}) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0], 0x2, r5}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, '/dev/dri/renderD128\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/dlm-control\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x5011}, 0x42000) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000280)=""/42, &(0x7f00000002c0)=0x2a) 04:48:26 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="775b9332134d9ca0df2501000000200000000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4004) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010000040006000b401a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 04:48:26 executing program 4: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket(0x21, 0x1, 0x80000000) [ 1135.083718][T22633] can: request_module (can-proto-0) failed. [ 1135.400154][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x3}) connect$bt_sco(r0, 0x0, 0x700) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000340)={r3, 0x3}) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0x7, 0x4, 0x3}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0], 0x2, r5}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, '/dev/dri/renderD128\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/dlm-control\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x5011}, 0x42000) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000280)=""/42, &(0x7f00000002c0)=0x2a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0], &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x3}) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000340)={r3, 0x3}) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x1, 0x7, 0x4, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0], 0x2, r5}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x18, 0x1, '/dev/dri/renderD128\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/dev/dlm-control\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x5011}, 0x42000) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000280)=""/42, &(0x7f00000002c0)=0x2a) (async) 04:48:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0xd3, 0x4, 0x7}}, 0x14) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x9) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) socket(0x29, 0x19a5d6a1c36b7618, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:26 executing program 2: socket(0x1d, 0x2, 0x0) 04:48:26 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="775b9332134d9ca0df2501000000200000000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4004) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010000040006000b401a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 04:48:26 executing program 4: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket(0x21, 0x1, 0x80000000) 04:48:26 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x0, 0x0, 0xb72, 0x2, 0xffff, 0x2, 0x1000, 0x1, 0x1}) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x4, 0xaa4b, 0x0, 0x1, 0x7}) socket(0x10, 0x2, 0x7) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x0, 0x0, 0xb72, 0x2, 0xffff, 0x2, 0x1000, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x4, 0xaa4b, 0x0, 0x1, 0x7}) (async) socket(0x10, 0x2, 0x7) (async) 04:48:26 executing program 4: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) socket(0x21, 0x1, 0x80000000) 04:48:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x3, "bdd836"}) 04:48:26 executing program 5: sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="775b9332134d9ca0df2501000000200000000b000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x4004) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00010000040006000b401a000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 04:48:26 executing program 2: socket(0x1d, 0x2, 0x0) 04:48:26 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000}) socket(0x2, 0x2, 0x0) [ 1135.680150][T22686] can: request_module (can-proto-0) failed. 04:48:26 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x3, "bdd836"}) 04:48:26 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x860}, 0x4004044) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x0, &(0x7f0000000080)=""/240, 0xf0}, &(0x7f00000001c0)=0x40) [ 1135.826402][T22714] can: request_module (can-proto-0) failed. 04:48:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0xd3, 0x4, 0x7}}, 0x14) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x9) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) socket(0x29, 0x19a5d6a1c36b7618, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:27 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0xe97, &(0x7f0000000000)={0x0, 0x3bb5, 0x320, 0x3, 0x2e0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x7629, &(0x7f0000000100)={0x0, 0xe0f, 0x200, 0x1, 0x297, 0x0, r1}) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:27 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000}) (async) socket(0x2, 0x2, 0x0) 04:48:27 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x3, "bdd836"}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, 0x0, 0x700) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000000)={0x3, "bdd836"}) (async) 04:48:27 executing program 2: socket(0x1d, 0x2, 0x0) 04:48:27 executing program 1: r0 = socket(0x10, 0x2, 0x7) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x860}, 0x4004044) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x0, &(0x7f0000000080)=""/240, 0xf0}, &(0x7f00000001c0)=0x40) 04:48:27 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r0, 0x0, 0x700) 04:48:27 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000}) socket(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2, 0x80000}) (async) socket(0x2, 0x2, 0x0) (async) 04:48:27 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0xe97, &(0x7f0000000000)={0x0, 0x3bb5, 0x320, 0x3, 0x2e0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x7629, &(0x7f0000000100)={0x0, 0xe0f, 0x200, 0x1, 0x297, 0x0, r1}) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:27 executing program 2: r0 = socket(0x10, 0x2, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x860}, 0x4004044) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x0, &(0x7f0000000080)=""/240, 0xf0}, &(0x7f00000001c0)=0x40) 04:48:27 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) connect$bt_sco(r0, 0x0, 0x700) 04:48:27 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_io_uring_setup(0xe97, &(0x7f0000000000)={0x0, 0x3bb5, 0x320, 0x3, 0x2e0}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x7629, &(0x7f0000000100)={0x0, 0xe0f, 0x200, 0x1, 0x297, 0x0, r1}) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_io_uring_setup(0xe97, &(0x7f0000000000)={0x0, 0x3bb5, 0x320, 0x3, 0x2e0}, &(0x7f0000000080), &(0x7f00000000c0)) (async) io_uring_setup(0x7629, &(0x7f0000000100)={0x0, 0xe0f, 0x200, 0x1, 0x297, 0x0, r1}) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) (async) [ 1136.562561][T22722] can: request_module (can-proto-0) failed. 04:48:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0xd3, 0x4, 0x7}}, 0x14) (async) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x9) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) socket(0x29, 0x19a5d6a1c36b7618, 0x1) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:28 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = io_uring_setup(0x6504, &(0x7f0000000080)={0x0, 0xae6, 0x40, 0x3, 0x291}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) socket(0xb, 0x8, 0x0) 04:48:28 executing program 1: r0 = socket(0x10, 0x2, 0x7) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x860}, 0x4004044) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/71, 0x47, 0x0, &(0x7f0000000080)=""/240, 0xf0}, &(0x7f00000001c0)=0x40) 04:48:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') connect$bt_sco(r0, &(0x7f0000000040)={0x2}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 04:48:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (rerun: 64) connect$bt_sco(r0, 0x0, 0x700) 04:48:28 executing program 2: socket(0x1d, 0x0, 0x7) 04:48:28 executing program 2: socket(0x1d, 0x0, 0x7) 04:48:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') connect$bt_sco(r0, &(0x7f0000000040)={0x2}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async) connect$bt_sco(r0, &(0x7f0000000040)={0x2}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) 04:48:28 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r1 = io_uring_setup(0x6504, &(0x7f0000000080)={0x0, 0xae6, 0x40, 0x3, 0x291}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) (async) socket(0xb, 0x8, 0x0) 04:48:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') connect$bt_sco(r0, &(0x7f0000000040)={0x2}, 0x8) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 04:48:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x78041, 0x0) 04:48:28 executing program 1: socket(0x10, 0xa, 0x7) 04:48:28 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) io_uring_setup(0x6504, &(0x7f0000000080)={0x0, 0xae6, 0x40, 0x3, 0x291}) (async) r1 = io_uring_setup(0x6504, &(0x7f0000000080)={0x0, 0xae6, 0x40, 0x3, 0x291}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0]}) socket(0xb, 0x8, 0x0) 04:48:28 executing program 2: socket(0x1d, 0x0, 0x7) 04:48:28 executing program 2: socket(0x0, 0x0, 0x7) 04:48:28 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000040)={0x2}, 0x8) (async, rerun: 32) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 04:48:28 executing program 1: socket(0x10, 0xa, 0x7) 04:48:28 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x0, 0x2, 0x70bd27, 0xfff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x800, 0x6, 0x6, 0xfffffffe, 0x9]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0xc9]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r4, r6, 0xff00, 0xf3, &(0x7f0000000040)="ac0db03742ca5b11eb043d01dae6e77cb890c29b22d407486e0135310f22ab5b8a07e606c9946edc5f57cd2f28e05e5adab9a4c69b693ce0737697abb792a7172c4011f211b227ae66492382fa6ef83352e7df4097405c12ee7319d128b1fd25c00c6ff9771e2acf218dc1c4d80a22c1c88ef49d11456034c6ce3127d4c9381ea7b369ac686e5d487ad9f7b3683003666756fec7b87beb8e9b98ac9ec18ab2552a24502348b8f01d555edeb082ce9350470deaf9fc68ed56dd298e308f0e0d8cc7aa7a28437c406f235f21df0bbf8946e09828e467f99205f036a5f4e2995ab56df141f4b5214d7434eb8c2573c835b9a4d66f", 0x5, 0x0, 0x3, 0x5000, 0x7, 0x0, 0x6, 'syz0\x00'}) connect$bt_sco(r3, &(0x7f0000000000), 0x8) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) [ 1137.480237][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:28 executing program 4: r0 = socket(0x2, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x62dda9ea, 0xc00) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x1, 0xffffffff, 0xff}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000004c67e054d0b876433230f62eb1bd09599f3fdeab3542d3cb22674bb5a3975af5101d29e20a236b73e1b383321a00000dff6058204bf6ab652008802091abe57441e70961450f48db440129f2d741eec83110dcb4f0a86c4c2f48a28f332d09adf49004376", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 04:48:28 executing program 1: socket(0x10, 0xa, 0x7) 04:48:28 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r0, r1, r2, 0x1, 0x8, 0x4, 0xfee, 0x1, 0x9, 0x244ae136, 0x1, 0xdb7}) socket(0x10, 0x2, 0x7) 04:48:28 executing program 2: socket(0x0, 0x0, 0x7) 04:48:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x78041, 0x0) 04:48:29 executing program 4: r0 = socket(0x2, 0x2, 0x0) (async) syz_open_dev$media(&(0x7f0000000100), 0x62dda9ea, 0xc00) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x1, 0xffffffff, 0xff}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000004c67e054d0b876433230f62eb1bd09599f3fdeab3542d3cb22674bb5a3975af5101d29e20a236b73e1b383321a00000dff6058204bf6ab652008802091abe57441e70961450f48db440129f2d741eec83110dcb4f0a86c4c2f48a28f332d09adf49004376", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 04:48:29 executing program 5: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x301402, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) connect$bt_sco(r0, &(0x7f0000000440)={0x2}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 04:48:29 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r0, r1, r2, 0x1, 0x8, 0x4, 0xfee, 0x1, 0x9, 0x244ae136, 0x1, 0xdb7}) socket(0x10, 0x2, 0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r0, r1, r2, 0x1, 0x8, 0x4, 0xfee, 0x1, 0x9, 0x244ae136, 0x1, 0xdb7}) (async) socket(0x10, 0x2, 0x7) (async) 04:48:29 executing program 2: socket(0x0, 0x0, 0x7) 04:48:29 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x78041, 0x0) 04:48:29 executing program 5: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:29 executing program 4: socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000100), 0x62dda9ea, 0xc00) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x1, 0xffffffff, 0xff}) (async) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000140)={0x1, 0xffffffff, 0xff}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000004c67e054d0b876433230f62eb1bd09599f3fdeab3542d3cb22674bb5a3975af5101d29e20a236b73e1b383321a00000dff6058204bf6ab652008802091abe57441e70961450f48db440129f2d741eec83110dcb4f0a86c4c2f48a28f332d09adf49004376", @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 04:48:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/221, &(0x7f0000000140)=0xdd) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x78041, 0x0) 04:48:29 executing program 2: socket(0x1d, 0x0, 0x0) 04:48:29 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={r0, r1, r2, 0x1, 0x8, 0x4, 0xfee, 0x1, 0x9, 0x244ae136, 0x1, 0xdb7}) (async) socket(0x10, 0x2, 0x7) 04:48:29 executing program 5: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:29 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0xe0, 0xb7, &(0x7f00000001c0)="6d9fb6079f8a205a0925cdf2042210ff53b16a0a8098baf096dce7d6fe1a963f1d903cdda58d682fbf8f8a9d4eb3e216560a461d37a4cc3fc6bea4df062bc7a1efe2165792655568de2667a516240000f67803591724c4039cba3a498c88f84ac1884472d6637faa954e70ba28460d65e2284f9ef306b14fcc8cbe2d6448bd89dc675d7182fd017c8478336743ecaf7e59de37c69a4df354ac3f0daa628431015c59e1c7f3ac9c124003bbca1af850f0dabeedf41c0e22", 0x0, 0x2, 0x0, 0x2eaf, 0x400, 0x2, 0x80, 'syz1\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="d6cad6fcc5b4eb43e2e6418e6bf087664e807f7cddfc620c4c8b081e68ede9d5db05fe68c855fe0feb7c87dc3f2f413a3279530c915a4ed751c2c5a15178fff9e8f9c0e06406018dd591e8ce62e2542bef439b107b97ea471ea81fd135c0c4", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000180)) 04:48:29 executing program 4: r0 = socket(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0xe0, 0xb7, &(0x7f00000001c0)="6d9fb6079f8a205a0925cdf2042210ff53b16a0a8098baf096dce7d6fe1a963f1d903cdda58d682fbf8f8a9d4eb3e216560a461d37a4cc3fc6bea4df062bc7a1efe2165792655568de2667a516240000f67803591724c4039cba3a498c88f84ac1884472d6637faa954e70ba28460d65e2284f9ef306b14fcc8cbe2d6448bd89dc675d7182fd017c8478336743ecaf7e59de37c69a4df354ac3f0daa628431015c59e1c7f3ac9c124003bbca1af850f0dabeedf41c0e22", 0x0, 0x2, 0x0, 0x2eaf, 0x400, 0x2, 0x80, 'syz1\x00'}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="d6cad6fcc5b4eb43e2e6418e6bf087664e807f7cddfc620c4c8b081e68ede9d5db05fe68c855fe0feb7c87dc3f2f413a3279530c915a4ed751c2c5a15178fff9e8f9c0e06406018dd591e8ce62e2542bef439b107b97ea471ea81fd135c0c4", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000180)) (rerun: 32) 04:48:29 executing program 5: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:29 executing program 5: socket(0x23, 0x5, 0x0) 04:48:29 executing program 2: socket(0x1d, 0x0, 0x0) [ 1138.549440][T22850] can: request_module (can-proto-0) failed. [ 1138.637270][T22874] can: request_module (can-proto-0) failed. 04:48:30 executing program 3: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:30 executing program 1: r0 = socket(0x10, 0x2, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 04:48:30 executing program 5: socket(0x0, 0x5, 0x0) 04:48:30 executing program 2: socket(0x1d, 0x0, 0x0) 04:48:30 executing program 4: r0 = socket(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0xe0, 0xb7, &(0x7f00000001c0)="6d9fb6079f8a205a0925cdf2042210ff53b16a0a8098baf096dce7d6fe1a963f1d903cdda58d682fbf8f8a9d4eb3e216560a461d37a4cc3fc6bea4df062bc7a1efe2165792655568de2667a516240000f67803591724c4039cba3a498c88f84ac1884472d6637faa954e70ba28460d65e2284f9ef306b14fcc8cbe2d6448bd89dc675d7182fd017c8478336743ecaf7e59de37c69a4df354ac3f0daa628431015c59e1c7f3ac9c124003bbca1af850f0dabeedf41c0e22", 0x0, 0x2, 0x0, 0x2eaf, 0x400, 0x2, 0x80, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r0, 0xe0, 0xb7, &(0x7f00000001c0)="6d9fb6079f8a205a0925cdf2042210ff53b16a0a8098baf096dce7d6fe1a963f1d903cdda58d682fbf8f8a9d4eb3e216560a461d37a4cc3fc6bea4df062bc7a1efe2165792655568de2667a516240000f67803591724c4039cba3a498c88f84ac1884472d6637faa954e70ba28460d65e2284f9ef306b14fcc8cbe2d6448bd89dc675d7182fd017c8478336743ecaf7e59de37c69a4df354ac3f0daa628431015c59e1c7f3ac9c124003bbca1af850f0dabeedf41c0e22", 0x0, 0x2, 0x0, 0x2eaf, 0x400, 0x2, 0x80, 'syz1\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="d6cad6fcc5b4eb43e2e6418e6bf087664e807f7cddfc620c4c8b081e68ede9d5db05fe68c855fe0feb7c87dc3f2f413a3279530c915a4ed751c2c5a15178fff9e8f9c0e06406018dd591e8ce62e2542bef439b107b97ea471ea81fd135c0c4", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000180)) 04:48:30 executing program 1: socket(0x10, 0x2, 0x7) (async) r0 = socket(0x10, 0x2, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 04:48:30 executing program 5: socket(0x0, 0x5, 0x0) 04:48:30 executing program 0: r0 = syz_io_uring_setup(0x4b2c, &(0x7f0000000040)={0x0, 0x439b, 0x800, 0x2, 0x2fd}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:30 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f0000000000)=""/191) ioctl$NBD_DISCONNECT(r0, 0xab08) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000040)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x6000, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r4, 0x2d}, 0x10) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x20) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r6, 0x4004480f, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = socket(0x23, 0x800, 0x8) connect$bt_sco(r7, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RGETLOCK(r8, &(0x7f00000001c0)={0x20, 0x37, 0x1, {0x2, 0xff, 0x3, 0x0, 0x2, '\xc7^'}}, 0x20) 04:48:30 executing program 4: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x487e, 0x1, 0x8, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r0 = socket(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x6, 0xa3, 0x800}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xa040}, 0x10) 04:48:30 executing program 1: r0 = socket(0x10, 0x2, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socket(0x10, 0x2, 0x7) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) 04:48:30 executing program 5: socket(0x0, 0x5, 0x0) 04:48:30 executing program 4: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x487e, 0x1, 0x8, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r0 = socket(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x6, 0xa3, 0x800}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xa040}, 0x10) 04:48:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) [ 1139.438462][T22885] can: request_module (can-proto-0) failed. 04:48:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000cb0b980a6d562ac5698000000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x6101}, 0x24004010) socket(0x2, 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$P9_RXATTRWALK(r2, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x626}, 0xf) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x0, 0xfff}) 04:48:30 executing program 4: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x487e, 0x1, 0x8, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) r0 = socket(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x6, 0x6, 0xa3, 0x800}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xa040}, 0x10) 04:48:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x111601, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r0, 0x0, 0xffffffffffffff10) 04:48:30 executing program 3: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x4}}}, 0x18) socket(0x2b, 0x5, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x1}, 0xf) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xe8fe}, 0xb) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000000140)) socket(0x6, 0x1, 0xc001) 04:48:30 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000100)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) connect$bt_sco(r1, &(0x7f0000000140), 0x8) [ 1139.560309][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:48:31 executing program 5: socket(0x23, 0x0, 0x0) 04:48:31 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:31 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) socket(0x10, 0x2, 0x7) 04:48:31 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:31 executing program 3: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) 04:48:31 executing program 0: r0 = syz_io_uring_setup(0x4b2c, &(0x7f0000000040)={0x0, 0x439b, 0x800, 0x2, 0x2fd}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:31 executing program 5: socket(0x23, 0x0, 0x0) 04:48:31 executing program 5: socket(0x23, 0x0, 0x0) 04:48:31 executing program 4: r0 = socket(0x2, 0x2, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:31 executing program 4: r0 = socket(0x2, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) (async) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:31 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) socket(0x10, 0x2, 0x7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) (async) socket(0x10, 0x2, 0x7) (async) 04:48:31 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:31 executing program 3: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) 04:48:31 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) socket(0x15, 0x2, 0x20000) 04:48:31 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:32 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) socket(0x15, 0x2, 0x20000) 04:48:32 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) socket(0x15, 0x2, 0x20000) (async) socket(0x15, 0x2, 0x20000) 04:48:32 executing program 0: r0 = syz_io_uring_setup(0x4b2c, &(0x7f0000000040)={0x0, 0x439b, 0x800, 0x2, 0x2fd}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:32 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:32 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) socket(0x10, 0x2, 0x7) 04:48:32 executing program 3: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) 04:48:32 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:32 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) socket(0x15, 0x2, 0x20000) pipe2$9p(&(0x7f0000000000), 0x80) (async) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) (async) socket(0x15, 0x2, 0x20000) (async) 04:48:32 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:48:32 executing program 1: socket(0x10, 0x2, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x5e0, 0x2, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x9}, 0x48) 04:48:32 executing program 5: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) socket(0x2, 0x2, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c20400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) 04:48:32 executing program 3: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) 04:48:32 executing program 1: socket(0x10, 0x2, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x5e0, 0x2, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x9}, 0x48) [ 1141.640050][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:48:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) socket(0x2, 0x2, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c20400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) 04:48:33 executing program 5: r0 = socket(0x2, 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:48:33 executing program 1: socket(0x10, 0x2, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1ff, 0x7, 0x5e0, 0x2, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x9}, 0x48) 04:48:33 executing program 3: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x0, 0x0, 0x2d74ffa8, 0x8, 0x7ff, 0x4ce, 0x9}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) 04:48:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) socket(0x2, 0x2, 0x0) (async) socket(0x2, 0x2, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c20400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c20400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) 04:48:33 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:33 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:33 executing program 4: socket(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigaction(0xffffffff, &(0x7f0000000080)={&(0x7f0000000000)="c481b0588dc46232f5222666430f38418e00506666c42181f96000d8edc4a3697c36003666450f38f821660f383806c423dd7e2a00c462791c7206", 0x40000003, &(0x7f0000000040)="43150e000000ddca3647d9e0c4010dd039c4212e2ae58fc978e2a808000000ab0fef0367f00fba29ed660f7eaafcffffff", {[0x3]}}, &(0x7f0000000140)={&(0x7f00000000c0)="446f26660ffa888b3f0000c402f91e1f660fea97001000020f44d22ef0430044870cc4e1792e063e65460f1aae80000000c4c3517f6b0a000f0b", 0x0, &(0x7f0000000100)="c44139ef470036437d43c481e5df420fc442f931620fc4e179113d56d96cb8674488d93e660fe909f7533666460f6f53ea8fe878c2803dbb000000"}, 0x8, &(0x7f0000000180)) 04:48:33 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:33 executing program 1: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) socket(0x10, 0x2, 0x80000001) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x9}, 0xb) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) 04:48:33 executing program 5: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:33 executing program 4: socket(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigaction(0xffffffff, &(0x7f0000000080)={&(0x7f0000000000)="c481b0588dc46232f5222666430f38418e00506666c42181f96000d8edc4a3697c36003666450f38f821660f383806c423dd7e2a00c462791c7206", 0x40000003, &(0x7f0000000040)="43150e000000ddca3647d9e0c4010dd039c4212e2ae58fc978e2a808000000ab0fef0367f00fba29ed660f7eaafcffffff", {[0x3]}}, &(0x7f0000000140)={&(0x7f00000000c0)="446f26660ffa888b3f0000c402f91e1f660fea97001000020f44d22ef0430044870cc4e1792e063e65460f1aae80000000c4c3517f6b0a000f0b", 0x0, &(0x7f0000000100)="c44139ef470036437d43c481e5df420fc442f931620fc4e179113d56d96cb8674488d93e660fe909f7533666460f6f53ea8fe878c2803dbb000000"}, 0x8, &(0x7f0000000180)) 04:48:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:48:33 executing program 5: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:33 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x0, 0x0, 0x2d74ffa8, 0x8, 0x7ff, 0x4ce, 0x9}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x0, 0x0, 0x2d74ffa8, 0x8, 0x7ff, 0x4ce, 0x9}) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) (async) 04:48:33 executing program 4: socket(0x2, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigaction(0xffffffff, &(0x7f0000000080)={&(0x7f0000000000)="c481b0588dc46232f5222666430f38418e00506666c42181f96000d8edc4a3697c36003666450f38f821660f383806c423dd7e2a00c462791c7206", 0x40000003, &(0x7f0000000040)="43150e000000ddca3647d9e0c4010dd039c4212e2ae58fc978e2a808000000ab0fef0367f00fba29ed660f7eaafcffffff", {[0x3]}}, &(0x7f0000000140)={&(0x7f00000000c0)="446f26660ffa888b3f0000c402f91e1f660fea97001000020f44d22ef0430044870cc4e1792e063e65460f1aae80000000c4c3517f6b0a000f0b", 0x0, &(0x7f0000000100)="c44139ef470036437d43c481e5df420fc442f931620fc4e179113d56d96cb8674488d93e660fe909f7533666460f6f53ea8fe878c2803dbb000000"}, 0x8, &(0x7f0000000180)) 04:48:33 executing program 1: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) (async) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) socket(0x10, 0x2, 0x80000001) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x9}, 0xb) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) 04:48:33 executing program 5: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:33 executing program 3: r0 = socket(0x0, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:33 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20040045) 04:48:33 executing program 1: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) socket(0x10, 0x2, 0x80000001) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x9}, 0xb) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) (async) socket(0x10, 0x2, 0x80000001) (async) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x9}, 0xb) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) write$P9_RUNLINKAT(r0, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) (async) 04:48:33 executing program 5: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:34 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "b7b87b1313f9cf01", "d282b1157b86bcdf667256ed90342398", "dc79ac78", "fb6b1ffee6b59cb3"}, 0x28) r1 = socket(0x3, 0x3, 0x5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0xfffffeb1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 04:48:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085) r1 = syz_io_uring_setup(0x70b1, &(0x7f0000000000)={0x0, 0xc1b0, 0x400, 0x3, 0x8c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x1003, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) socket(0x1e, 0x800, 0x7) 04:48:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000000c0)={0x0, 0x0, 0x2d74ffa8, 0x8, 0x7ff, 0x4ce, 0x9}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) 04:48:34 executing program 3: r0 = socket(0x0, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:34 executing program 4: socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "b7b87b1313f9cf01", "d282b1157b86bcdf667256ed90342398", "dc79ac78", "fb6b1ffee6b59cb3"}, 0x28) r1 = socket(0x3, 0x3, 0x5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0xfffffeb1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 04:48:34 executing program 5: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:34 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r7, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r8, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) 04:48:34 executing program 4: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "b7b87b1313f9cf01", "d282b1157b86bcdf667256ed90342398", "dc79ac78", "fb6b1ffee6b59cb3"}, 0x28) r1 = socket(0x3, 0x3, 0x5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0xfffffeb1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket(0x2, 0x2, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "b7b87b1313f9cf01", "d282b1157b86bcdf667256ed90342398", "dc79ac78", "fb6b1ffee6b59cb3"}, 0x28) (async) socket(0x3, 0x3, 0x5) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0xfffffeb1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 04:48:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085) (async) r1 = syz_io_uring_setup(0x70b1, &(0x7f0000000000)={0x0, 0xc1b0, 0x400, 0x3, 0x8c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x1003, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) socket(0x1e, 0x800, 0x7) 04:48:34 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xaeee, 0x800, 0x1, 0x2f}, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, 0xffffffffffffffff, r2, r0], 0x4) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000180)={0x9, 0x4}) 04:48:34 executing program 3: r0 = socket(0x0, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:34 executing program 5: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000085) syz_io_uring_setup(0x70b1, &(0x7f0000000000)={0x0, 0xc1b0, 0x400, 0x3, 0x8c}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r1 = syz_io_uring_setup(0x70b1, &(0x7f0000000000)={0x0, 0xc1b0, 0x400, 0x3, 0x8c}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000180)={0x1003, 0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) socket(0x1e, 0x800, 0x7) 04:48:34 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) [ 1143.720005][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x40004) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:34 executing program 3: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:34 executing program 4: r0 = socket(0x2, 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xaeee, 0x800, 0x1, 0x2f}, &(0x7f0000000080), &(0x7f00000000c0)) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, 0xffffffffffffffff, r2, r0], 0x4) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000180)={0x9, 0x4}) 04:48:34 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:34 executing program 1: socket(0x5, 0x2, 0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x1b}, @map_fd={0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x4, 0x1, 0x1, 0x4, 0xfffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x2, 0x5, &(0x7f00000000c0)=""/5, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0xf79, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[r1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x5, 0x9, 0xd}, {0x0, 0x1, 0xc, 0xb}, {0x1, 0x1, 0x1, 0x5}, {0x0, 0x3, 0x0, 0x9}], 0x10, 0x99b}, 0x90) 04:48:34 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) 04:48:35 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x7, &(0x7f0000000000)={0x0, 0xaeee, 0x800, 0x1, 0x2f}, &(0x7f0000000080), &(0x7f00000000c0)) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r0, 0xffffffffffffffff, r2, r0], 0x4) (async, rerun: 64) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000180)={0x9, 0x4}) (rerun: 64) 04:48:35 executing program 3: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:35 executing program 3: r0 = socket(0x23, 0x0, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:35 executing program 1: socket(0x5, 0x2, 0x8) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 32) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x1b}, @map_fd={0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x4, 0x1, 0x1, 0x4, 0xfffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x2, 0x5, &(0x7f00000000c0)=""/5, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0xf79, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[r1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x5, 0x9, 0xd}, {0x0, 0x1, 0xc, 0xb}, {0x1, 0x1, 0x1, 0x5}, {0x0, 0x3, 0x0, 0x9}], 0x10, 0x99b}, 0x90) 04:48:35 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x80, 0x86, &(0x7f0000000000)="3477d955fdd1871074f896d0025f854dbf5bd2350711501cdad7a17bb1325f828e0e204d70918e2a3b5e6bc7c0a172a1c6ce278cace938c43ee317332b3821170a91cce537077e4b304f5f7e93c12da995e7ef54ab0a73bc99788ddfddc6ee0fe465b3e2c3119cef284451f074d090735dbb71ca784640ac2a3f824ab863b2230d1670ebb919", 0x5, 0xcb, 0x4, 0x1, 0x17ef, 0x4, 0x8000, 'syz1\x00'}) 04:48:35 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:35 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x40004) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x40004) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:35 executing program 4: r0 = socket(0x2, 0x2, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x80, 0x86, &(0x7f0000000000)="3477d955fdd1871074f896d0025f854dbf5bd2350711501cdad7a17bb1325f828e0e204d70918e2a3b5e6bc7c0a172a1c6ce278cace938c43ee317332b3821170a91cce537077e4b304f5f7e93c12da995e7ef54ab0a73bc99788ddfddc6ee0fe465b3e2c3119cef284451f074d090735dbb71ca784640ac2a3f824ab863b2230d1670ebb919", 0x5, 0xcb, 0x4, 0x1, 0x17ef, 0x4, 0x8000, 'syz1\x00'}) 04:48:35 executing program 3: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:35 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = socket(0xa, 0x1, 0x5) bind$bt_sco(r6, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 04:48:35 executing program 1: socket(0x5, 0x2, 0x8) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x1b}, @map_fd={0x18, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x4, 0x1, 0x1, 0x4, 0xfffffffd}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x2, 0x5, &(0x7f00000000c0)=""/5, 0x41000, 0x20, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x3, 0xf79, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000180)=[r1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x4, 0x5, 0x9, 0xd}, {0x0, 0x1, 0xc, 0xb}, {0x1, 0x1, 0x1, 0x5}, {0x0, 0x3, 0x0, 0x9}], 0x10, 0x99b}, 0x90) 04:48:35 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:35 executing program 4: r0 = socket(0x2, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x80, 0x86, &(0x7f0000000000)="3477d955fdd1871074f896d0025f854dbf5bd2350711501cdad7a17bb1325f828e0e204d70918e2a3b5e6bc7c0a172a1c6ce278cace938c43ee317332b3821170a91cce537077e4b304f5f7e93c12da995e7ef54ab0a73bc99788ddfddc6ee0fe465b3e2c3119cef284451f074d090735dbb71ca784640ac2a3f824ab863b2230d1670ebb919", 0x5, 0xcb, 0x4, 0x1, 0x17ef, 0x4, 0x8000, 'syz1\x00'}) 04:48:35 executing program 3: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) 04:48:35 executing program 1: socket(0x27, 0x2, 0x7) 04:48:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 64) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x40004) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:35 executing program 1: socket(0x27, 0x2, 0x7) 04:48:35 executing program 3: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) 04:48:35 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) socket(0xa, 0x1, 0x5) 04:48:35 executing program 4: socket(0x2, 0x2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) io_uring_setup(0x235, &(0x7f0000000000)={0x0, 0x4fe6, 0x800, 0x3, 0x3af, 0x0, r0}) 04:48:36 executing program 5: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:36 executing program 1: socket(0x27, 0x2, 0x7) 04:48:36 executing program 4: socket(0x2, 0x2, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) io_uring_setup(0x235, &(0x7f0000000000)={0x0, 0x4fe6, 0x800, 0x3, 0x3af, 0x0, r0}) 04:48:36 executing program 5: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x4) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 04:48:36 executing program 3: r0 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) 04:48:36 executing program 1: socket(0x10, 0x80000, 0x7) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 04:48:36 executing program 5: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:36 executing program 4: socket(0x2, 0x2, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) io_uring_setup(0x235, &(0x7f0000000000)={0x0, 0x4fe6, 0x800, 0x3, 0x3af, 0x0, r0}) 04:48:36 executing program 3: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:36 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) 04:48:36 executing program 1: socket(0x10, 0x80000, 0x7) (async, rerun: 64) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) (rerun: 64) 04:48:36 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) 04:48:36 executing program 1: socket(0x10, 0x80000, 0x7) (async) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 04:48:36 executing program 3: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:36 executing program 4: r0 = syz_io_uring_setup(0x10e2, &(0x7f0000000000)={0x0, 0xfffffffd, 0x40a, 0xfffffffc}, 0x0, 0x0) r1 = syz_io_uring_setup(0x4fda, &(0x7f0000000080)={0x0, 0xc5bb, 0x100, 0x3, 0x2db, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x190018400, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x7}, &(0x7f0000000240)=""/162, 0xa2, &(0x7f0000000300)=""/211, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[r1, r2, r1], 0x3) socket(0x2, 0x2, 0x0) [ 1145.800049][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 04:48:36 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 04:48:36 executing program 1: r0 = socket(0x10, 0x2, 0x7) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 04:48:36 executing program 3: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:36 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) 04:48:36 executing program 4: r0 = syz_io_uring_setup(0x10e2, &(0x7f0000000000)={0x0, 0xfffffffd, 0x40a, 0xfffffffc}, 0x0, 0x0) r1 = syz_io_uring_setup(0x4fda, &(0x7f0000000080)={0x0, 0xc5bb, 0x100, 0x3, 0x2db, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x190018400, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x7}, &(0x7f0000000240)=""/162, 0xa2, &(0x7f0000000300)=""/211, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[r1, r2, r1], 0x3) socket(0x2, 0x2, 0x0) 04:48:37 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) 04:48:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x4) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 04:48:37 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) 04:48:37 executing program 4: syz_io_uring_setup(0x10e2, &(0x7f0000000000)={0x0, 0xfffffffd, 0x40a, 0xfffffffc}, 0x0, 0x0) (async) r0 = syz_io_uring_setup(0x10e2, &(0x7f0000000000)={0x0, 0xfffffffd, 0x40a, 0xfffffffc}, 0x0, 0x0) r1 = syz_io_uring_setup(0x4fda, &(0x7f0000000080)={0x0, 0xc5bb, 0x100, 0x3, 0x2db, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x190018400, &(0x7f0000000180)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200), {0x7}, &(0x7f0000000240)=""/162, 0xa2, &(0x7f0000000300)=""/211, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x9}, 0x58) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[r1, r2, r1], 0x3) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000004c0)=[r1, r2, r1], 0x3) socket(0x2, 0x2, 0x0) 04:48:37 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:37 executing program 1: r0 = socket(0x10, 0x2, 0x7) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 04:48:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 04:48:37 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) 04:48:37 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001b40)={{0x3, 0x100, 0xbb83, 0x7fffffff, 0x100, 0xffff}, 0xe8, [0x8, 0x40, 0x6, 0x3, 0x8, 0x0, 0xc00, 0x4, 0x8, 0x8001, 0x80, 0x6, 0x0, 0x1ff, 0x8, 0x9, 0x20, 0x3, 0x7, 0x83b, 0x0, 0x4, 0x8, 0x3, 0x7f, 0x8, 0x7, 0x3, 0x6, 0xfffffff9, 0x2f9, 0x1, 0x5, 0x80000001, 0x5, 0x200, 0x55, 0x6ff, 0xfffffffe, 0xffffffff, 0x3ca0, 0x2b, 0x9, 0x5, 0xba29, 0x9, 0xfffffe00, 0x3, 0x4, 0x0, 0x8, 0x70, 0x70a8, 0x4, 0x79a, 0x5, 0x5, 0x4, 0x9, 0x10001, 0x8, 0x3f, 0x2, 0x9, 0x4, 0xbb, 0x4e6, 0xad, 0x0, 0x0, 0xcad6, 0x1f, 0x81, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x5, 0x9, 0x8, 0x9, 0x24, 0xfffffe00, 0xa3, 0x400, 0x4, 0x2, 0x6, 0x8e6, 0x4, 0xde7, 0xfbe, 0x3, 0xfffffbff, 0x7, 0x1ff, 0xffff, 0xb75c, 0x8, 0x80, 0x0, 0x5, 0x3ff, 0x3, 0x9, 0xff, 0x10001, 0x20, 0x28b55ca0, 0x9, 0x1d3, 0x3, 0x7, 0x3, 0x8, 0x800, 0x8001, 0x1000, 0x6, 0x4, 0x8001, 0x7, 0xb2, 0x7, 0x8, 0xbd6, 0x8, 0x7, 0xfffffdcd, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0x4, 0x1, 0x0, 0x9294, 0x1, 0x0, 0x68d8, 0x8, 0x200000, 0x0, 0x3f, 0x9, 0x200, 0xffff0000, 0x6, 0x95, 0xb46, 0x8, 0x100, 0x81be, 0xfffffffa, 0x1ff, 0x20, 0x2, 0xa90, 0x6, 0x48e, 0x9, 0x6, 0x6, 0x8, 0x9, 0x8, 0x7, 0xffffffff, 0x7, 0x1f, 0x5, 0x400, 0x80000001, 0x7ff, 0x7, 0xfff, 0x10d8, 0x8001, 0x80000000, 0x8da, 0x80000000, 0x401, 0x6, 0x2, 0x1, 0x464a, 0x1, 0x7ff, 0x101, 0x600, 0x1f31d8df, 0x80000000, 0x8, 0x5, 0x5, 0x747, 0x8, 0xfffffe01, 0xffffffff, 0x7, 0x0, 0x8, 0x8000, 0x3, 0x6, 0x5, 0x6, 0x200, 0x2, 0x3, 0x80, 0x9, 0x4e6d5fc8, 0x5, 0x7, 0x1f, 0xfffffff8, 0x1f, 0x1, 0xfffffffe, 0xd1b, 0x0, 0xff, 0x9, 0x6, 0x1ff, 0x101, 0x314, 0x0, 0x810, 0x1, 0xc0, 0xfff, 0xb10, 0x8, 0x7, 0x9, 0x7, 0x7, 0x1, 0x80, 0xfff, 0x9318, 0x1, 0x1, 0x7fffffff, 0x101, 0xffffffff, 0x4, 0x1f, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x3e4, 0x0, 0x2, 0x0, 0x4, 0x31c, 0x9, 0xb7b6, 0x101, 0x9, 0x401, 0xb4c, 0x3, 0x3, 0x0, 0xa00, 0x20, 0x3ff, 0x80000001, 0x10bd8e34, 0x401, 0x8, 0x8, 0x9, 0x5a90e77, 0x7, 0xa6, 0x0, 0x7f, 0x4, 0x97, 0x9, 0x8e, 0x99, 0x8000, 0x1, 0x0, 0x8, 0x9, 0x58, 0xafa7, 0xb03, 0x8, 0x5ec3, 0x4, 0x3, 0x200, 0x6, 0x5, 0x2, 0xbd29, 0x1, 0x4, 0xff, 0x5, 0x3f, 0x4, 0x0, 0x4, 0x91b, 0x101, 0x10000, 0x2, 0x89, 0x0, 0x81, 0x7f, 0x6b3, 0x40, 0x1000, 0x4, 0x6, 0x7fff, 0x9, 0x4, 0x8, 0x53, 0x4, 0x200, 0xfffffff9, 0x0, 0x1f, 0x2, 0x3ff, 0x400000, 0x2, 0x727, 0x9, 0x9, 0xa98, 0x7, 0x101, 0x1, 0x80000000, 0x3ff, 0x1, 0x678b702c, 0x3, 0x80, 0x2, 0x6, 0x2, 0x7fffffff, 0x0, 0x3f, 0x48, 0x9, 0xe9f, 0x7, 0x4, 0x5, 0x8, 0x7, 0x52c, 0x32, 0x7, 0x6, 0x80, 0x1e7, 0xfffffff9, 0x8, 0x4, 0x3, 0x1, 0x200, 0x1, 0x0, 0x8, 0x8, 0xead, 0x7, 0x401, 0x8, 0x9, 0x4, 0x9, 0x4, 0x3, 0x3f, 0x5, 0x5, 0x80, 0x3, 0x2, 0x8, 0x3, 0x1f, 0x5, 0x5, 0x5, 0x9, 0xff, 0x64e7, 0x0, 0xfff, 0x1, 0xf74, 0xff, 0x2, 0x5c09, 0xfffffff7, 0x8, 0x5, 0xffffffff, 0x80000000, 0xe8, 0x9, 0x3, 0x1, 0x2, 0x1, 0x0, 0x6, 0x8000, 0x0, 0x7, 0x9, 0x2, 0xc0, 0x7fffffff, 0x0, 0x0, 0x7, 0x3, 0x1ff, 0x3, 0x7f, 0x354, 0x400, 0x9, 0x1ff, 0x4, 0xfffffffa, 0xfffffffb, 0x5, 0x1, 0x7fffffff, 0x101, 0x3f, 0xee1, 0x2, 0x8000, 0x5, 0x8, 0x572, 0xb2, 0x5, 0x81, 0x4, 0x9, 0x8, 0x7, 0x100, 0x8000, 0x4, 0x80000001, 0x2, 0x7, 0x1, 0x200, 0x80000001, 0x4, 0x9, 0x8c21, 0x40, 0x7, 0x4, 0x6, 0x7fff, 0x8, 0x4, 0x8, 0x10000, 0xe2, 0x0, 0xffffffff, 0x3, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4, 0x1, 0x4, 0x8ad, 0x3, 0xbf5, 0x0, 0x5, 0xfffffff7, 0x8, 0x8001, 0x40, 0x0, 0x2, 0x70fc, 0x5, 0x84, 0x6, 0x7, 0xefc, 0x80, 0x4, 0x7fffffff, 0x800, 0x3, 0xfffffffe, 0x81, 0x4, 0x6, 0x81, 0x7f, 0x7, 0x3, 0x4, 0x7, 0x3, 0x3, 0x1f, 0x9, 0x7, 0x7ff, 0x1, 0x100, 0x3b5e, 0x2, 0x1, 0xfffffffe, 0xfffff76c, 0x10000, 0x7, 0x20, 0x8, 0x6, 0x3, 0x3f, 0x0, 0x8000, 0x0, 0x3, 0x2, 0x2, 0x3, 0x3, 0x6, 0x1000, 0x99, 0x7fffffff, 0x3ff, 0x80000001, 0x0, 0x2, 0x1, 0x0, 0x8, 0x2, 0x6, 0x20, 0x7f, 0xae3, 0x2e44, 0x5d21, 0x3, 0x4e01, 0x8, 0xcaca, 0x8, 0xff, 0x3, 0x80000000, 0x101, 0x3, 0xfffffc00, 0x6, 0xac7, 0x1, 0x5, 0x1, 0x3f, 0x22111cd1, 0x3, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x401, 0x2, 0x3, 0x3bd, 0x5, 0x1, 0x9, 0x6, 0x1, 0x3, 0x0, 0x3, 0x80000000, 0x0, 0x7fff, 0x100, 0x249b, 0xae94, 0xfffffc00, 0x5, 0xe7cf, 0x9, 0x1, 0x3, 0x1, 0x10000, 0x401, 0xb6e, 0x9, 0x1, 0x0, 0x8000, 0xde2, 0x4, 0x1ff, 0x3, 0x7fff, 0x6, 0x4, 0x101, 0x364, 0x3, 0x4, 0x1000, 0x1, 0x8, 0xeb6, 0x0, 0x937, 0xffff2dc7, 0x0, 0x7fff, 0x1f, 0x1000, 0x2a, 0x7, 0x3f, 0xffffffff, 0xb3d5, 0x80000001, 0x7fff, 0x1, 0x4, 0x2, 0xa4, 0x0, 0x101, 0x6, 0x40100, 0x7, 0x2bcd4b4b, 0x0, 0x6, 0x3, 0xd9, 0x6, 0x7ff, 0x5, 0x2, 0x401, 0x80, 0x8, 0x827, 0x9, 0x6, 0x5, 0x8661, 0xffffff40, 0x3, 0x1, 0xc614, 0x7fff, 0x3, 0x80000000, 0x9, 0x715, 0xffff7fff, 0x3f, 0x7fffffff, 0x4, 0xfff, 0x0, 0x7, 0x74c4, 0xffffffff, 0x1, 0x1, 0xfffffffa, 0xca9, 0xebe, 0x3, 0x0, 0x4, 0x5, 0x0, 0x3ff, 0xffff97cb, 0x10001, 0x4, 0x6, 0x7, 0x1, 0x401, 0x9, 0x7f2, 0x9, 0xbcf, 0x3fa1, 0x9, 0x3f, 0x80000001, 0xf2b, 0x8, 0x3, 0x100, 0xcd33, 0x7, 0x0, 0x6, 0xffff, 0x1ff, 0x3, 0x1, 0x7876bb9, 0x73, 0x400, 0x0, 0x8, 0x6, 0x9, 0x1, 0x40, 0x0, 0x4, 0x400, 0x8, 0x5, 0x9, 0xfff, 0x19, 0x7ff, 0x7fff, 0xfb, 0x3, 0x400, 0x3, 0x1000, 0x8, 0x7ff, 0x0, 0x0, 0x7, 0x1, 0xff5, 0x7fff, 0x2610, 0xa796, 0x3, 0x101, 0xb005, 0xa8af, 0x29b, 0x924, 0x5, 0x2, 0x3f, 0x6, 0x4, 0x2b, 0x6, 0x4, 0x5, 0x6, 0xff, 0xffffffff, 0x80000001, 0x10001, 0x2, 0x40, 0xe1, 0x40, 0xf0, 0x2b7a, 0x3, 0x7fffffff, 0x7, 0x8, 0x3, 0xffff, 0x0, 0x3f, 0x1000, 0x8, 0x5, 0x1ff, 0x2, 0x7, 0x0, 0x99, 0x10001, 0x6a, 0x21, 0x7, 0x2, 0x5, 0x5, 0x5, 0xffffff80, 0x2, 0x80000001, 0x2, 0x8, 0x10001, 0xff, 0x4, 0x0, 0xfffffffd, 0x8f1, 0x800, 0x5b, 0x8, 0x5, 0x8, 0x380, 0x3, 0xff, 0x1, 0x101, 0x3, 0x8000, 0x1f, 0xa4, 0x9, 0xfffffff9, 0x20, 0x4e85, 0x25e, 0x3, 0x1, 0x2, 0xc76, 0x3f, 0xcb5, 0x0, 0x1, 0x0, 0xffffffff, 0xe863, 0xd17, 0x4, 0x3b0, 0x6, 0x3f, 0x0, 0x9, 0x8, 0x2, 0x2, 0x0, 0x7, 0x100, 0x957, 0x7, 0xd80, 0x0, 0x5, 0xfffffff7, 0x5, 0x4, 0x1, 0xffffff37, 0xdb0c, 0xb, 0x0, 0x8, 0x8, 0xd7c, 0x43, 0x3, 0x6d7, 0x5e68527b, 0x4, 0x7fff, 0x7, 0x65b6, 0x7fff, 0x5, 0x2, 0xffffffff, 0x6, 0xffff, 0xa37f, 0x9, 0x318, 0x3, 0xd7, 0x162, 0x5, 0x4f3d, 0x1c000, 0x2, 0x10001, 0x4, 0x6, 0x7, 0x2, 0x9, 0x1, 0x8, 0x9, 0x3, 0x8000, 0xfffffff8, 0xfffffffd, 0x7f, 0x10001, 0x8, 0x100, 0x1ff, 0x5719c7a2, 0x80000000, 0xffff, 0x8, 0x6, 0x3, 0x9, 0x2, 0x9, 0x3, 0xfffffff8, 0x8000, 0x2, 0x80000001, 0x4e84, 0x74c, 0x2, 0x3, 0x99ab, 0x0, 0x1, 0x80000000, 0x3f, 0xd005, 0x0, 0x0, 0x401, 0x3f, 0x8, 0x100, 0xffff, 0x1f6, 0x1, 0x7, 0x7f, 0x4, 0x200, 0xf9e, 0x8, 0x400, 0x1, 0x1, 0x8001, 0x5, 0xf6, 0x1, 0x285a, 0xbc, 0xfffffff7, 0x9, 0x2, 0x401, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x14, 0x7, 0xfff, 0x80000001, 0x0, 0x10001, 0x8001, 0x17a4, 0x3ff, 0x8, 0x1b1, 0x7, 0x8, 0x9, 0x5, 0xffff, 0xfff, 0x5, 0x93, 0x8, 0x6, 0x3, 0x1]}) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000b00)={{0x1, 0x200, 0x63b, 0x0, 0x2990821, 0x9}, 0x1a0, [0x5, 0x4, 0x87, 0x1, 0x3, 0x800, 0x6c, 0x2, 0xffff, 0x8000, 0x0, 0x3, 0x2, 0x4611, 0xda8d, 0xe751, 0x1, 0x10000, 0x3ff, 0x4, 0x5, 0x7fffffff, 0x19, 0xff, 0x0, 0xffff7fff, 0x4, 0x5, 0x80000001, 0x2, 0x7fffffff, 0x4, 0x40, 0x1f, 0x101, 0x80, 0x8740000, 0x0, 0x3, 0x1, 0x4, 0x8, 0x10000, 0x5, 0x2, 0x87e8, 0x401, 0x7fff, 0x9, 0x4, 0xfffffffb, 0x7, 0x7, 0x400, 0x9, 0x0, 0x6, 0x0, 0x4, 0x2, 0x3, 0x6, 0x81, 0x10001, 0x5, 0x5, 0x4, 0x400, 0x9, 0x6, 0x101, 0xffffb0d3, 0x199, 0xf665, 0x3, 0x9, 0x400, 0xff, 0x200, 0x5, 0x0, 0x3, 0x81, 0x2, 0xfffffffa, 0x1c6, 0x0, 0x2, 0x0, 0xe74, 0x6, 0x7fff, 0x7, 0x2, 0x3ff, 0x6, 0x1, 0x0, 0x6b, 0x7, 0xffffffff, 0x1000, 0x3ff, 0xfffffff7, 0x5, 0x94, 0x2, 0x0, 0x8000, 0x5, 0x57b, 0x9, 0x2, 0x7, 0xfffffffd, 0x53ff, 0x1, 0x8a1, 0x80000000, 0x80, 0xc9, 0xfffffff7, 0xffffffff, 0x7, 0x9, 0x2, 0xfffffffd, 0x0, 0x7fff, 0xffff, 0x9, 0x8, 0x3, 0x3f, 0x40, 0x401, 0x0, 0x1000, 0x1, 0x1, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0x9, 0x7, 0xffffffff, 0x3f1, 0xd2b0, 0x8001, 0x5, 0xa927, 0x7, 0x6, 0x8, 0x5, 0xfff, 0x9, 0x2, 0x2, 0x7, 0x1000, 0x84f7, 0x6, 0x7, 0x7, 0x2ac, 0x5143, 0x1ff, 0x5, 0x6, 0x0, 0xfffffe8e, 0x1, 0x5a, 0x81, 0xd5b9, 0x9, 0x8000, 0x8000, 0x3, 0xfffffffc, 0x8, 0xffff, 0x3ff, 0x20, 0x4, 0x4e96, 0xf65, 0x0, 0xffffffff, 0x5, 0x9, 0x9, 0x401, 0xda4, 0x9, 0x4, 0x9, 0x6, 0x1, 0x3, 0x8, 0x7d, 0x4, 0x8, 0x101, 0x7ff, 0x10001, 0x4, 0x2, 0x7, 0x3, 0x9, 0x7, 0x5, 0xde, 0x10001, 0x399c2ddd, 0x1a, 0x4a90, 0x3, 0x3, 0x0, 0x6, 0x4, 0x6, 0x9, 0x400000, 0x3b4339c, 0x4, 0xadcb, 0xf, 0x0, 0x7fff, 0x2, 0x5, 0xffffffff, 0x6, 0xb2ba, 0x9, 0x7fffffff, 0x5, 0x5, 0xfffffffe, 0x9, 0x3, 0xb1b, 0x8001, 0x7ff, 0x0, 0x4afa, 0x5, 0x9, 0xfff, 0x0, 0x95, 0x1f, 0xe92, 0x0, 0x5, 0x81, 0x7, 0x800, 0xe60, 0x5, 0x5, 0xfffffffb, 0xffffffe0, 0x3e1, 0x3, 0x2, 0x5, 0x3, 0x5, 0x2000000, 0x0, 0x3f, 0x7, 0x3f, 0xffffffc1, 0x20, 0x0, 0xffff, 0x9, 0x2e3, 0xffffffc0, 0x0, 0x49e, 0x1, 0x4894, 0xfff, 0x1, 0x10001, 0x8, 0x5, 0x0, 0xbc6d, 0x6, 0xff, 0x5, 0x7, 0x6, 0xfffff4fe, 0xffffffff, 0x6, 0x80000001, 0x7f, 0x1, 0x7, 0xf45, 0x6, 0x20, 0x2, 0x9, 0x4, 0x4d4b, 0xa6, 0x2, 0x10000, 0x3, 0xfffffffc, 0xfff, 0x4, 0x1f, 0x2, 0x6, 0xea07, 0x1, 0x99b7, 0x7, 0x1ff, 0x4, 0x3, 0x5, 0x80, 0x39dfbb30, 0x6, 0x17, 0xf614, 0x4, 0x101, 0x544, 0x0, 0x1000, 0x80000001, 0x5, 0x9e1, 0x1, 0x1, 0xf67, 0xca, 0x6, 0xc122, 0x7, 0x5, 0x9, 0x17, 0x3, 0x2, 0x7, 0x6, 0x9, 0x80000000, 0x7, 0x0, 0x0, 0x9, 0xffff0ec4, 0x1, 0x3, 0x2, 0xffff, 0x8f8, 0x8, 0x8, 0x200, 0x4, 0x4, 0x3, 0x8001, 0x8, 0x3, 0x103, 0xff, 0x0, 0x8, 0x2, 0x6, 0xdfc, 0x5, 0xd4, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x8, 0x5, 0xd8f8, 0x261e, 0x0, 0x2, 0x529ed986, 0x10000, 0x400, 0x10001, 0x3f, 0x100, 0x101, 0x200, 0x7fffffff, 0x1af, 0x7f, 0x80000000, 0x5, 0x9, 0x10000, 0xfff, 0x4, 0x7, 0x3, 0x2, 0x200, 0x8, 0xffff, 0x3c, 0x4, 0x7, 0xfffffffa, 0x3, 0x8001, 0x1, 0x95, 0x3ff, 0x4, 0xff, 0x10001, 0x4, 0x0, 0x3f, 0x80, 0x8, 0x8, 0xdb26, 0x3, 0x0, 0x8, 0x9, 0x3, 0x2, 0x2, 0xd3fa, 0x10001, 0x80000001, 0x6, 0x20, 0x2e, 0x7ff, 0x4, 0x7ff, 0x9, 0x1, 0x1, 0x3, 0x20, 0x7, 0x6, 0x1, 0xfffffffc, 0x1, 0x0, 0x4, 0x6, 0x0, 0x7fffffff, 0x40, 0x3, 0x7fffffff, 0x4, 0x6, 0x9, 0x20, 0x9, 0x9, 0x8, 0x10001, 0x80000001, 0x4, 0x7ff, 0xffffff7f, 0x62, 0x400, 0x2cd, 0x10000, 0xffff, 0x9, 0x80, 0x4, 0x2, 0xfb3a, 0x401, 0x8, 0x4, 0x1, 0x4, 0x48355674, 0x283d, 0x6, 0x12, 0x1, 0x10000, 0x80, 0xffffff01, 0xa93, 0x1, 0x9, 0xffffcfac, 0x6, 0x2, 0x3, 0x5, 0x10001, 0xff, 0x3, 0x0, 0x2, 0x5, 0x3f, 0x9, 0xbde, 0x5, 0x5, 0x9, 0x2593, 0xff4, 0x4, 0xfff, 0x7de, 0x9, 0x101, 0x2, 0x5, 0x7ff, 0x1ff, 0x800, 0x6, 0x7fff, 0xeca0, 0x7fff, 0xfff, 0x100, 0x0, 0x72, 0x6, 0xfffffffc, 0x100, 0x200, 0x5, 0x80000000, 0xc8800000, 0x2, 0x9, 0x480000, 0x5, 0x9, 0x9, 0x5, 0xffffffff, 0x8001, 0x5, 0x6, 0x3, 0x1, 0x7, 0x800, 0xfffffbff, 0x0, 0x101, 0x6, 0x104, 0x2, 0x9, 0x5, 0x5, 0x1, 0x3bf, 0x8, 0x7, 0x54, 0x80, 0x800, 0xffff, 0x1, 0x1, 0x6, 0xff, 0x9, 0x8001, 0x8, 0x0, 0x5, 0x8, 0x81, 0x3, 0x3, 0x4, 0x8001, 0x6, 0x8000, 0x20, 0x1, 0x5, 0x3, 0x3, 0xf2fa0000, 0x147, 0x50000000, 0x6, 0x0, 0x8000, 0x10f7, 0x20, 0x0, 0x3, 0x8, 0x3, 0x4, 0x9, 0xe7a, 0x1f, 0xfffffffa, 0x1, 0x1, 0x9, 0xa9, 0xfff, 0x9, 0x1, 0x4, 0x7ff, 0x1, 0xffffffff, 0x0, 0x4, 0x81, 0x5, 0x1, 0x3, 0x4, 0x1, 0x7, 0xc, 0x3, 0x5ff44e2c, 0x0, 0x6, 0x5, 0x2, 0x3b, 0x7fffffff, 0x7fffffff, 0x3, 0x0, 0xddf9, 0x7, 0x3, 0x0, 0x3, 0x3, 0x61d, 0x7, 0x200, 0x2, 0x80000001, 0x6, 0xfff, 0x1, 0x8, 0x6d84, 0x8, 0x5, 0xffff, 0x1ff, 0x0, 0x2, 0x18, 0x9, 0x9, 0x101, 0x6, 0x3, 0x4aa, 0x3f, 0x6e, 0x9, 0x8, 0x91f, 0xc852, 0x6, 0x3ff, 0x101, 0x0, 0x1ff, 0x1, 0x2, 0x0, 0x6, 0x101, 0x10001, 0x4c4, 0x9, 0x9, 0x0, 0x8, 0x2, 0x7, 0x7ff, 0x4, 0x1ff, 0xeb4, 0x4, 0xfffffff8, 0xf4, 0x3, 0x2, 0x5, 0x5, 0x9, 0x9, 0x6, 0x6, 0xfffffffc, 0x8001, 0x8, 0x3, 0x40, 0xd0, 0x401, 0xffffffff, 0x1ff, 0x9, 0x7, 0x4, 0xc0, 0x1, 0x200, 0x7f, 0x0, 0x2, 0x1, 0xb9a, 0x2, 0x81, 0x40, 0x2, 0x0, 0x5, 0x80000001, 0x400, 0x1, 0x5, 0x0, 0x0, 0xece, 0x74b, 0x9, 0x7fff, 0x3ff, 0x6, 0x7, 0x40, 0x8, 0x9, 0x8, 0x52d, 0x6, 0x3, 0x80000000, 0xa, 0x7b3, 0x4, 0xfffffffd, 0x8, 0x4, 0x40, 0x8, 0xb9f, 0x2, 0x100, 0x9, 0x8, 0x7721, 0x9, 0x80000001, 0x0, 0x1, 0x4, 0xff, 0x7, 0x5, 0x0, 0xfffffeff, 0x5, 0x7fffffff, 0x77, 0xedd, 0x7, 0x7, 0x5, 0x5, 0x5, 0x3928, 0x221, 0x1ff, 0xffffff81, 0x8000, 0x9, 0x681, 0x1, 0xd79, 0x9, 0x9, 0x1, 0x0, 0x7, 0x5, 0xf74, 0x1ff, 0x4, 0x1, 0x10000, 0x20b, 0x6, 0x5, 0x6cc, 0x9, 0x3f, 0x4f40, 0xffffffe0, 0x8, 0xf9, 0x6, 0x1, 0x1da9, 0x800, 0x9, 0x0, 0x470, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x401, 0x81, 0x2, 0x4, 0xd6, 0x6, 0x10000, 0x659a, 0x4, 0xffff0000, 0xf06, 0x0, 0x5, 0x2, 0x6, 0x1000, 0x8, 0x7, 0x6, 0x1, 0xa, 0x1ff, 0xffffffff, 0x0, 0x3, 0x9, 0xf161, 0x3, 0x4, 0x0, 0x4, 0x8b, 0x6, 0x21bc, 0x8, 0x8001, 0x7f, 0xec, 0xfff, 0x6fe, 0x8001, 0x202, 0x5, 0x17c00000, 0x101, 0xc92c, 0x9, 0x1, 0xfff, 0x0, 0x200, 0xfffff8f3, 0x7ff, 0xfffff800, 0x26, 0xf4, 0x7f, 0x9, 0x97b, 0x28e6b5d5, 0xb55e, 0x1, 0x1, 0x2, 0x2, 0xbe, 0x2, 0x1, 0x0, 0x8, 0x0, 0x10000, 0xe2f, 0x15, 0x7278, 0x3, 0x8, 0x80000001, 0x9, 0x20000, 0x9, 0x4, 0x81, 0x9, 0x3ff, 0x2, 0x10000000, 0x0, 0x7, 0x0, 0x80, 0x8, 0x6, 0x1c37, 0x4, 0x2, 0x9, 0x40, 0x9, 0x400, 0x70000000, 0xff, 0x80, 0x8, 0xfffffffd, 0xfffffff8, 0x6, 0x4, 0x1f, 0x4, 0x4, 0x7ff, 0x74aa, 0x81, 0x1448, 0x7fff, 0x101, 0x1000, 0x10000, 0x5, 0x1ff, 0x6, 0x829c, 0x9, 0x100, 0x5, 0x0, 0xfff, 0x2, 0x0, 0x4f4d5780, 0x7f, 0x47ea, 0x4, 0x34d6260b, 0x4, 0x7ff, 0x401, 0x80, 0x6d12, 0x3, 0x4, 0x101, 0x6, 0xffffffc0, 0x4, 0x20, 0xffff8001, 0x6, 0x4, 0x800, 0x7ff, 0x3, 0x3, 0x8000, 0x8, 0x9, 0x0, 0x4, 0x9, 0x0, 0x4, 0x401, 0x5]}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x3ff, 0x28, &(0x7f0000000000)="20f298e1dd5f4ec367997b3294a97bb43e597b4d0ced66320865fe0dcb83c5a97768a82d07911c19", 0x7e, 0x3, 0xff, 0x7ff, 0x5, 0x1, 0x20, 'syz1\x00'}) 04:48:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) 04:48:37 executing program 1: r0 = socket(0x10, 0x2, 0x7) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 04:48:37 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 04:48:37 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:37 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) 04:48:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001b40)={{0x3, 0x100, 0xbb83, 0x7fffffff, 0x100, 0xffff}, 0xe8, [0x8, 0x40, 0x6, 0x3, 0x8, 0x0, 0xc00, 0x4, 0x8, 0x8001, 0x80, 0x6, 0x0, 0x1ff, 0x8, 0x9, 0x20, 0x3, 0x7, 0x83b, 0x0, 0x4, 0x8, 0x3, 0x7f, 0x8, 0x7, 0x3, 0x6, 0xfffffff9, 0x2f9, 0x1, 0x5, 0x80000001, 0x5, 0x200, 0x55, 0x6ff, 0xfffffffe, 0xffffffff, 0x3ca0, 0x2b, 0x9, 0x5, 0xba29, 0x9, 0xfffffe00, 0x3, 0x4, 0x0, 0x8, 0x70, 0x70a8, 0x4, 0x79a, 0x5, 0x5, 0x4, 0x9, 0x10001, 0x8, 0x3f, 0x2, 0x9, 0x4, 0xbb, 0x4e6, 0xad, 0x0, 0x0, 0xcad6, 0x1f, 0x81, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x5, 0x9, 0x8, 0x9, 0x24, 0xfffffe00, 0xa3, 0x400, 0x4, 0x2, 0x6, 0x8e6, 0x4, 0xde7, 0xfbe, 0x3, 0xfffffbff, 0x7, 0x1ff, 0xffff, 0xb75c, 0x8, 0x80, 0x0, 0x5, 0x3ff, 0x3, 0x9, 0xff, 0x10001, 0x20, 0x28b55ca0, 0x9, 0x1d3, 0x3, 0x7, 0x3, 0x8, 0x800, 0x8001, 0x1000, 0x6, 0x4, 0x8001, 0x7, 0xb2, 0x7, 0x8, 0xbd6, 0x8, 0x7, 0xfffffdcd, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0x4, 0x1, 0x0, 0x9294, 0x1, 0x0, 0x68d8, 0x8, 0x200000, 0x0, 0x3f, 0x9, 0x200, 0xffff0000, 0x6, 0x95, 0xb46, 0x8, 0x100, 0x81be, 0xfffffffa, 0x1ff, 0x20, 0x2, 0xa90, 0x6, 0x48e, 0x9, 0x6, 0x6, 0x8, 0x9, 0x8, 0x7, 0xffffffff, 0x7, 0x1f, 0x5, 0x400, 0x80000001, 0x7ff, 0x7, 0xfff, 0x10d8, 0x8001, 0x80000000, 0x8da, 0x80000000, 0x401, 0x6, 0x2, 0x1, 0x464a, 0x1, 0x7ff, 0x101, 0x600, 0x1f31d8df, 0x80000000, 0x8, 0x5, 0x5, 0x747, 0x8, 0xfffffe01, 0xffffffff, 0x7, 0x0, 0x8, 0x8000, 0x3, 0x6, 0x5, 0x6, 0x200, 0x2, 0x3, 0x80, 0x9, 0x4e6d5fc8, 0x5, 0x7, 0x1f, 0xfffffff8, 0x1f, 0x1, 0xfffffffe, 0xd1b, 0x0, 0xff, 0x9, 0x6, 0x1ff, 0x101, 0x314, 0x0, 0x810, 0x1, 0xc0, 0xfff, 0xb10, 0x8, 0x7, 0x9, 0x7, 0x7, 0x1, 0x80, 0xfff, 0x9318, 0x1, 0x1, 0x7fffffff, 0x101, 0xffffffff, 0x4, 0x1f, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x3e4, 0x0, 0x2, 0x0, 0x4, 0x31c, 0x9, 0xb7b6, 0x101, 0x9, 0x401, 0xb4c, 0x3, 0x3, 0x0, 0xa00, 0x20, 0x3ff, 0x80000001, 0x10bd8e34, 0x401, 0x8, 0x8, 0x9, 0x5a90e77, 0x7, 0xa6, 0x0, 0x7f, 0x4, 0x97, 0x9, 0x8e, 0x99, 0x8000, 0x1, 0x0, 0x8, 0x9, 0x58, 0xafa7, 0xb03, 0x8, 0x5ec3, 0x4, 0x3, 0x200, 0x6, 0x5, 0x2, 0xbd29, 0x1, 0x4, 0xff, 0x5, 0x3f, 0x4, 0x0, 0x4, 0x91b, 0x101, 0x10000, 0x2, 0x89, 0x0, 0x81, 0x7f, 0x6b3, 0x40, 0x1000, 0x4, 0x6, 0x7fff, 0x9, 0x4, 0x8, 0x53, 0x4, 0x200, 0xfffffff9, 0x0, 0x1f, 0x2, 0x3ff, 0x400000, 0x2, 0x727, 0x9, 0x9, 0xa98, 0x7, 0x101, 0x1, 0x80000000, 0x3ff, 0x1, 0x678b702c, 0x3, 0x80, 0x2, 0x6, 0x2, 0x7fffffff, 0x0, 0x3f, 0x48, 0x9, 0xe9f, 0x7, 0x4, 0x5, 0x8, 0x7, 0x52c, 0x32, 0x7, 0x6, 0x80, 0x1e7, 0xfffffff9, 0x8, 0x4, 0x3, 0x1, 0x200, 0x1, 0x0, 0x8, 0x8, 0xead, 0x7, 0x401, 0x8, 0x9, 0x4, 0x9, 0x4, 0x3, 0x3f, 0x5, 0x5, 0x80, 0x3, 0x2, 0x8, 0x3, 0x1f, 0x5, 0x5, 0x5, 0x9, 0xff, 0x64e7, 0x0, 0xfff, 0x1, 0xf74, 0xff, 0x2, 0x5c09, 0xfffffff7, 0x8, 0x5, 0xffffffff, 0x80000000, 0xe8, 0x9, 0x3, 0x1, 0x2, 0x1, 0x0, 0x6, 0x8000, 0x0, 0x7, 0x9, 0x2, 0xc0, 0x7fffffff, 0x0, 0x0, 0x7, 0x3, 0x1ff, 0x3, 0x7f, 0x354, 0x400, 0x9, 0x1ff, 0x4, 0xfffffffa, 0xfffffffb, 0x5, 0x1, 0x7fffffff, 0x101, 0x3f, 0xee1, 0x2, 0x8000, 0x5, 0x8, 0x572, 0xb2, 0x5, 0x81, 0x4, 0x9, 0x8, 0x7, 0x100, 0x8000, 0x4, 0x80000001, 0x2, 0x7, 0x1, 0x200, 0x80000001, 0x4, 0x9, 0x8c21, 0x40, 0x7, 0x4, 0x6, 0x7fff, 0x8, 0x4, 0x8, 0x10000, 0xe2, 0x0, 0xffffffff, 0x3, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4, 0x1, 0x4, 0x8ad, 0x3, 0xbf5, 0x0, 0x5, 0xfffffff7, 0x8, 0x8001, 0x40, 0x0, 0x2, 0x70fc, 0x5, 0x84, 0x6, 0x7, 0xefc, 0x80, 0x4, 0x7fffffff, 0x800, 0x3, 0xfffffffe, 0x81, 0x4, 0x6, 0x81, 0x7f, 0x7, 0x3, 0x4, 0x7, 0x3, 0x3, 0x1f, 0x9, 0x7, 0x7ff, 0x1, 0x100, 0x3b5e, 0x2, 0x1, 0xfffffffe, 0xfffff76c, 0x10000, 0x7, 0x20, 0x8, 0x6, 0x3, 0x3f, 0x0, 0x8000, 0x0, 0x3, 0x2, 0x2, 0x3, 0x3, 0x6, 0x1000, 0x99, 0x7fffffff, 0x3ff, 0x80000001, 0x0, 0x2, 0x1, 0x0, 0x8, 0x2, 0x6, 0x20, 0x7f, 0xae3, 0x2e44, 0x5d21, 0x3, 0x4e01, 0x8, 0xcaca, 0x8, 0xff, 0x3, 0x80000000, 0x101, 0x3, 0xfffffc00, 0x6, 0xac7, 0x1, 0x5, 0x1, 0x3f, 0x22111cd1, 0x3, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x401, 0x2, 0x3, 0x3bd, 0x5, 0x1, 0x9, 0x6, 0x1, 0x3, 0x0, 0x3, 0x80000000, 0x0, 0x7fff, 0x100, 0x249b, 0xae94, 0xfffffc00, 0x5, 0xe7cf, 0x9, 0x1, 0x3, 0x1, 0x10000, 0x401, 0xb6e, 0x9, 0x1, 0x0, 0x8000, 0xde2, 0x4, 0x1ff, 0x3, 0x7fff, 0x6, 0x4, 0x101, 0x364, 0x3, 0x4, 0x1000, 0x1, 0x8, 0xeb6, 0x0, 0x937, 0xffff2dc7, 0x0, 0x7fff, 0x1f, 0x1000, 0x2a, 0x7, 0x3f, 0xffffffff, 0xb3d5, 0x80000001, 0x7fff, 0x1, 0x4, 0x2, 0xa4, 0x0, 0x101, 0x6, 0x40100, 0x7, 0x2bcd4b4b, 0x0, 0x6, 0x3, 0xd9, 0x6, 0x7ff, 0x5, 0x2, 0x401, 0x80, 0x8, 0x827, 0x9, 0x6, 0x5, 0x8661, 0xffffff40, 0x3, 0x1, 0xc614, 0x7fff, 0x3, 0x80000000, 0x9, 0x715, 0xffff7fff, 0x3f, 0x7fffffff, 0x4, 0xfff, 0x0, 0x7, 0x74c4, 0xffffffff, 0x1, 0x1, 0xfffffffa, 0xca9, 0xebe, 0x3, 0x0, 0x4, 0x5, 0x0, 0x3ff, 0xffff97cb, 0x10001, 0x4, 0x6, 0x7, 0x1, 0x401, 0x9, 0x7f2, 0x9, 0xbcf, 0x3fa1, 0x9, 0x3f, 0x80000001, 0xf2b, 0x8, 0x3, 0x100, 0xcd33, 0x7, 0x0, 0x6, 0xffff, 0x1ff, 0x3, 0x1, 0x7876bb9, 0x73, 0x400, 0x0, 0x8, 0x6, 0x9, 0x1, 0x40, 0x0, 0x4, 0x400, 0x8, 0x5, 0x9, 0xfff, 0x19, 0x7ff, 0x7fff, 0xfb, 0x3, 0x400, 0x3, 0x1000, 0x8, 0x7ff, 0x0, 0x0, 0x7, 0x1, 0xff5, 0x7fff, 0x2610, 0xa796, 0x3, 0x101, 0xb005, 0xa8af, 0x29b, 0x924, 0x5, 0x2, 0x3f, 0x6, 0x4, 0x2b, 0x6, 0x4, 0x5, 0x6, 0xff, 0xffffffff, 0x80000001, 0x10001, 0x2, 0x40, 0xe1, 0x40, 0xf0, 0x2b7a, 0x3, 0x7fffffff, 0x7, 0x8, 0x3, 0xffff, 0x0, 0x3f, 0x1000, 0x8, 0x5, 0x1ff, 0x2, 0x7, 0x0, 0x99, 0x10001, 0x6a, 0x21, 0x7, 0x2, 0x5, 0x5, 0x5, 0xffffff80, 0x2, 0x80000001, 0x2, 0x8, 0x10001, 0xff, 0x4, 0x0, 0xfffffffd, 0x8f1, 0x800, 0x5b, 0x8, 0x5, 0x8, 0x380, 0x3, 0xff, 0x1, 0x101, 0x3, 0x8000, 0x1f, 0xa4, 0x9, 0xfffffff9, 0x20, 0x4e85, 0x25e, 0x3, 0x1, 0x2, 0xc76, 0x3f, 0xcb5, 0x0, 0x1, 0x0, 0xffffffff, 0xe863, 0xd17, 0x4, 0x3b0, 0x6, 0x3f, 0x0, 0x9, 0x8, 0x2, 0x2, 0x0, 0x7, 0x100, 0x957, 0x7, 0xd80, 0x0, 0x5, 0xfffffff7, 0x5, 0x4, 0x1, 0xffffff37, 0xdb0c, 0xb, 0x0, 0x8, 0x8, 0xd7c, 0x43, 0x3, 0x6d7, 0x5e68527b, 0x4, 0x7fff, 0x7, 0x65b6, 0x7fff, 0x5, 0x2, 0xffffffff, 0x6, 0xffff, 0xa37f, 0x9, 0x318, 0x3, 0xd7, 0x162, 0x5, 0x4f3d, 0x1c000, 0x2, 0x10001, 0x4, 0x6, 0x7, 0x2, 0x9, 0x1, 0x8, 0x9, 0x3, 0x8000, 0xfffffff8, 0xfffffffd, 0x7f, 0x10001, 0x8, 0x100, 0x1ff, 0x5719c7a2, 0x80000000, 0xffff, 0x8, 0x6, 0x3, 0x9, 0x2, 0x9, 0x3, 0xfffffff8, 0x8000, 0x2, 0x80000001, 0x4e84, 0x74c, 0x2, 0x3, 0x99ab, 0x0, 0x1, 0x80000000, 0x3f, 0xd005, 0x0, 0x0, 0x401, 0x3f, 0x8, 0x100, 0xffff, 0x1f6, 0x1, 0x7, 0x7f, 0x4, 0x200, 0xf9e, 0x8, 0x400, 0x1, 0x1, 0x8001, 0x5, 0xf6, 0x1, 0x285a, 0xbc, 0xfffffff7, 0x9, 0x2, 0x401, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x14, 0x7, 0xfff, 0x80000001, 0x0, 0x10001, 0x8001, 0x17a4, 0x3ff, 0x8, 0x1b1, 0x7, 0x8, 0x9, 0x5, 0xffff, 0xfff, 0x5, 0x93, 0x8, 0x6, 0x3, 0x1]}) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000b00)={{0x1, 0x200, 0x63b, 0x0, 0x2990821, 0x9}, 0x1a0, [0x5, 0x4, 0x87, 0x1, 0x3, 0x800, 0x6c, 0x2, 0xffff, 0x8000, 0x0, 0x3, 0x2, 0x4611, 0xda8d, 0xe751, 0x1, 0x10000, 0x3ff, 0x4, 0x5, 0x7fffffff, 0x19, 0xff, 0x0, 0xffff7fff, 0x4, 0x5, 0x80000001, 0x2, 0x7fffffff, 0x4, 0x40, 0x1f, 0x101, 0x80, 0x8740000, 0x0, 0x3, 0x1, 0x4, 0x8, 0x10000, 0x5, 0x2, 0x87e8, 0x401, 0x7fff, 0x9, 0x4, 0xfffffffb, 0x7, 0x7, 0x400, 0x9, 0x0, 0x6, 0x0, 0x4, 0x2, 0x3, 0x6, 0x81, 0x10001, 0x5, 0x5, 0x4, 0x400, 0x9, 0x6, 0x101, 0xffffb0d3, 0x199, 0xf665, 0x3, 0x9, 0x400, 0xff, 0x200, 0x5, 0x0, 0x3, 0x81, 0x2, 0xfffffffa, 0x1c6, 0x0, 0x2, 0x0, 0xe74, 0x6, 0x7fff, 0x7, 0x2, 0x3ff, 0x6, 0x1, 0x0, 0x6b, 0x7, 0xffffffff, 0x1000, 0x3ff, 0xfffffff7, 0x5, 0x94, 0x2, 0x0, 0x8000, 0x5, 0x57b, 0x9, 0x2, 0x7, 0xfffffffd, 0x53ff, 0x1, 0x8a1, 0x80000000, 0x80, 0xc9, 0xfffffff7, 0xffffffff, 0x7, 0x9, 0x2, 0xfffffffd, 0x0, 0x7fff, 0xffff, 0x9, 0x8, 0x3, 0x3f, 0x40, 0x401, 0x0, 0x1000, 0x1, 0x1, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0x9, 0x7, 0xffffffff, 0x3f1, 0xd2b0, 0x8001, 0x5, 0xa927, 0x7, 0x6, 0x8, 0x5, 0xfff, 0x9, 0x2, 0x2, 0x7, 0x1000, 0x84f7, 0x6, 0x7, 0x7, 0x2ac, 0x5143, 0x1ff, 0x5, 0x6, 0x0, 0xfffffe8e, 0x1, 0x5a, 0x81, 0xd5b9, 0x9, 0x8000, 0x8000, 0x3, 0xfffffffc, 0x8, 0xffff, 0x3ff, 0x20, 0x4, 0x4e96, 0xf65, 0x0, 0xffffffff, 0x5, 0x9, 0x9, 0x401, 0xda4, 0x9, 0x4, 0x9, 0x6, 0x1, 0x3, 0x8, 0x7d, 0x4, 0x8, 0x101, 0x7ff, 0x10001, 0x4, 0x2, 0x7, 0x3, 0x9, 0x7, 0x5, 0xde, 0x10001, 0x399c2ddd, 0x1a, 0x4a90, 0x3, 0x3, 0x0, 0x6, 0x4, 0x6, 0x9, 0x400000, 0x3b4339c, 0x4, 0xadcb, 0xf, 0x0, 0x7fff, 0x2, 0x5, 0xffffffff, 0x6, 0xb2ba, 0x9, 0x7fffffff, 0x5, 0x5, 0xfffffffe, 0x9, 0x3, 0xb1b, 0x8001, 0x7ff, 0x0, 0x4afa, 0x5, 0x9, 0xfff, 0x0, 0x95, 0x1f, 0xe92, 0x0, 0x5, 0x81, 0x7, 0x800, 0xe60, 0x5, 0x5, 0xfffffffb, 0xffffffe0, 0x3e1, 0x3, 0x2, 0x5, 0x3, 0x5, 0x2000000, 0x0, 0x3f, 0x7, 0x3f, 0xffffffc1, 0x20, 0x0, 0xffff, 0x9, 0x2e3, 0xffffffc0, 0x0, 0x49e, 0x1, 0x4894, 0xfff, 0x1, 0x10001, 0x8, 0x5, 0x0, 0xbc6d, 0x6, 0xff, 0x5, 0x7, 0x6, 0xfffff4fe, 0xffffffff, 0x6, 0x80000001, 0x7f, 0x1, 0x7, 0xf45, 0x6, 0x20, 0x2, 0x9, 0x4, 0x4d4b, 0xa6, 0x2, 0x10000, 0x3, 0xfffffffc, 0xfff, 0x4, 0x1f, 0x2, 0x6, 0xea07, 0x1, 0x99b7, 0x7, 0x1ff, 0x4, 0x3, 0x5, 0x80, 0x39dfbb30, 0x6, 0x17, 0xf614, 0x4, 0x101, 0x544, 0x0, 0x1000, 0x80000001, 0x5, 0x9e1, 0x1, 0x1, 0xf67, 0xca, 0x6, 0xc122, 0x7, 0x5, 0x9, 0x17, 0x3, 0x2, 0x7, 0x6, 0x9, 0x80000000, 0x7, 0x0, 0x0, 0x9, 0xffff0ec4, 0x1, 0x3, 0x2, 0xffff, 0x8f8, 0x8, 0x8, 0x200, 0x4, 0x4, 0x3, 0x8001, 0x8, 0x3, 0x103, 0xff, 0x0, 0x8, 0x2, 0x6, 0xdfc, 0x5, 0xd4, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x8, 0x5, 0xd8f8, 0x261e, 0x0, 0x2, 0x529ed986, 0x10000, 0x400, 0x10001, 0x3f, 0x100, 0x101, 0x200, 0x7fffffff, 0x1af, 0x7f, 0x80000000, 0x5, 0x9, 0x10000, 0xfff, 0x4, 0x7, 0x3, 0x2, 0x200, 0x8, 0xffff, 0x3c, 0x4, 0x7, 0xfffffffa, 0x3, 0x8001, 0x1, 0x95, 0x3ff, 0x4, 0xff, 0x10001, 0x4, 0x0, 0x3f, 0x80, 0x8, 0x8, 0xdb26, 0x3, 0x0, 0x8, 0x9, 0x3, 0x2, 0x2, 0xd3fa, 0x10001, 0x80000001, 0x6, 0x20, 0x2e, 0x7ff, 0x4, 0x7ff, 0x9, 0x1, 0x1, 0x3, 0x20, 0x7, 0x6, 0x1, 0xfffffffc, 0x1, 0x0, 0x4, 0x6, 0x0, 0x7fffffff, 0x40, 0x3, 0x7fffffff, 0x4, 0x6, 0x9, 0x20, 0x9, 0x9, 0x8, 0x10001, 0x80000001, 0x4, 0x7ff, 0xffffff7f, 0x62, 0x400, 0x2cd, 0x10000, 0xffff, 0x9, 0x80, 0x4, 0x2, 0xfb3a, 0x401, 0x8, 0x4, 0x1, 0x4, 0x48355674, 0x283d, 0x6, 0x12, 0x1, 0x10000, 0x80, 0xffffff01, 0xa93, 0x1, 0x9, 0xffffcfac, 0x6, 0x2, 0x3, 0x5, 0x10001, 0xff, 0x3, 0x0, 0x2, 0x5, 0x3f, 0x9, 0xbde, 0x5, 0x5, 0x9, 0x2593, 0xff4, 0x4, 0xfff, 0x7de, 0x9, 0x101, 0x2, 0x5, 0x7ff, 0x1ff, 0x800, 0x6, 0x7fff, 0xeca0, 0x7fff, 0xfff, 0x100, 0x0, 0x72, 0x6, 0xfffffffc, 0x100, 0x200, 0x5, 0x80000000, 0xc8800000, 0x2, 0x9, 0x480000, 0x5, 0x9, 0x9, 0x5, 0xffffffff, 0x8001, 0x5, 0x6, 0x3, 0x1, 0x7, 0x800, 0xfffffbff, 0x0, 0x101, 0x6, 0x104, 0x2, 0x9, 0x5, 0x5, 0x1, 0x3bf, 0x8, 0x7, 0x54, 0x80, 0x800, 0xffff, 0x1, 0x1, 0x6, 0xff, 0x9, 0x8001, 0x8, 0x0, 0x5, 0x8, 0x81, 0x3, 0x3, 0x4, 0x8001, 0x6, 0x8000, 0x20, 0x1, 0x5, 0x3, 0x3, 0xf2fa0000, 0x147, 0x50000000, 0x6, 0x0, 0x8000, 0x10f7, 0x20, 0x0, 0x3, 0x8, 0x3, 0x4, 0x9, 0xe7a, 0x1f, 0xfffffffa, 0x1, 0x1, 0x9, 0xa9, 0xfff, 0x9, 0x1, 0x4, 0x7ff, 0x1, 0xffffffff, 0x0, 0x4, 0x81, 0x5, 0x1, 0x3, 0x4, 0x1, 0x7, 0xc, 0x3, 0x5ff44e2c, 0x0, 0x6, 0x5, 0x2, 0x3b, 0x7fffffff, 0x7fffffff, 0x3, 0x0, 0xddf9, 0x7, 0x3, 0x0, 0x3, 0x3, 0x61d, 0x7, 0x200, 0x2, 0x80000001, 0x6, 0xfff, 0x1, 0x8, 0x6d84, 0x8, 0x5, 0xffff, 0x1ff, 0x0, 0x2, 0x18, 0x9, 0x9, 0x101, 0x6, 0x3, 0x4aa, 0x3f, 0x6e, 0x9, 0x8, 0x91f, 0xc852, 0x6, 0x3ff, 0x101, 0x0, 0x1ff, 0x1, 0x2, 0x0, 0x6, 0x101, 0x10001, 0x4c4, 0x9, 0x9, 0x0, 0x8, 0x2, 0x7, 0x7ff, 0x4, 0x1ff, 0xeb4, 0x4, 0xfffffff8, 0xf4, 0x3, 0x2, 0x5, 0x5, 0x9, 0x9, 0x6, 0x6, 0xfffffffc, 0x8001, 0x8, 0x3, 0x40, 0xd0, 0x401, 0xffffffff, 0x1ff, 0x9, 0x7, 0x4, 0xc0, 0x1, 0x200, 0x7f, 0x0, 0x2, 0x1, 0xb9a, 0x2, 0x81, 0x40, 0x2, 0x0, 0x5, 0x80000001, 0x400, 0x1, 0x5, 0x0, 0x0, 0xece, 0x74b, 0x9, 0x7fff, 0x3ff, 0x6, 0x7, 0x40, 0x8, 0x9, 0x8, 0x52d, 0x6, 0x3, 0x80000000, 0xa, 0x7b3, 0x4, 0xfffffffd, 0x8, 0x4, 0x40, 0x8, 0xb9f, 0x2, 0x100, 0x9, 0x8, 0x7721, 0x9, 0x80000001, 0x0, 0x1, 0x4, 0xff, 0x7, 0x5, 0x0, 0xfffffeff, 0x5, 0x7fffffff, 0x77, 0xedd, 0x7, 0x7, 0x5, 0x5, 0x5, 0x3928, 0x221, 0x1ff, 0xffffff81, 0x8000, 0x9, 0x681, 0x1, 0xd79, 0x9, 0x9, 0x1, 0x0, 0x7, 0x5, 0xf74, 0x1ff, 0x4, 0x1, 0x10000, 0x20b, 0x6, 0x5, 0x6cc, 0x9, 0x3f, 0x4f40, 0xffffffe0, 0x8, 0xf9, 0x6, 0x1, 0x1da9, 0x800, 0x9, 0x0, 0x470, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x401, 0x81, 0x2, 0x4, 0xd6, 0x6, 0x10000, 0x659a, 0x4, 0xffff0000, 0xf06, 0x0, 0x5, 0x2, 0x6, 0x1000, 0x8, 0x7, 0x6, 0x1, 0xa, 0x1ff, 0xffffffff, 0x0, 0x3, 0x9, 0xf161, 0x3, 0x4, 0x0, 0x4, 0x8b, 0x6, 0x21bc, 0x8, 0x8001, 0x7f, 0xec, 0xfff, 0x6fe, 0x8001, 0x202, 0x5, 0x17c00000, 0x101, 0xc92c, 0x9, 0x1, 0xfff, 0x0, 0x200, 0xfffff8f3, 0x7ff, 0xfffff800, 0x26, 0xf4, 0x7f, 0x9, 0x97b, 0x28e6b5d5, 0xb55e, 0x1, 0x1, 0x2, 0x2, 0xbe, 0x2, 0x1, 0x0, 0x8, 0x0, 0x10000, 0xe2f, 0x15, 0x7278, 0x3, 0x8, 0x80000001, 0x9, 0x20000, 0x9, 0x4, 0x81, 0x9, 0x3ff, 0x2, 0x10000000, 0x0, 0x7, 0x0, 0x80, 0x8, 0x6, 0x1c37, 0x4, 0x2, 0x9, 0x40, 0x9, 0x400, 0x70000000, 0xff, 0x80, 0x8, 0xfffffffd, 0xfffffff8, 0x6, 0x4, 0x1f, 0x4, 0x4, 0x7ff, 0x74aa, 0x81, 0x1448, 0x7fff, 0x101, 0x1000, 0x10000, 0x5, 0x1ff, 0x6, 0x829c, 0x9, 0x100, 0x5, 0x0, 0xfff, 0x2, 0x0, 0x4f4d5780, 0x7f, 0x47ea, 0x4, 0x34d6260b, 0x4, 0x7ff, 0x401, 0x80, 0x6d12, 0x3, 0x4, 0x101, 0x6, 0xffffffc0, 0x4, 0x20, 0xffff8001, 0x6, 0x4, 0x800, 0x7ff, 0x3, 0x3, 0x8000, 0x8, 0x9, 0x0, 0x4, 0x9, 0x0, 0x4, 0x401, 0x5]}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x3ff, 0x28, &(0x7f0000000000)="20f298e1dd5f4ec367997b3294a97bb43e597b4d0ced66320865fe0dcb83c5a97768a82d07911c19", 0x7e, 0x3, 0xff, 0x7ff, 0x5, 0x1, 0x20, 'syz1\x00'}) 04:48:37 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000040)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) 04:48:37 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:37 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000001b40)={{0x3, 0x100, 0xbb83, 0x7fffffff, 0x100, 0xffff}, 0xe8, [0x8, 0x40, 0x6, 0x3, 0x8, 0x0, 0xc00, 0x4, 0x8, 0x8001, 0x80, 0x6, 0x0, 0x1ff, 0x8, 0x9, 0x20, 0x3, 0x7, 0x83b, 0x0, 0x4, 0x8, 0x3, 0x7f, 0x8, 0x7, 0x3, 0x6, 0xfffffff9, 0x2f9, 0x1, 0x5, 0x80000001, 0x5, 0x200, 0x55, 0x6ff, 0xfffffffe, 0xffffffff, 0x3ca0, 0x2b, 0x9, 0x5, 0xba29, 0x9, 0xfffffe00, 0x3, 0x4, 0x0, 0x8, 0x70, 0x70a8, 0x4, 0x79a, 0x5, 0x5, 0x4, 0x9, 0x10001, 0x8, 0x3f, 0x2, 0x9, 0x4, 0xbb, 0x4e6, 0xad, 0x0, 0x0, 0xcad6, 0x1f, 0x81, 0x6, 0x7fff, 0x7, 0x2, 0x1, 0x5, 0x9, 0x8, 0x9, 0x24, 0xfffffe00, 0xa3, 0x400, 0x4, 0x2, 0x6, 0x8e6, 0x4, 0xde7, 0xfbe, 0x3, 0xfffffbff, 0x7, 0x1ff, 0xffff, 0xb75c, 0x8, 0x80, 0x0, 0x5, 0x3ff, 0x3, 0x9, 0xff, 0x10001, 0x20, 0x28b55ca0, 0x9, 0x1d3, 0x3, 0x7, 0x3, 0x8, 0x800, 0x8001, 0x1000, 0x6, 0x4, 0x8001, 0x7, 0xb2, 0x7, 0x8, 0xbd6, 0x8, 0x7, 0xfffffdcd, 0x0, 0x9, 0x5, 0xffffffff, 0x0, 0x4, 0x1, 0x0, 0x9294, 0x1, 0x0, 0x68d8, 0x8, 0x200000, 0x0, 0x3f, 0x9, 0x200, 0xffff0000, 0x6, 0x95, 0xb46, 0x8, 0x100, 0x81be, 0xfffffffa, 0x1ff, 0x20, 0x2, 0xa90, 0x6, 0x48e, 0x9, 0x6, 0x6, 0x8, 0x9, 0x8, 0x7, 0xffffffff, 0x7, 0x1f, 0x5, 0x400, 0x80000001, 0x7ff, 0x7, 0xfff, 0x10d8, 0x8001, 0x80000000, 0x8da, 0x80000000, 0x401, 0x6, 0x2, 0x1, 0x464a, 0x1, 0x7ff, 0x101, 0x600, 0x1f31d8df, 0x80000000, 0x8, 0x5, 0x5, 0x747, 0x8, 0xfffffe01, 0xffffffff, 0x7, 0x0, 0x8, 0x8000, 0x3, 0x6, 0x5, 0x6, 0x200, 0x2, 0x3, 0x80, 0x9, 0x4e6d5fc8, 0x5, 0x7, 0x1f, 0xfffffff8, 0x1f, 0x1, 0xfffffffe, 0xd1b, 0x0, 0xff, 0x9, 0x6, 0x1ff, 0x101, 0x314, 0x0, 0x810, 0x1, 0xc0, 0xfff, 0xb10, 0x8, 0x7, 0x9, 0x7, 0x7, 0x1, 0x80, 0xfff, 0x9318, 0x1, 0x1, 0x7fffffff, 0x101, 0xffffffff, 0x4, 0x1f, 0x8, 0x8, 0x0, 0x7f, 0x0, 0x3e4, 0x0, 0x2, 0x0, 0x4, 0x31c, 0x9, 0xb7b6, 0x101, 0x9, 0x401, 0xb4c, 0x3, 0x3, 0x0, 0xa00, 0x20, 0x3ff, 0x80000001, 0x10bd8e34, 0x401, 0x8, 0x8, 0x9, 0x5a90e77, 0x7, 0xa6, 0x0, 0x7f, 0x4, 0x97, 0x9, 0x8e, 0x99, 0x8000, 0x1, 0x0, 0x8, 0x9, 0x58, 0xafa7, 0xb03, 0x8, 0x5ec3, 0x4, 0x3, 0x200, 0x6, 0x5, 0x2, 0xbd29, 0x1, 0x4, 0xff, 0x5, 0x3f, 0x4, 0x0, 0x4, 0x91b, 0x101, 0x10000, 0x2, 0x89, 0x0, 0x81, 0x7f, 0x6b3, 0x40, 0x1000, 0x4, 0x6, 0x7fff, 0x9, 0x4, 0x8, 0x53, 0x4, 0x200, 0xfffffff9, 0x0, 0x1f, 0x2, 0x3ff, 0x400000, 0x2, 0x727, 0x9, 0x9, 0xa98, 0x7, 0x101, 0x1, 0x80000000, 0x3ff, 0x1, 0x678b702c, 0x3, 0x80, 0x2, 0x6, 0x2, 0x7fffffff, 0x0, 0x3f, 0x48, 0x9, 0xe9f, 0x7, 0x4, 0x5, 0x8, 0x7, 0x52c, 0x32, 0x7, 0x6, 0x80, 0x1e7, 0xfffffff9, 0x8, 0x4, 0x3, 0x1, 0x200, 0x1, 0x0, 0x8, 0x8, 0xead, 0x7, 0x401, 0x8, 0x9, 0x4, 0x9, 0x4, 0x3, 0x3f, 0x5, 0x5, 0x80, 0x3, 0x2, 0x8, 0x3, 0x1f, 0x5, 0x5, 0x5, 0x9, 0xff, 0x64e7, 0x0, 0xfff, 0x1, 0xf74, 0xff, 0x2, 0x5c09, 0xfffffff7, 0x8, 0x5, 0xffffffff, 0x80000000, 0xe8, 0x9, 0x3, 0x1, 0x2, 0x1, 0x0, 0x6, 0x8000, 0x0, 0x7, 0x9, 0x2, 0xc0, 0x7fffffff, 0x0, 0x0, 0x7, 0x3, 0x1ff, 0x3, 0x7f, 0x354, 0x400, 0x9, 0x1ff, 0x4, 0xfffffffa, 0xfffffffb, 0x5, 0x1, 0x7fffffff, 0x101, 0x3f, 0xee1, 0x2, 0x8000, 0x5, 0x8, 0x572, 0xb2, 0x5, 0x81, 0x4, 0x9, 0x8, 0x7, 0x100, 0x8000, 0x4, 0x80000001, 0x2, 0x7, 0x1, 0x200, 0x80000001, 0x4, 0x9, 0x8c21, 0x40, 0x7, 0x4, 0x6, 0x7fff, 0x8, 0x4, 0x8, 0x10000, 0xe2, 0x0, 0xffffffff, 0x3, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4, 0x1, 0x4, 0x8ad, 0x3, 0xbf5, 0x0, 0x5, 0xfffffff7, 0x8, 0x8001, 0x40, 0x0, 0x2, 0x70fc, 0x5, 0x84, 0x6, 0x7, 0xefc, 0x80, 0x4, 0x7fffffff, 0x800, 0x3, 0xfffffffe, 0x81, 0x4, 0x6, 0x81, 0x7f, 0x7, 0x3, 0x4, 0x7, 0x3, 0x3, 0x1f, 0x9, 0x7, 0x7ff, 0x1, 0x100, 0x3b5e, 0x2, 0x1, 0xfffffffe, 0xfffff76c, 0x10000, 0x7, 0x20, 0x8, 0x6, 0x3, 0x3f, 0x0, 0x8000, 0x0, 0x3, 0x2, 0x2, 0x3, 0x3, 0x6, 0x1000, 0x99, 0x7fffffff, 0x3ff, 0x80000001, 0x0, 0x2, 0x1, 0x0, 0x8, 0x2, 0x6, 0x20, 0x7f, 0xae3, 0x2e44, 0x5d21, 0x3, 0x4e01, 0x8, 0xcaca, 0x8, 0xff, 0x3, 0x80000000, 0x101, 0x3, 0xfffffc00, 0x6, 0xac7, 0x1, 0x5, 0x1, 0x3f, 0x22111cd1, 0x3, 0x0, 0x4, 0x0, 0x0, 0x8, 0x4, 0x401, 0x2, 0x3, 0x3bd, 0x5, 0x1, 0x9, 0x6, 0x1, 0x3, 0x0, 0x3, 0x80000000, 0x0, 0x7fff, 0x100, 0x249b, 0xae94, 0xfffffc00, 0x5, 0xe7cf, 0x9, 0x1, 0x3, 0x1, 0x10000, 0x401, 0xb6e, 0x9, 0x1, 0x0, 0x8000, 0xde2, 0x4, 0x1ff, 0x3, 0x7fff, 0x6, 0x4, 0x101, 0x364, 0x3, 0x4, 0x1000, 0x1, 0x8, 0xeb6, 0x0, 0x937, 0xffff2dc7, 0x0, 0x7fff, 0x1f, 0x1000, 0x2a, 0x7, 0x3f, 0xffffffff, 0xb3d5, 0x80000001, 0x7fff, 0x1, 0x4, 0x2, 0xa4, 0x0, 0x101, 0x6, 0x40100, 0x7, 0x2bcd4b4b, 0x0, 0x6, 0x3, 0xd9, 0x6, 0x7ff, 0x5, 0x2, 0x401, 0x80, 0x8, 0x827, 0x9, 0x6, 0x5, 0x8661, 0xffffff40, 0x3, 0x1, 0xc614, 0x7fff, 0x3, 0x80000000, 0x9, 0x715, 0xffff7fff, 0x3f, 0x7fffffff, 0x4, 0xfff, 0x0, 0x7, 0x74c4, 0xffffffff, 0x1, 0x1, 0xfffffffa, 0xca9, 0xebe, 0x3, 0x0, 0x4, 0x5, 0x0, 0x3ff, 0xffff97cb, 0x10001, 0x4, 0x6, 0x7, 0x1, 0x401, 0x9, 0x7f2, 0x9, 0xbcf, 0x3fa1, 0x9, 0x3f, 0x80000001, 0xf2b, 0x8, 0x3, 0x100, 0xcd33, 0x7, 0x0, 0x6, 0xffff, 0x1ff, 0x3, 0x1, 0x7876bb9, 0x73, 0x400, 0x0, 0x8, 0x6, 0x9, 0x1, 0x40, 0x0, 0x4, 0x400, 0x8, 0x5, 0x9, 0xfff, 0x19, 0x7ff, 0x7fff, 0xfb, 0x3, 0x400, 0x3, 0x1000, 0x8, 0x7ff, 0x0, 0x0, 0x7, 0x1, 0xff5, 0x7fff, 0x2610, 0xa796, 0x3, 0x101, 0xb005, 0xa8af, 0x29b, 0x924, 0x5, 0x2, 0x3f, 0x6, 0x4, 0x2b, 0x6, 0x4, 0x5, 0x6, 0xff, 0xffffffff, 0x80000001, 0x10001, 0x2, 0x40, 0xe1, 0x40, 0xf0, 0x2b7a, 0x3, 0x7fffffff, 0x7, 0x8, 0x3, 0xffff, 0x0, 0x3f, 0x1000, 0x8, 0x5, 0x1ff, 0x2, 0x7, 0x0, 0x99, 0x10001, 0x6a, 0x21, 0x7, 0x2, 0x5, 0x5, 0x5, 0xffffff80, 0x2, 0x80000001, 0x2, 0x8, 0x10001, 0xff, 0x4, 0x0, 0xfffffffd, 0x8f1, 0x800, 0x5b, 0x8, 0x5, 0x8, 0x380, 0x3, 0xff, 0x1, 0x101, 0x3, 0x8000, 0x1f, 0xa4, 0x9, 0xfffffff9, 0x20, 0x4e85, 0x25e, 0x3, 0x1, 0x2, 0xc76, 0x3f, 0xcb5, 0x0, 0x1, 0x0, 0xffffffff, 0xe863, 0xd17, 0x4, 0x3b0, 0x6, 0x3f, 0x0, 0x9, 0x8, 0x2, 0x2, 0x0, 0x7, 0x100, 0x957, 0x7, 0xd80, 0x0, 0x5, 0xfffffff7, 0x5, 0x4, 0x1, 0xffffff37, 0xdb0c, 0xb, 0x0, 0x8, 0x8, 0xd7c, 0x43, 0x3, 0x6d7, 0x5e68527b, 0x4, 0x7fff, 0x7, 0x65b6, 0x7fff, 0x5, 0x2, 0xffffffff, 0x6, 0xffff, 0xa37f, 0x9, 0x318, 0x3, 0xd7, 0x162, 0x5, 0x4f3d, 0x1c000, 0x2, 0x10001, 0x4, 0x6, 0x7, 0x2, 0x9, 0x1, 0x8, 0x9, 0x3, 0x8000, 0xfffffff8, 0xfffffffd, 0x7f, 0x10001, 0x8, 0x100, 0x1ff, 0x5719c7a2, 0x80000000, 0xffff, 0x8, 0x6, 0x3, 0x9, 0x2, 0x9, 0x3, 0xfffffff8, 0x8000, 0x2, 0x80000001, 0x4e84, 0x74c, 0x2, 0x3, 0x99ab, 0x0, 0x1, 0x80000000, 0x3f, 0xd005, 0x0, 0x0, 0x401, 0x3f, 0x8, 0x100, 0xffff, 0x1f6, 0x1, 0x7, 0x7f, 0x4, 0x200, 0xf9e, 0x8, 0x400, 0x1, 0x1, 0x8001, 0x5, 0xf6, 0x1, 0x285a, 0xbc, 0xfffffff7, 0x9, 0x2, 0x401, 0x3f, 0x100, 0x0, 0x1, 0x0, 0x14, 0x7, 0xfff, 0x80000001, 0x0, 0x10001, 0x8001, 0x17a4, 0x3ff, 0x8, 0x1b1, 0x7, 0x8, 0x9, 0x5, 0xffff, 0xfff, 0x5, 0x93, 0x8, 0x6, 0x3, 0x1]}) (async) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000b00)={{0x1, 0x200, 0x63b, 0x0, 0x2990821, 0x9}, 0x1a0, [0x5, 0x4, 0x87, 0x1, 0x3, 0x800, 0x6c, 0x2, 0xffff, 0x8000, 0x0, 0x3, 0x2, 0x4611, 0xda8d, 0xe751, 0x1, 0x10000, 0x3ff, 0x4, 0x5, 0x7fffffff, 0x19, 0xff, 0x0, 0xffff7fff, 0x4, 0x5, 0x80000001, 0x2, 0x7fffffff, 0x4, 0x40, 0x1f, 0x101, 0x80, 0x8740000, 0x0, 0x3, 0x1, 0x4, 0x8, 0x10000, 0x5, 0x2, 0x87e8, 0x401, 0x7fff, 0x9, 0x4, 0xfffffffb, 0x7, 0x7, 0x400, 0x9, 0x0, 0x6, 0x0, 0x4, 0x2, 0x3, 0x6, 0x81, 0x10001, 0x5, 0x5, 0x4, 0x400, 0x9, 0x6, 0x101, 0xffffb0d3, 0x199, 0xf665, 0x3, 0x9, 0x400, 0xff, 0x200, 0x5, 0x0, 0x3, 0x81, 0x2, 0xfffffffa, 0x1c6, 0x0, 0x2, 0x0, 0xe74, 0x6, 0x7fff, 0x7, 0x2, 0x3ff, 0x6, 0x1, 0x0, 0x6b, 0x7, 0xffffffff, 0x1000, 0x3ff, 0xfffffff7, 0x5, 0x94, 0x2, 0x0, 0x8000, 0x5, 0x57b, 0x9, 0x2, 0x7, 0xfffffffd, 0x53ff, 0x1, 0x8a1, 0x80000000, 0x80, 0xc9, 0xfffffff7, 0xffffffff, 0x7, 0x9, 0x2, 0xfffffffd, 0x0, 0x7fff, 0xffff, 0x9, 0x8, 0x3, 0x3f, 0x40, 0x401, 0x0, 0x1000, 0x1, 0x1, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0x8, 0x3, 0x9, 0x7, 0xffffffff, 0x3f1, 0xd2b0, 0x8001, 0x5, 0xa927, 0x7, 0x6, 0x8, 0x5, 0xfff, 0x9, 0x2, 0x2, 0x7, 0x1000, 0x84f7, 0x6, 0x7, 0x7, 0x2ac, 0x5143, 0x1ff, 0x5, 0x6, 0x0, 0xfffffe8e, 0x1, 0x5a, 0x81, 0xd5b9, 0x9, 0x8000, 0x8000, 0x3, 0xfffffffc, 0x8, 0xffff, 0x3ff, 0x20, 0x4, 0x4e96, 0xf65, 0x0, 0xffffffff, 0x5, 0x9, 0x9, 0x401, 0xda4, 0x9, 0x4, 0x9, 0x6, 0x1, 0x3, 0x8, 0x7d, 0x4, 0x8, 0x101, 0x7ff, 0x10001, 0x4, 0x2, 0x7, 0x3, 0x9, 0x7, 0x5, 0xde, 0x10001, 0x399c2ddd, 0x1a, 0x4a90, 0x3, 0x3, 0x0, 0x6, 0x4, 0x6, 0x9, 0x400000, 0x3b4339c, 0x4, 0xadcb, 0xf, 0x0, 0x7fff, 0x2, 0x5, 0xffffffff, 0x6, 0xb2ba, 0x9, 0x7fffffff, 0x5, 0x5, 0xfffffffe, 0x9, 0x3, 0xb1b, 0x8001, 0x7ff, 0x0, 0x4afa, 0x5, 0x9, 0xfff, 0x0, 0x95, 0x1f, 0xe92, 0x0, 0x5, 0x81, 0x7, 0x800, 0xe60, 0x5, 0x5, 0xfffffffb, 0xffffffe0, 0x3e1, 0x3, 0x2, 0x5, 0x3, 0x5, 0x2000000, 0x0, 0x3f, 0x7, 0x3f, 0xffffffc1, 0x20, 0x0, 0xffff, 0x9, 0x2e3, 0xffffffc0, 0x0, 0x49e, 0x1, 0x4894, 0xfff, 0x1, 0x10001, 0x8, 0x5, 0x0, 0xbc6d, 0x6, 0xff, 0x5, 0x7, 0x6, 0xfffff4fe, 0xffffffff, 0x6, 0x80000001, 0x7f, 0x1, 0x7, 0xf45, 0x6, 0x20, 0x2, 0x9, 0x4, 0x4d4b, 0xa6, 0x2, 0x10000, 0x3, 0xfffffffc, 0xfff, 0x4, 0x1f, 0x2, 0x6, 0xea07, 0x1, 0x99b7, 0x7, 0x1ff, 0x4, 0x3, 0x5, 0x80, 0x39dfbb30, 0x6, 0x17, 0xf614, 0x4, 0x101, 0x544, 0x0, 0x1000, 0x80000001, 0x5, 0x9e1, 0x1, 0x1, 0xf67, 0xca, 0x6, 0xc122, 0x7, 0x5, 0x9, 0x17, 0x3, 0x2, 0x7, 0x6, 0x9, 0x80000000, 0x7, 0x0, 0x0, 0x9, 0xffff0ec4, 0x1, 0x3, 0x2, 0xffff, 0x8f8, 0x8, 0x8, 0x200, 0x4, 0x4, 0x3, 0x8001, 0x8, 0x3, 0x103, 0xff, 0x0, 0x8, 0x2, 0x6, 0xdfc, 0x5, 0xd4, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x8, 0x5, 0xd8f8, 0x261e, 0x0, 0x2, 0x529ed986, 0x10000, 0x400, 0x10001, 0x3f, 0x100, 0x101, 0x200, 0x7fffffff, 0x1af, 0x7f, 0x80000000, 0x5, 0x9, 0x10000, 0xfff, 0x4, 0x7, 0x3, 0x2, 0x200, 0x8, 0xffff, 0x3c, 0x4, 0x7, 0xfffffffa, 0x3, 0x8001, 0x1, 0x95, 0x3ff, 0x4, 0xff, 0x10001, 0x4, 0x0, 0x3f, 0x80, 0x8, 0x8, 0xdb26, 0x3, 0x0, 0x8, 0x9, 0x3, 0x2, 0x2, 0xd3fa, 0x10001, 0x80000001, 0x6, 0x20, 0x2e, 0x7ff, 0x4, 0x7ff, 0x9, 0x1, 0x1, 0x3, 0x20, 0x7, 0x6, 0x1, 0xfffffffc, 0x1, 0x0, 0x4, 0x6, 0x0, 0x7fffffff, 0x40, 0x3, 0x7fffffff, 0x4, 0x6, 0x9, 0x20, 0x9, 0x9, 0x8, 0x10001, 0x80000001, 0x4, 0x7ff, 0xffffff7f, 0x62, 0x400, 0x2cd, 0x10000, 0xffff, 0x9, 0x80, 0x4, 0x2, 0xfb3a, 0x401, 0x8, 0x4, 0x1, 0x4, 0x48355674, 0x283d, 0x6, 0x12, 0x1, 0x10000, 0x80, 0xffffff01, 0xa93, 0x1, 0x9, 0xffffcfac, 0x6, 0x2, 0x3, 0x5, 0x10001, 0xff, 0x3, 0x0, 0x2, 0x5, 0x3f, 0x9, 0xbde, 0x5, 0x5, 0x9, 0x2593, 0xff4, 0x4, 0xfff, 0x7de, 0x9, 0x101, 0x2, 0x5, 0x7ff, 0x1ff, 0x800, 0x6, 0x7fff, 0xeca0, 0x7fff, 0xfff, 0x100, 0x0, 0x72, 0x6, 0xfffffffc, 0x100, 0x200, 0x5, 0x80000000, 0xc8800000, 0x2, 0x9, 0x480000, 0x5, 0x9, 0x9, 0x5, 0xffffffff, 0x8001, 0x5, 0x6, 0x3, 0x1, 0x7, 0x800, 0xfffffbff, 0x0, 0x101, 0x6, 0x104, 0x2, 0x9, 0x5, 0x5, 0x1, 0x3bf, 0x8, 0x7, 0x54, 0x80, 0x800, 0xffff, 0x1, 0x1, 0x6, 0xff, 0x9, 0x8001, 0x8, 0x0, 0x5, 0x8, 0x81, 0x3, 0x3, 0x4, 0x8001, 0x6, 0x8000, 0x20, 0x1, 0x5, 0x3, 0x3, 0xf2fa0000, 0x147, 0x50000000, 0x6, 0x0, 0x8000, 0x10f7, 0x20, 0x0, 0x3, 0x8, 0x3, 0x4, 0x9, 0xe7a, 0x1f, 0xfffffffa, 0x1, 0x1, 0x9, 0xa9, 0xfff, 0x9, 0x1, 0x4, 0x7ff, 0x1, 0xffffffff, 0x0, 0x4, 0x81, 0x5, 0x1, 0x3, 0x4, 0x1, 0x7, 0xc, 0x3, 0x5ff44e2c, 0x0, 0x6, 0x5, 0x2, 0x3b, 0x7fffffff, 0x7fffffff, 0x3, 0x0, 0xddf9, 0x7, 0x3, 0x0, 0x3, 0x3, 0x61d, 0x7, 0x200, 0x2, 0x80000001, 0x6, 0xfff, 0x1, 0x8, 0x6d84, 0x8, 0x5, 0xffff, 0x1ff, 0x0, 0x2, 0x18, 0x9, 0x9, 0x101, 0x6, 0x3, 0x4aa, 0x3f, 0x6e, 0x9, 0x8, 0x91f, 0xc852, 0x6, 0x3ff, 0x101, 0x0, 0x1ff, 0x1, 0x2, 0x0, 0x6, 0x101, 0x10001, 0x4c4, 0x9, 0x9, 0x0, 0x8, 0x2, 0x7, 0x7ff, 0x4, 0x1ff, 0xeb4, 0x4, 0xfffffff8, 0xf4, 0x3, 0x2, 0x5, 0x5, 0x9, 0x9, 0x6, 0x6, 0xfffffffc, 0x8001, 0x8, 0x3, 0x40, 0xd0, 0x401, 0xffffffff, 0x1ff, 0x9, 0x7, 0x4, 0xc0, 0x1, 0x200, 0x7f, 0x0, 0x2, 0x1, 0xb9a, 0x2, 0x81, 0x40, 0x2, 0x0, 0x5, 0x80000001, 0x400, 0x1, 0x5, 0x0, 0x0, 0xece, 0x74b, 0x9, 0x7fff, 0x3ff, 0x6, 0x7, 0x40, 0x8, 0x9, 0x8, 0x52d, 0x6, 0x3, 0x80000000, 0xa, 0x7b3, 0x4, 0xfffffffd, 0x8, 0x4, 0x40, 0x8, 0xb9f, 0x2, 0x100, 0x9, 0x8, 0x7721, 0x9, 0x80000001, 0x0, 0x1, 0x4, 0xff, 0x7, 0x5, 0x0, 0xfffffeff, 0x5, 0x7fffffff, 0x77, 0xedd, 0x7, 0x7, 0x5, 0x5, 0x5, 0x3928, 0x221, 0x1ff, 0xffffff81, 0x8000, 0x9, 0x681, 0x1, 0xd79, 0x9, 0x9, 0x1, 0x0, 0x7, 0x5, 0xf74, 0x1ff, 0x4, 0x1, 0x10000, 0x20b, 0x6, 0x5, 0x6cc, 0x9, 0x3f, 0x4f40, 0xffffffe0, 0x8, 0xf9, 0x6, 0x1, 0x1da9, 0x800, 0x9, 0x0, 0x470, 0x2, 0x5, 0x7, 0x9, 0x9, 0x7, 0x6, 0x401, 0x81, 0x2, 0x4, 0xd6, 0x6, 0x10000, 0x659a, 0x4, 0xffff0000, 0xf06, 0x0, 0x5, 0x2, 0x6, 0x1000, 0x8, 0x7, 0x6, 0x1, 0xa, 0x1ff, 0xffffffff, 0x0, 0x3, 0x9, 0xf161, 0x3, 0x4, 0x0, 0x4, 0x8b, 0x6, 0x21bc, 0x8, 0x8001, 0x7f, 0xec, 0xfff, 0x6fe, 0x8001, 0x202, 0x5, 0x17c00000, 0x101, 0xc92c, 0x9, 0x1, 0xfff, 0x0, 0x200, 0xfffff8f3, 0x7ff, 0xfffff800, 0x26, 0xf4, 0x7f, 0x9, 0x97b, 0x28e6b5d5, 0xb55e, 0x1, 0x1, 0x2, 0x2, 0xbe, 0x2, 0x1, 0x0, 0x8, 0x0, 0x10000, 0xe2f, 0x15, 0x7278, 0x3, 0x8, 0x80000001, 0x9, 0x20000, 0x9, 0x4, 0x81, 0x9, 0x3ff, 0x2, 0x10000000, 0x0, 0x7, 0x0, 0x80, 0x8, 0x6, 0x1c37, 0x4, 0x2, 0x9, 0x40, 0x9, 0x400, 0x70000000, 0xff, 0x80, 0x8, 0xfffffffd, 0xfffffff8, 0x6, 0x4, 0x1f, 0x4, 0x4, 0x7ff, 0x74aa, 0x81, 0x1448, 0x7fff, 0x101, 0x1000, 0x10000, 0x5, 0x1ff, 0x6, 0x829c, 0x9, 0x100, 0x5, 0x0, 0xfff, 0x2, 0x0, 0x4f4d5780, 0x7f, 0x47ea, 0x4, 0x34d6260b, 0x4, 0x7ff, 0x401, 0x80, 0x6d12, 0x3, 0x4, 0x101, 0x6, 0xffffffc0, 0x4, 0x20, 0xffff8001, 0x6, 0x4, 0x800, 0x7ff, 0x3, 0x3, 0x8000, 0x8, 0x9, 0x0, 0x4, 0x9, 0x0, 0x4, 0x401, 0x5]}) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x3ff, 0x28, &(0x7f0000000000)="20f298e1dd5f4ec367997b3294a97bb43e597b4d0ced66320865fe0dcb83c5a97768a82d07911c19", 0x7e, 0x3, 0xff, 0x7ff, 0x5, 0x1, 0x20, 'syz1\x00'}) 04:48:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) 04:48:38 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) 04:48:38 executing program 4: socket(0x1b, 0x2, 0x84) 04:48:38 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:38 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000040)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) 04:48:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x1) 04:48:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/103, 0x67, 0x1, &(0x7f00000000c0)=""/95, 0x5f}, &(0x7f0000000180)=0x40) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) 04:48:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:38 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) 04:48:38 executing program 4: socket(0x1b, 0x2, 0x84) socket(0x1b, 0x2, 0x84) (async) 04:48:38 executing program 3: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:38 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000000040)) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) 04:48:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:38 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) 04:48:38 executing program 3: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:38 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) [ 1147.880160][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/103, 0x67, 0x1, &(0x7f00000000c0)=""/95, 0x5f}, &(0x7f0000000180)=0x40) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:39 executing program 3: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:39 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:39 executing program 1: socket(0x10, 0x2, 0x7) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2418, 0x8, '9P2000.u'}, 0x15) 04:48:39 executing program 4: socket(0x1b, 0x2, 0x84) 04:48:39 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:39 executing program 3: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:39 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:39 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:39 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:39 executing program 4: socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 04:48:39 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:40 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/103, 0x67, 0x1, &(0x7f00000000c0)=""/95, 0x5f}, &(0x7f0000000180)=0x40) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:40 executing program 1: socket(0x10, 0x2, 0x7) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2418, 0x8, '9P2000.u'}, 0x15) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2418, 0x8, '9P2000.u'}, 0x15) 04:48:40 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:40 executing program 5: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:40 executing program 3: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:40 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x614a40, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x9, 0x400000) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x135901, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x721b00, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) socket(0xa, 0x1, 0x5) 04:48:40 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:40 executing program 5: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:40 executing program 1: socket(0x10, 0x2, 0x7) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x2418, 0x8, '9P2000.u'}, 0x15) 04:48:40 executing program 3: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) socket(0x2, 0x2, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c20400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1) 04:48:40 executing program 2: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) [ 1149.960089][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:41 executing program 4: socket(0x3, 0x1, 0xffff7ffe) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) 04:48:41 executing program 5: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:41 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r0, 0x6, 0xb5, &(0x7f0000000000)="1fb44abf8da3d1d63eeb35daf1fa1b7aff65af055ef6da3d735b72b81c8c374f9f74223d000947b8f38558f9292759a72d710c2838b5e592b77250e81e8d7f1e11e8df0bf890ee7133db4e367fa3880d4d690c49a3d910ecee8c06b7b34462b77d59a6709d53e5465e338b65237d38976be25da910ef1f43ffddec74400c98ee17fd5422c68c31f1c130f2f9ec2d776bdb42942674b8a60bad0d7b4baa350727695f832e0ccd1ed49ae5864271c880b649579efb2d", 0x4, 0x3, 0x100, 0x8, 0x5, 0x2, 0x80, 'syz0\x00'}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0xa, 0x0, 0x81}) 04:48:41 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:41 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x71f, 0x1214c3) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0xaf, "a2a69ee1e5d5fedb41010cabeffe22435bb63a6b3e9951c3caa8bf1ab5e0efc0ff32e1e36465c5dda5f180b5d0ad19e2bf0f126c7c4a495e4636a064a317d3fbee8d5320027d0b7dcafce4c4f3f9b5d06862b4fcf35415e8f73ba5270122a8c192771a3786736a9c7f45fccec7bd6b8ad7b88f0d092f628dbf90d26011bcac37ef512a4c5425a8610f10860db7ebe2d4cea666e67e71eceacc014524a811f0d2f232ffb4333c110d8128b1c6ed340a"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:48:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:41 executing program 4: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 04:48:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:41 executing program 5: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:41 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r0, 0x6, 0xb5, &(0x7f0000000000)="1fb44abf8da3d1d63eeb35daf1fa1b7aff65af055ef6da3d735b72b81c8c374f9f74223d000947b8f38558f9292759a72d710c2838b5e592b77250e81e8d7f1e11e8df0bf890ee7133db4e367fa3880d4d690c49a3d910ecee8c06b7b34462b77d59a6709d53e5465e338b65237d38976be25da910ef1f43ffddec74400c98ee17fd5422c68c31f1c130f2f9ec2d776bdb42942674b8a60bad0d7b4baa350727695f832e0ccd1ed49ae5864271c880b649579efb2d", 0x4, 0x3, 0x100, 0x8, 0x5, 0x2, 0x80, 'syz0\x00'}) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0xa, 0x0, 0x81}) 04:48:41 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x1, 0x4) 04:48:41 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000000c0)={r1, r0, 0x6, 0xb5, &(0x7f0000000000)="1fb44abf8da3d1d63eeb35daf1fa1b7aff65af055ef6da3d735b72b81c8c374f9f74223d000947b8f38558f9292759a72d710c2838b5e592b77250e81e8d7f1e11e8df0bf890ee7133db4e367fa3880d4d690c49a3d910ecee8c06b7b34462b77d59a6709d53e5465e338b65237d38976be25da910ef1f43ffddec74400c98ee17fd5422c68c31f1c130f2f9ec2d776bdb42942674b8a60bad0d7b4baa350727695f832e0ccd1ed49ae5864271c880b649579efb2d", 0x4, 0x3, 0x100, 0x8, 0x5, 0x2, 0x80, 'syz0\x00'}) (async, rerun: 64) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0xa, 0x0, 0x81}) 04:48:41 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x4) 04:48:41 executing program 5: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:41 executing program 4: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 04:48:42 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x71f, 0x1214c3) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0xaf, "a2a69ee1e5d5fedb41010cabeffe22435bb63a6b3e9951c3caa8bf1ab5e0efc0ff32e1e36465c5dda5f180b5d0ad19e2bf0f126c7c4a495e4636a064a317d3fbee8d5320027d0b7dcafce4c4f3f9b5d06862b4fcf35415e8f73ba5270122a8c192771a3786736a9c7f45fccec7bd6b8ad7b88f0d092f628dbf90d26011bcac37ef512a4c5425a8610f10860db7ebe2d4cea666e67e71eceacc014524a811f0d2f232ffb4333c110d8128b1c6ed340a"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:48:42 executing program 5: r0 = socket(0x0, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x4) 04:48:42 executing program 3: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:42 executing program 1: socket(0x21, 0x3, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 04:48:42 executing program 4: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 04:48:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x4) 04:48:42 executing program 1: socket(0x21, 0x3, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) socket(0x21, 0x3, 0x5) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) 04:48:42 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) 04:48:42 executing program 1: socket(0x21, 0x3, 0x5) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 04:48:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) 04:48:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x71f, 0x1214c3) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0xaf, "a2a69ee1e5d5fedb41010cabeffe22435bb63a6b3e9951c3caa8bf1ab5e0efc0ff32e1e36465c5dda5f180b5d0ad19e2bf0f126c7c4a495e4636a064a317d3fbee8d5320027d0b7dcafce4c4f3f9b5d06862b4fcf35415e8f73ba5270122a8c192771a3786736a9c7f45fccec7bd6b8ad7b88f0d092f628dbf90d26011bcac37ef512a4c5425a8610f10860db7ebe2d4cea666e67e71eceacc014524a811f0d2f232ffb4333c110d8128b1c6ed340a"}) (async) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0xaf, "a2a69ee1e5d5fedb41010cabeffe22435bb63a6b3e9951c3caa8bf1ab5e0efc0ff32e1e36465c5dda5f180b5d0ad19e2bf0f126c7c4a495e4636a064a317d3fbee8d5320027d0b7dcafce4c4f3f9b5d06862b4fcf35415e8f73ba5270122a8c192771a3786736a9c7f45fccec7bd6b8ad7b88f0d092f628dbf90d26011bcac37ef512a4c5425a8610f10860db7ebe2d4cea666e67e71eceacc014524a811f0d2f232ffb4333c110d8128b1c6ed340a"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 04:48:43 executing program 3: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:43 executing program 4: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) 04:48:43 executing program 1: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}}, 0x0) socket(0x10, 0x2, 0x7) 04:48:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) 04:48:43 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:43 executing program 3: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) 04:48:43 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x71f, 0x1214c3) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000080)={0xaf, "a2a69ee1e5d5fedb41010cabeffe22435bb63a6b3e9951c3caa8bf1ab5e0efc0ff32e1e36465c5dda5f180b5d0ad19e2bf0f126c7c4a495e4636a064a317d3fbee8d5320027d0b7dcafce4c4f3f9b5d06862b4fcf35415e8f73ba5270122a8c192771a3786736a9c7f45fccec7bd6b8ad7b88f0d092f628dbf90d26011bcac37ef512a4c5425a8610f10860db7ebe2d4cea666e67e71eceacc014524a811f0d2f232ffb4333c110d8128b1c6ed340a"}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x7, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 1152.040198][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:48:43 executing program 3: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="000828bd7000fddbdf250200000005000600c100000008000400d3050000140001000000aa0801030000000000050005000300"/66], 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:43 executing program 1: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}}, 0x0) socket(0x10, 0x2, 0x7) 04:48:43 executing program 4: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0x4) 04:48:43 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/15, 0xf}], &(0x7f0000000280)=[0x100000001, 0x8, 0x4, 0x229f, 0x101, 0x4, 0x1, 0x5, 0x6279, 0x1]}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x881) 04:48:43 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) 04:48:43 executing program 5: r0 = socket(0x2, 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:43 executing program 1: write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x30}}, 0x0) socket(0x10, 0x2, 0x7) 04:48:43 executing program 4: r0 = socket(0x23, 0x5, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) 04:48:44 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) 04:48:44 executing program 4: socket(0x23, 0x5, 0x2) 04:48:44 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x1) 04:48:44 executing program 2: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 04:48:44 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/15, 0xf}], &(0x7f0000000280)=[0x100000001, 0x8, 0x4, 0x229f, 0x101, 0x4, 0x1, 0x5, 0x6279, 0x1]}, 0x20) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x881) 04:48:44 executing program 1: r0 = socket(0x2e, 0x2, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) r3 = socket(0x2b, 0x1, 0x7fffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000084}, 0x0) 04:48:44 executing program 2: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 04:48:44 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:44 executing program 4: socket(0x0, 0x5, 0x2) 04:48:44 executing program 5: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:44 executing program 1: r0 = socket(0x2e, 0x2, 0xb) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) (async) r3 = socket(0x2b, 0x1, 0x7fffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000084}, 0x0) 04:48:44 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:44 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:44 executing program 5: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:44 executing program 4: socket(0x0, 0x5, 0x2) 04:48:44 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:44 executing program 0: io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000300)={0x4, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f00000000c0)=""/28, 0x1c}, {&(0x7f0000000100)=""/250, 0xfa}, {&(0x7f0000000200)=""/15, 0xf}], &(0x7f0000000280)=[0x100000001, 0x8, 0x4, 0x229f, 0x101, 0x4, 0x1, 0x5, 0x6279, 0x1]}, 0x20) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008800}, 0x881) 04:48:44 executing program 1: r0 = socket(0x2e, 0x2, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x8005) (async) r3 = socket(0x2b, 0x1, 0x7fffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000084}, 0x0) 04:48:44 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:44 executing program 5: socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:44 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20008045}, 0x1) 04:48:44 executing program 4: socket(0x0, 0x5, 0x2) 04:48:45 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:45 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x1) 04:48:45 executing program 2: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:45 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x0) 04:48:45 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 04:48:45 executing program 4: socket(0x23, 0x0, 0x2) [ 1154.119858][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:48:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:45 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x0) 04:48:45 executing program 2: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:45 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:45 executing program 4: socket(0x23, 0x0, 0x2) 04:48:45 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 04:48:45 executing program 2: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:45 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x0) 04:48:45 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:45 executing program 2: r0 = socket(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:45 executing program 4: socket(0x23, 0x0, 0x2) 04:48:45 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) socket(0x10, 0x2, 0x7) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) 04:48:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:46 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 04:48:46 executing program 4: socket(0x23, 0x5, 0x0) 04:48:46 executing program 2: r0 = socket(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:46 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}}, 0x0) 04:48:46 executing program 1: r0 = socket(0x10, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x404c040) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x100, 0x70bd26, 0x8, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x54040}, 0x40094) 04:48:46 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440), 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000001) 04:48:46 executing program 4: socket(0x23, 0x5, 0x0) 04:48:46 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 04:48:46 executing program 1: r0 = socket(0x10, 0x2, 0x7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x404c040) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x100, 0x70bd26, 0x8, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x54040}, 0x40094) 04:48:46 executing program 2: r0 = socket(0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:46 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 1156.200056][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:48:47 executing program 1: r0 = socket(0x10, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x404c040) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x100, 0x70bd26, 0x8, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x54040}, 0x40094) 04:48:47 executing program 4: socket(0x23, 0x5, 0x0) 04:48:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x47, &(0x7f0000000140)=""/71, 0x40f00, 0x9, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000000c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x3, 0x10001, 0xb861}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r2], &(0x7f0000000240)=[{0x4, 0x3, 0xd}, {0x5, 0x5, 0xe, 0x4}], 0x10, 0x6}, 0x90) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) 04:48:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000, 0x0, 0xffffffffffffffff}) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80000}) (async) connect$bt_sco(r1, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:48:47 executing program 2: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:47 executing program 3: write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000)='THAWED\x00', 0x7) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0xffffffffffffffff}, 0xf) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 04:48:47 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x521080, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x802, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r7, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x47, &(0x7f0000000240)=""/71}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000001c0)=[r2, r3, r4, r0, r0, r5, r6, r0, r8]}, 0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) connect$bt_sco(r9, &(0x7f0000000440)={0x1f, @fixed}, 0x8) 04:48:47 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) socket(0x14, 0x5, 0x0) 04:48:47 executing program 2: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:47 executing program 3: r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) write$yama_ptrace_scope(r0, &(0x7f0000000000)='1\x00', 0x2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x143, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0xb4, 0x0, &(0x7f0000001640)=[@acquire={0x40046305, 0x1}, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x24}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/104, 0x68, 0x0, 0x13}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x40}, @decrefs={0x40046307, 0x1}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x2, 0x1f}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/249, 0xf9, 0x0, 0x1a}, @fda={0x66646185, 0x2, 0x2, 0x3d}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}}], 0x1d, 0x0, &(0x7f0000000580)="38da5dec9d5381893d518ee922aff5891d17f64cc17cf4aad6d5130a20"}) r4 = syz_open_dev$hiddev(&(0x7f0000000180), 0xfff, 0x400005) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f00000001c0)) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) 04:48:47 executing program 1: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x121201, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x5, 0x5, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, r4, 0x0, 0x0], 0x4, 0x0, r5, 0x81, 0x4, 0x4, 0xd53, {0x9, 0x3, 0xf2, 0xd6cb, 0xfff, 0x9, 0x7, 0x7ff, 0xb95d, 0xe7ac, 0x6, 0x200, 0x2, 0x3, "3b95c0b82b8291c2171bc51a5d08b1873fc95077665744df01d79fb5cd921484"}}) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x9, 0x200000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000b00)={{0x3, 0xffffffff, 0x1, 0x3, 0x31, 0x7}, 0x21f, [0x1, 0x1000, 0x7ff0000, 0xffffff61, 0xd2c8, 0x0, 0x6, 0xfffffffe, 0x1, 0xfffffffa, 0xffffff81, 0x10001, 0x3ff, 0x5, 0x0, 0x5, 0xdcc, 0x4, 0x0, 0x81, 0x400, 0xff, 0x4, 0x6, 0x10001, 0x0, 0x8001, 0x4, 0x2, 0xd37, 0x9, 0x0, 0x8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0x800, 0x5, 0x6, 0x61, 0x200, 0x1f, 0x7f, 0x400, 0x400, 0x3, 0x2dc, 0x9, 0xffffd0c2, 0xd132, 0x6, 0x3, 0x7, 0x7fff, 0x3, 0x6, 0x8, 0x7fff, 0xffff, 0xfae0, 0x7f, 0x80000000, 0x8, 0x3f, 0x1, 0x80, 0x7ff, 0x94bc, 0x10000, 0x7fff, 0xc259, 0xffff, 0x2a, 0x0, 0x0, 0x7, 0x1, 0x8, 0x200, 0x6, 0x0, 0x3, 0x1f, 0xdf9, 0x0, 0x0, 0xcfb6, 0x84, 0x40, 0x2, 0x1, 0x1, 0x2, 0x2, 0x9beef8b8, 0x4, 0xfffffffe, 0x656, 0x27, 0x9, 0x4, 0x8, 0x9, 0x5d, 0x4, 0x81, 0x3, 0xee, 0x800, 0x7, 0x80000001, 0x10000, 0xb9e, 0x200, 0x3, 0x80000000, 0x101, 0x7, 0x9, 0x0, 0x5, 0x7, 0xf4b3, 0x0, 0x8000, 0x20, 0x4, 0x4, 0x0, 0x800, 0x8a0, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x7, 0x3f, 0xff, 0x3, 0x3, 0xfffffff9, 0x40, 0xffffff11, 0xa4b, 0x4, 0x140, 0x401, 0x21f, 0xfe7, 0xffff, 0x7, 0x3, 0x40, 0x1, 0x81e, 0xfffffffc, 0x3ff, 0x400, 0x1, 0x48000, 0x100, 0x5, 0x0, 0x2ffd, 0x5, 0xffffbe52, 0x3f, 0x3, 0x0, 0x5, 0x0, 0x8, 0xef93, 0x6, 0x7215, 0x0, 0x28368fe8, 0x8, 0x2, 0x6, 0x8, 0x75c2, 0x0, 0x5, 0x9, 0x8, 0xd708, 0x3, 0xffffff01, 0x0, 0x20, 0xffff, 0x7, 0x4, 0x9, 0x5, 0x0, 0x0, 0x4, 0x2, 0x7, 0x0, 0x4, 0x80000001, 0x0, 0xfffff153, 0x80000000, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0xcea, 0x10001, 0x80, 0x9, 0x1, 0x80000001, 0xf7, 0x0, 0x7, 0x6, 0x2, 0x6, 0x7, 0x10000, 0x5, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x1ce, 0x401, 0x7ff, 0x1, 0x3, 0x8, 0xfff, 0x4, 0xfb, 0x9, 0x4, 0x3, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9e0f, 0x5, 0x5, 0x3f, 0x9, 0x7fffffff, 0x101, 0x7, 0x121, 0x8, 0x6, 0x1, 0x0, 0x4, 0xff, 0x5d3, 0x1f, 0x4, 0x7, 0x7, 0x9, 0x9, 0x7ff, 0x800, 0x3, 0x524e, 0x400, 0x10000, 0x7, 0x6, 0x80, 0x1ff, 0x2e, 0x5, 0xcb68, 0x10000, 0x0, 0x4, 0x51, 0x1, 0x3f, 0x8, 0x200, 0x401, 0xfffffffe, 0x3, 0xfffffffc, 0x7fff, 0x3, 0xc000, 0x5, 0x3, 0x3f, 0x7, 0x7fffffff, 0xfff, 0x7f, 0x218f, 0x2, 0x6, 0x8, 0x3, 0x1000, 0x4, 0x80000001, 0x1, 0xce6, 0x4, 0xfff, 0x7ff, 0x6, 0x4, 0x3, 0x7, 0x8, 0x0, 0xfffffffd, 0x2, 0x3f, 0x1, 0x7fffffff, 0x2e, 0x412, 0x5, 0x2a5085aa, 0x4, 0x80000000, 0x1786, 0x909, 0x80, 0x1, 0x9, 0x0, 0x4, 0x29, 0x9, 0x3, 0xffff7fff, 0x80000000, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x7, 0xae, 0x6, 0x7, 0x8, 0x1, 0xffffffff, 0xfff, 0x3ff, 0x6, 0x3, 0x6, 0xab, 0xffff, 0x8, 0x7ff, 0x401, 0x4, 0x3ff, 0x101, 0x83, 0x2, 0x400, 0x2, 0x2, 0x4, 0x7fff, 0x9, 0x1, 0x1f, 0x7f, 0xfffffe00, 0xf323, 0x9, 0x5, 0x6, 0x5000000, 0x7, 0x704c, 0xffffffff, 0x3, 0x1, 0x1000, 0xffff20ad, 0x80, 0x1ff, 0x1000, 0xffffffff, 0x8, 0x4, 0x8, 0x6, 0x7ff, 0x2, 0x7fffffff, 0xa8, 0x7ff, 0x8, 0x80, 0x9c, 0x6d, 0x100, 0x90e3767, 0x75, 0x401, 0x1, 0x1f, 0x800, 0x4, 0x3, 0x45, 0x0, 0x5, 0x2, 0x1, 0x4, 0xfffffeff, 0xc3, 0xdd, 0x723e, 0x40, 0x6, 0x37, 0x0, 0x6, 0x89cf, 0x1ff, 0x8000, 0x6, 0x8001, 0x6, 0x9, 0x6, 0x1, 0x5, 0x8, 0x56fd8c7d, 0x100, 0x401, 0x1e2f, 0x5, 0x1, 0x4, 0xfffffff8, 0x6, 0x7fde, 0x0, 0x101, 0x8, 0x4, 0x7, 0x18e, 0x1ac0, 0x9, 0xfffffff9, 0x9, 0x10001, 0xf67, 0x7fffffff, 0x7b, 0x4bb, 0x80, 0x3, 0x80000000, 0x81, 0x7, 0x3, 0x6, 0x8, 0x4, 0x6, 0x0, 0x8, 0x8, 0x2, 0xffffffff, 0xde8, 0x1, 0x9, 0x7, 0x7, 0x4, 0xfffffffa, 0x59d, 0x7f, 0x1000, 0x800, 0xd50, 0x7, 0x9c5, 0x1, 0x800, 0xffffff81, 0x6, 0x9, 0xffffffff, 0x2, 0x80000001, 0x10001, 0xffff, 0x8, 0x2, 0x1, 0x6, 0x837, 0x10001, 0x9, 0x5, 0x7fff, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0xffffffff, 0x2e, 0x1000, 0x401, 0x10000, 0x7c, 0xdcf, 0x1, 0x9, 0x1, 0x3, 0x8, 0x80000000, 0x5a5, 0x3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x6, 0xfff, 0x18ae, 0x6, 0x7, 0x0, 0xfffffffa, 0x2, 0x5, 0x5, 0x1, 0xa8, 0x1, 0x9, 0x200, 0x6, 0x0, 0x1000, 0x7ff, 0x6, 0x1, 0x2, 0x3, 0x7, 0x1f, 0x9537, 0x5, 0x0, 0x6, 0x24, 0x9, 0x7, 0x1, 0x0, 0x4, 0x0, 0x6, 0x6be46f7f, 0x400, 0x4, 0x4, 0x8, 0x6, 0x7, 0xa5, 0x4, 0x4, 0x4, 0x952, 0x3ff, 0x2, 0x1, 0x3, 0x7, 0xe36f, 0x4, 0x2, 0x9, 0xffffffff, 0x8, 0x7cc, 0x1, 0xffffffff, 0x7f, 0xffffffff, 0x5, 0x81, 0x7, 0x3f, 0xc4, 0x3, 0x6, 0x10000, 0x9, 0x75, 0xfffffffa, 0x1, 0x0, 0x0, 0xfff, 0x3f, 0x792, 0x7, 0xa7c, 0x80, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6, 0x6, 0x400, 0x2, 0x3, 0x5, 0x8, 0x8020, 0x3d3b, 0x9, 0x8, 0x2, 0x81, 0x0, 0x5, 0x2, 0xd62, 0x40, 0x5, 0x5, 0x1, 0x10000, 0x8, 0x20, 0x47, 0x80000000, 0xbc, 0x3, 0x8, 0x7000000, 0x40, 0x0, 0x2, 0x40, 0x2519c50e, 0x9, 0x4, 0x0, 0x0, 0x8, 0x4, 0x1, 0x4, 0x10001, 0x3, 0x8, 0x0, 0x9, 0x51367427, 0x7, 0xfffffffe, 0x8, 0x0, 0xffffe0d3, 0x9, 0xffffffff, 0x40, 0x8, 0x80, 0xfffff001, 0x40, 0x8, 0x7f, 0x4, 0xfc7, 0x4, 0x4, 0xffff8000, 0x3, 0x2, 0x6, 0x7, 0x7, 0x1, 0x3, 0x0, 0x9, 0x6, 0x1, 0xc763, 0x10000, 0x7, 0xfa9, 0x7, 0x314, 0x1, 0x0, 0x8, 0x7fff, 0x5, 0x401, 0xfffffffc, 0x9, 0x0, 0x2, 0x27b, 0x401, 0x2, 0x2, 0x80, 0xff, 0x2, 0x0, 0x6, 0x9, 0x5, 0x400, 0x55c, 0x2000, 0xce2c, 0x5, 0x49e, 0x800, 0x6, 0x8001, 0x1, 0x3, 0x7, 0x80000000, 0x8, 0x3f, 0x40, 0x9, 0x1, 0x3ff, 0x5, 0xfffffc01, 0x8, 0x40, 0xfffff278, 0x1, 0x5, 0x13c, 0x9c00000, 0x6, 0xff, 0x2908, 0x8a7, 0x6e16, 0x1, 0x401, 0xfffff49a, 0xff, 0x0, 0xfc, 0x4022, 0x1, 0x7, 0x0, 0x5, 0x12, 0x6, 0x3f, 0x10000, 0x401, 0x7, 0x80000001, 0xf5, 0x1, 0x10, 0x1ff, 0x3, 0x8, 0x1, 0x101, 0x1, 0xed75, 0x8, 0x5c, 0x2, 0x8, 0x0, 0x98, 0x7f, 0x5, 0x80, 0x3ff, 0x1, 0x83, 0x9, 0x1, 0x8001, 0x4, 0x0, 0x302e, 0x4, 0x8, 0x7, 0x10000, 0x80000001, 0x9, 0x0, 0x101, 0x4, 0x57f, 0x4, 0x9, 0x7ff, 0xf4a, 0x7f, 0xffffffff, 0x2, 0x5, 0x2, 0x7, 0x3f, 0x9a, 0x4, 0x37, 0x2, 0x0, 0x7f, 0x1, 0xfffffffa, 0x9, 0x7, 0x8, 0x2, 0x1f, 0x6, 0x7, 0x3, 0x4, 0x400, 0x6, 0x9, 0xd3, 0xffffffc1, 0xf1, 0xad3, 0x4, 0xfff, 0xcacd, 0x55, 0x1f, 0x0, 0x100, 0x4, 0xffff, 0x7fff, 0x0, 0x7ff, 0x1, 0x80, 0x7, 0x4f, 0x1, 0x7, 0x2, 0xe8f, 0xfe35, 0x8, 0x1, 0x3, 0x7, 0x7fff, 0xfffffff9, 0x2, 0x1, 0x3, 0x7, 0xfffffffb, 0x55, 0x8, 0x401, 0x800, 0x3ff, 0x0, 0xe968, 0x0, 0x9, 0x2, 0x7, 0x0, 0x4, 0xfffffffc, 0x5, 0x20, 0x4, 0x401, 0x7, 0xfe00000, 0x5, 0x81, 0x7, 0xb3, 0x1, 0x800, 0x0, 0x55, 0x7f, 0xfffffffe, 0x9, 0x5, 0xab4, 0x2, 0x7fff, 0x40, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfff, 0x20, 0x0, 0x6, 0x3, 0x6, 0x1, 0x6000000, 0x5e, 0x6, 0x7, 0x5, 0xb925, 0x1200000, 0x7fff, 0xff, 0x3057, 0x2, 0x0, 0x8, 0x7, 0x8000, 0x9, 0x0, 0x2, 0x7ff, 0x80, 0xb56d, 0xffffffff, 0x6, 0x5, 0x0, 0x8, 0x586d, 0x6, 0x2, 0xffffff30, 0x21, 0xffff7fff, 0x4, 0x3, 0x8, 0x5, 0x200, 0x3c, 0x9c, 0x0, 0x8000, 0x7, 0x7fffffff, 0x5, 0x5cc3, 0x2, 0x1f, 0x697, 0xfff, 0x5, 0x80000000, 0x6, 0x2, 0x7fff, 0x6, 0x0, 0x5, 0x9, 0xffffffff, 0x2, 0x100, 0x1]}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0x3, 0xff, 0x2, 0x8, 0x8}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) 04:48:47 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) socket(0x14, 0x5, 0x0) 04:48:47 executing program 5: socket(0x3, 0x99cb1a6c3ec629, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000200)='THAWED\x00', 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0xa, 0x0, 0xbbbbbbbb}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000240)) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f00000001c0)=""/27, &(0x7f0000000040)=0x1b) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) 04:48:47 executing program 1: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) (async) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:47 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x4, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) socket(0x14, 0x5, 0x0) 04:48:47 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:47 executing program 2: r0 = socket(0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:47 executing program 1: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) (async) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) (async) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:47 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket(0x14, 0x5, 0x0) 04:48:47 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:48 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket(0x14, 0x5, 0x0) 04:48:48 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000280)={r1, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/155}) r4 = socket(0x10, 0x2, 0x7) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000890) socket(0xf, 0xc, 0x3) 04:48:48 executing program 2: socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:48 executing program 4: socket(0x14, 0x5, 0x0) 04:48:48 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x0, 0x2, 0x7}, 0x1}}, 0x18) connect$bt_sco(r0, 0x0, 0x700) 04:48:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x121201, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x5, 0x5, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, r4, 0x0, 0x0], 0x4, 0x0, r5, 0x81, 0x4, 0x4, 0xd53, {0x9, 0x3, 0xf2, 0xd6cb, 0xfff, 0x9, 0x7, 0x7ff, 0xb95d, 0xe7ac, 0x6, 0x200, 0x2, 0x3, "3b95c0b82b8291c2171bc51a5d08b1873fc95077665744df01d79fb5cd921484"}}) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x9, 0x200000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000b00)={{0x3, 0xffffffff, 0x1, 0x3, 0x31, 0x7}, 0x21f, [0x1, 0x1000, 0x7ff0000, 0xffffff61, 0xd2c8, 0x0, 0x6, 0xfffffffe, 0x1, 0xfffffffa, 0xffffff81, 0x10001, 0x3ff, 0x5, 0x0, 0x5, 0xdcc, 0x4, 0x0, 0x81, 0x400, 0xff, 0x4, 0x6, 0x10001, 0x0, 0x8001, 0x4, 0x2, 0xd37, 0x9, 0x0, 0x8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0x800, 0x5, 0x6, 0x61, 0x200, 0x1f, 0x7f, 0x400, 0x400, 0x3, 0x2dc, 0x9, 0xffffd0c2, 0xd132, 0x6, 0x3, 0x7, 0x7fff, 0x3, 0x6, 0x8, 0x7fff, 0xffff, 0xfae0, 0x7f, 0x80000000, 0x8, 0x3f, 0x1, 0x80, 0x7ff, 0x94bc, 0x10000, 0x7fff, 0xc259, 0xffff, 0x2a, 0x0, 0x0, 0x7, 0x1, 0x8, 0x200, 0x6, 0x0, 0x3, 0x1f, 0xdf9, 0x0, 0x0, 0xcfb6, 0x84, 0x40, 0x2, 0x1, 0x1, 0x2, 0x2, 0x9beef8b8, 0x4, 0xfffffffe, 0x656, 0x27, 0x9, 0x4, 0x8, 0x9, 0x5d, 0x4, 0x81, 0x3, 0xee, 0x800, 0x7, 0x80000001, 0x10000, 0xb9e, 0x200, 0x3, 0x80000000, 0x101, 0x7, 0x9, 0x0, 0x5, 0x7, 0xf4b3, 0x0, 0x8000, 0x20, 0x4, 0x4, 0x0, 0x800, 0x8a0, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x7, 0x3f, 0xff, 0x3, 0x3, 0xfffffff9, 0x40, 0xffffff11, 0xa4b, 0x4, 0x140, 0x401, 0x21f, 0xfe7, 0xffff, 0x7, 0x3, 0x40, 0x1, 0x81e, 0xfffffffc, 0x3ff, 0x400, 0x1, 0x48000, 0x100, 0x5, 0x0, 0x2ffd, 0x5, 0xffffbe52, 0x3f, 0x3, 0x0, 0x5, 0x0, 0x8, 0xef93, 0x6, 0x7215, 0x0, 0x28368fe8, 0x8, 0x2, 0x6, 0x8, 0x75c2, 0x0, 0x5, 0x9, 0x8, 0xd708, 0x3, 0xffffff01, 0x0, 0x20, 0xffff, 0x7, 0x4, 0x9, 0x5, 0x0, 0x0, 0x4, 0x2, 0x7, 0x0, 0x4, 0x80000001, 0x0, 0xfffff153, 0x80000000, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0xcea, 0x10001, 0x80, 0x9, 0x1, 0x80000001, 0xf7, 0x0, 0x7, 0x6, 0x2, 0x6, 0x7, 0x10000, 0x5, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x1ce, 0x401, 0x7ff, 0x1, 0x3, 0x8, 0xfff, 0x4, 0xfb, 0x9, 0x4, 0x3, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9e0f, 0x5, 0x5, 0x3f, 0x9, 0x7fffffff, 0x101, 0x7, 0x121, 0x8, 0x6, 0x1, 0x0, 0x4, 0xff, 0x5d3, 0x1f, 0x4, 0x7, 0x7, 0x9, 0x9, 0x7ff, 0x800, 0x3, 0x524e, 0x400, 0x10000, 0x7, 0x6, 0x80, 0x1ff, 0x2e, 0x5, 0xcb68, 0x10000, 0x0, 0x4, 0x51, 0x1, 0x3f, 0x8, 0x200, 0x401, 0xfffffffe, 0x3, 0xfffffffc, 0x7fff, 0x3, 0xc000, 0x5, 0x3, 0x3f, 0x7, 0x7fffffff, 0xfff, 0x7f, 0x218f, 0x2, 0x6, 0x8, 0x3, 0x1000, 0x4, 0x80000001, 0x1, 0xce6, 0x4, 0xfff, 0x7ff, 0x6, 0x4, 0x3, 0x7, 0x8, 0x0, 0xfffffffd, 0x2, 0x3f, 0x1, 0x7fffffff, 0x2e, 0x412, 0x5, 0x2a5085aa, 0x4, 0x80000000, 0x1786, 0x909, 0x80, 0x1, 0x9, 0x0, 0x4, 0x29, 0x9, 0x3, 0xffff7fff, 0x80000000, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x7, 0xae, 0x6, 0x7, 0x8, 0x1, 0xffffffff, 0xfff, 0x3ff, 0x6, 0x3, 0x6, 0xab, 0xffff, 0x8, 0x7ff, 0x401, 0x4, 0x3ff, 0x101, 0x83, 0x2, 0x400, 0x2, 0x2, 0x4, 0x7fff, 0x9, 0x1, 0x1f, 0x7f, 0xfffffe00, 0xf323, 0x9, 0x5, 0x6, 0x5000000, 0x7, 0x704c, 0xffffffff, 0x3, 0x1, 0x1000, 0xffff20ad, 0x80, 0x1ff, 0x1000, 0xffffffff, 0x8, 0x4, 0x8, 0x6, 0x7ff, 0x2, 0x7fffffff, 0xa8, 0x7ff, 0x8, 0x80, 0x9c, 0x6d, 0x100, 0x90e3767, 0x75, 0x401, 0x1, 0x1f, 0x800, 0x4, 0x3, 0x45, 0x0, 0x5, 0x2, 0x1, 0x4, 0xfffffeff, 0xc3, 0xdd, 0x723e, 0x40, 0x6, 0x37, 0x0, 0x6, 0x89cf, 0x1ff, 0x8000, 0x6, 0x8001, 0x6, 0x9, 0x6, 0x1, 0x5, 0x8, 0x56fd8c7d, 0x100, 0x401, 0x1e2f, 0x5, 0x1, 0x4, 0xfffffff8, 0x6, 0x7fde, 0x0, 0x101, 0x8, 0x4, 0x7, 0x18e, 0x1ac0, 0x9, 0xfffffff9, 0x9, 0x10001, 0xf67, 0x7fffffff, 0x7b, 0x4bb, 0x80, 0x3, 0x80000000, 0x81, 0x7, 0x3, 0x6, 0x8, 0x4, 0x6, 0x0, 0x8, 0x8, 0x2, 0xffffffff, 0xde8, 0x1, 0x9, 0x7, 0x7, 0x4, 0xfffffffa, 0x59d, 0x7f, 0x1000, 0x800, 0xd50, 0x7, 0x9c5, 0x1, 0x800, 0xffffff81, 0x6, 0x9, 0xffffffff, 0x2, 0x80000001, 0x10001, 0xffff, 0x8, 0x2, 0x1, 0x6, 0x837, 0x10001, 0x9, 0x5, 0x7fff, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0xffffffff, 0x2e, 0x1000, 0x401, 0x10000, 0x7c, 0xdcf, 0x1, 0x9, 0x1, 0x3, 0x8, 0x80000000, 0x5a5, 0x3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x6, 0xfff, 0x18ae, 0x6, 0x7, 0x0, 0xfffffffa, 0x2, 0x5, 0x5, 0x1, 0xa8, 0x1, 0x9, 0x200, 0x6, 0x0, 0x1000, 0x7ff, 0x6, 0x1, 0x2, 0x3, 0x7, 0x1f, 0x9537, 0x5, 0x0, 0x6, 0x24, 0x9, 0x7, 0x1, 0x0, 0x4, 0x0, 0x6, 0x6be46f7f, 0x400, 0x4, 0x4, 0x8, 0x6, 0x7, 0xa5, 0x4, 0x4, 0x4, 0x952, 0x3ff, 0x2, 0x1, 0x3, 0x7, 0xe36f, 0x4, 0x2, 0x9, 0xffffffff, 0x8, 0x7cc, 0x1, 0xffffffff, 0x7f, 0xffffffff, 0x5, 0x81, 0x7, 0x3f, 0xc4, 0x3, 0x6, 0x10000, 0x9, 0x75, 0xfffffffa, 0x1, 0x0, 0x0, 0xfff, 0x3f, 0x792, 0x7, 0xa7c, 0x80, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6, 0x6, 0x400, 0x2, 0x3, 0x5, 0x8, 0x8020, 0x3d3b, 0x9, 0x8, 0x2, 0x81, 0x0, 0x5, 0x2, 0xd62, 0x40, 0x5, 0x5, 0x1, 0x10000, 0x8, 0x20, 0x47, 0x80000000, 0xbc, 0x3, 0x8, 0x7000000, 0x40, 0x0, 0x2, 0x40, 0x2519c50e, 0x9, 0x4, 0x0, 0x0, 0x8, 0x4, 0x1, 0x4, 0x10001, 0x3, 0x8, 0x0, 0x9, 0x51367427, 0x7, 0xfffffffe, 0x8, 0x0, 0xffffe0d3, 0x9, 0xffffffff, 0x40, 0x8, 0x80, 0xfffff001, 0x40, 0x8, 0x7f, 0x4, 0xfc7, 0x4, 0x4, 0xffff8000, 0x3, 0x2, 0x6, 0x7, 0x7, 0x1, 0x3, 0x0, 0x9, 0x6, 0x1, 0xc763, 0x10000, 0x7, 0xfa9, 0x7, 0x314, 0x1, 0x0, 0x8, 0x7fff, 0x5, 0x401, 0xfffffffc, 0x9, 0x0, 0x2, 0x27b, 0x401, 0x2, 0x2, 0x80, 0xff, 0x2, 0x0, 0x6, 0x9, 0x5, 0x400, 0x55c, 0x2000, 0xce2c, 0x5, 0x49e, 0x800, 0x6, 0x8001, 0x1, 0x3, 0x7, 0x80000000, 0x8, 0x3f, 0x40, 0x9, 0x1, 0x3ff, 0x5, 0xfffffc01, 0x8, 0x40, 0xfffff278, 0x1, 0x5, 0x13c, 0x9c00000, 0x6, 0xff, 0x2908, 0x8a7, 0x6e16, 0x1, 0x401, 0xfffff49a, 0xff, 0x0, 0xfc, 0x4022, 0x1, 0x7, 0x0, 0x5, 0x12, 0x6, 0x3f, 0x10000, 0x401, 0x7, 0x80000001, 0xf5, 0x1, 0x10, 0x1ff, 0x3, 0x8, 0x1, 0x101, 0x1, 0xed75, 0x8, 0x5c, 0x2, 0x8, 0x0, 0x98, 0x7f, 0x5, 0x80, 0x3ff, 0x1, 0x83, 0x9, 0x1, 0x8001, 0x4, 0x0, 0x302e, 0x4, 0x8, 0x7, 0x10000, 0x80000001, 0x9, 0x0, 0x101, 0x4, 0x57f, 0x4, 0x9, 0x7ff, 0xf4a, 0x7f, 0xffffffff, 0x2, 0x5, 0x2, 0x7, 0x3f, 0x9a, 0x4, 0x37, 0x2, 0x0, 0x7f, 0x1, 0xfffffffa, 0x9, 0x7, 0x8, 0x2, 0x1f, 0x6, 0x7, 0x3, 0x4, 0x400, 0x6, 0x9, 0xd3, 0xffffffc1, 0xf1, 0xad3, 0x4, 0xfff, 0xcacd, 0x55, 0x1f, 0x0, 0x100, 0x4, 0xffff, 0x7fff, 0x0, 0x7ff, 0x1, 0x80, 0x7, 0x4f, 0x1, 0x7, 0x2, 0xe8f, 0xfe35, 0x8, 0x1, 0x3, 0x7, 0x7fff, 0xfffffff9, 0x2, 0x1, 0x3, 0x7, 0xfffffffb, 0x55, 0x8, 0x401, 0x800, 0x3ff, 0x0, 0xe968, 0x0, 0x9, 0x2, 0x7, 0x0, 0x4, 0xfffffffc, 0x5, 0x20, 0x4, 0x401, 0x7, 0xfe00000, 0x5, 0x81, 0x7, 0xb3, 0x1, 0x800, 0x0, 0x55, 0x7f, 0xfffffffe, 0x9, 0x5, 0xab4, 0x2, 0x7fff, 0x40, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfff, 0x20, 0x0, 0x6, 0x3, 0x6, 0x1, 0x6000000, 0x5e, 0x6, 0x7, 0x5, 0xb925, 0x1200000, 0x7fff, 0xff, 0x3057, 0x2, 0x0, 0x8, 0x7, 0x8000, 0x9, 0x0, 0x2, 0x7ff, 0x80, 0xb56d, 0xffffffff, 0x6, 0x5, 0x0, 0x8, 0x586d, 0x6, 0x2, 0xffffff30, 0x21, 0xffff7fff, 0x4, 0x3, 0x8, 0x5, 0x200, 0x3c, 0x9c, 0x0, 0x8000, 0x7, 0x7fffffff, 0x5, 0x5cc3, 0x2, 0x1f, 0x697, 0xfff, 0x5, 0x80000000, 0x6, 0x2, 0x7fff, 0x6, 0x0, 0x5, 0x9, 0xffffffff, 0x2, 0x100, 0x1]}) (async) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0x3, 0xff, 0x2, 0x8, 0x8}) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) 04:48:48 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)={0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000280)={r1, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/155}) (async) r4 = socket(0x10, 0x2, 0x7) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000890) (async) socket(0xf, 0xc, 0x3) 04:48:48 executing program 2: socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:48 executing program 4: socket(0x0, 0x5, 0x0) 04:48:48 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) 04:48:48 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x121201, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x5, 0x5, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, r4, 0x0, 0x0], 0x4, 0x0, r5, 0x81, 0x4, 0x4, 0xd53, {0x9, 0x3, 0xf2, 0xd6cb, 0xfff, 0x9, 0x7, 0x7ff, 0xb95d, 0xe7ac, 0x6, 0x200, 0x2, 0x3, "3b95c0b82b8291c2171bc51a5d08b1873fc95077665744df01d79fb5cd921484"}}) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x9, 0x200000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000b00)={{0x3, 0xffffffff, 0x1, 0x3, 0x31, 0x7}, 0x21f, [0x1, 0x1000, 0x7ff0000, 0xffffff61, 0xd2c8, 0x0, 0x6, 0xfffffffe, 0x1, 0xfffffffa, 0xffffff81, 0x10001, 0x3ff, 0x5, 0x0, 0x5, 0xdcc, 0x4, 0x0, 0x81, 0x400, 0xff, 0x4, 0x6, 0x10001, 0x0, 0x8001, 0x4, 0x2, 0xd37, 0x9, 0x0, 0x8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0x800, 0x5, 0x6, 0x61, 0x200, 0x1f, 0x7f, 0x400, 0x400, 0x3, 0x2dc, 0x9, 0xffffd0c2, 0xd132, 0x6, 0x3, 0x7, 0x7fff, 0x3, 0x6, 0x8, 0x7fff, 0xffff, 0xfae0, 0x7f, 0x80000000, 0x8, 0x3f, 0x1, 0x80, 0x7ff, 0x94bc, 0x10000, 0x7fff, 0xc259, 0xffff, 0x2a, 0x0, 0x0, 0x7, 0x1, 0x8, 0x200, 0x6, 0x0, 0x3, 0x1f, 0xdf9, 0x0, 0x0, 0xcfb6, 0x84, 0x40, 0x2, 0x1, 0x1, 0x2, 0x2, 0x9beef8b8, 0x4, 0xfffffffe, 0x656, 0x27, 0x9, 0x4, 0x8, 0x9, 0x5d, 0x4, 0x81, 0x3, 0xee, 0x800, 0x7, 0x80000001, 0x10000, 0xb9e, 0x200, 0x3, 0x80000000, 0x101, 0x7, 0x9, 0x0, 0x5, 0x7, 0xf4b3, 0x0, 0x8000, 0x20, 0x4, 0x4, 0x0, 0x800, 0x8a0, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x7, 0x3f, 0xff, 0x3, 0x3, 0xfffffff9, 0x40, 0xffffff11, 0xa4b, 0x4, 0x140, 0x401, 0x21f, 0xfe7, 0xffff, 0x7, 0x3, 0x40, 0x1, 0x81e, 0xfffffffc, 0x3ff, 0x400, 0x1, 0x48000, 0x100, 0x5, 0x0, 0x2ffd, 0x5, 0xffffbe52, 0x3f, 0x3, 0x0, 0x5, 0x0, 0x8, 0xef93, 0x6, 0x7215, 0x0, 0x28368fe8, 0x8, 0x2, 0x6, 0x8, 0x75c2, 0x0, 0x5, 0x9, 0x8, 0xd708, 0x3, 0xffffff01, 0x0, 0x20, 0xffff, 0x7, 0x4, 0x9, 0x5, 0x0, 0x0, 0x4, 0x2, 0x7, 0x0, 0x4, 0x80000001, 0x0, 0xfffff153, 0x80000000, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0xcea, 0x10001, 0x80, 0x9, 0x1, 0x80000001, 0xf7, 0x0, 0x7, 0x6, 0x2, 0x6, 0x7, 0x10000, 0x5, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x1ce, 0x401, 0x7ff, 0x1, 0x3, 0x8, 0xfff, 0x4, 0xfb, 0x9, 0x4, 0x3, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9e0f, 0x5, 0x5, 0x3f, 0x9, 0x7fffffff, 0x101, 0x7, 0x121, 0x8, 0x6, 0x1, 0x0, 0x4, 0xff, 0x5d3, 0x1f, 0x4, 0x7, 0x7, 0x9, 0x9, 0x7ff, 0x800, 0x3, 0x524e, 0x400, 0x10000, 0x7, 0x6, 0x80, 0x1ff, 0x2e, 0x5, 0xcb68, 0x10000, 0x0, 0x4, 0x51, 0x1, 0x3f, 0x8, 0x200, 0x401, 0xfffffffe, 0x3, 0xfffffffc, 0x7fff, 0x3, 0xc000, 0x5, 0x3, 0x3f, 0x7, 0x7fffffff, 0xfff, 0x7f, 0x218f, 0x2, 0x6, 0x8, 0x3, 0x1000, 0x4, 0x80000001, 0x1, 0xce6, 0x4, 0xfff, 0x7ff, 0x6, 0x4, 0x3, 0x7, 0x8, 0x0, 0xfffffffd, 0x2, 0x3f, 0x1, 0x7fffffff, 0x2e, 0x412, 0x5, 0x2a5085aa, 0x4, 0x80000000, 0x1786, 0x909, 0x80, 0x1, 0x9, 0x0, 0x4, 0x29, 0x9, 0x3, 0xffff7fff, 0x80000000, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x7, 0xae, 0x6, 0x7, 0x8, 0x1, 0xffffffff, 0xfff, 0x3ff, 0x6, 0x3, 0x6, 0xab, 0xffff, 0x8, 0x7ff, 0x401, 0x4, 0x3ff, 0x101, 0x83, 0x2, 0x400, 0x2, 0x2, 0x4, 0x7fff, 0x9, 0x1, 0x1f, 0x7f, 0xfffffe00, 0xf323, 0x9, 0x5, 0x6, 0x5000000, 0x7, 0x704c, 0xffffffff, 0x3, 0x1, 0x1000, 0xffff20ad, 0x80, 0x1ff, 0x1000, 0xffffffff, 0x8, 0x4, 0x8, 0x6, 0x7ff, 0x2, 0x7fffffff, 0xa8, 0x7ff, 0x8, 0x80, 0x9c, 0x6d, 0x100, 0x90e3767, 0x75, 0x401, 0x1, 0x1f, 0x800, 0x4, 0x3, 0x45, 0x0, 0x5, 0x2, 0x1, 0x4, 0xfffffeff, 0xc3, 0xdd, 0x723e, 0x40, 0x6, 0x37, 0x0, 0x6, 0x89cf, 0x1ff, 0x8000, 0x6, 0x8001, 0x6, 0x9, 0x6, 0x1, 0x5, 0x8, 0x56fd8c7d, 0x100, 0x401, 0x1e2f, 0x5, 0x1, 0x4, 0xfffffff8, 0x6, 0x7fde, 0x0, 0x101, 0x8, 0x4, 0x7, 0x18e, 0x1ac0, 0x9, 0xfffffff9, 0x9, 0x10001, 0xf67, 0x7fffffff, 0x7b, 0x4bb, 0x80, 0x3, 0x80000000, 0x81, 0x7, 0x3, 0x6, 0x8, 0x4, 0x6, 0x0, 0x8, 0x8, 0x2, 0xffffffff, 0xde8, 0x1, 0x9, 0x7, 0x7, 0x4, 0xfffffffa, 0x59d, 0x7f, 0x1000, 0x800, 0xd50, 0x7, 0x9c5, 0x1, 0x800, 0xffffff81, 0x6, 0x9, 0xffffffff, 0x2, 0x80000001, 0x10001, 0xffff, 0x8, 0x2, 0x1, 0x6, 0x837, 0x10001, 0x9, 0x5, 0x7fff, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0xffffffff, 0x2e, 0x1000, 0x401, 0x10000, 0x7c, 0xdcf, 0x1, 0x9, 0x1, 0x3, 0x8, 0x80000000, 0x5a5, 0x3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x6, 0xfff, 0x18ae, 0x6, 0x7, 0x0, 0xfffffffa, 0x2, 0x5, 0x5, 0x1, 0xa8, 0x1, 0x9, 0x200, 0x6, 0x0, 0x1000, 0x7ff, 0x6, 0x1, 0x2, 0x3, 0x7, 0x1f, 0x9537, 0x5, 0x0, 0x6, 0x24, 0x9, 0x7, 0x1, 0x0, 0x4, 0x0, 0x6, 0x6be46f7f, 0x400, 0x4, 0x4, 0x8, 0x6, 0x7, 0xa5, 0x4, 0x4, 0x4, 0x952, 0x3ff, 0x2, 0x1, 0x3, 0x7, 0xe36f, 0x4, 0x2, 0x9, 0xffffffff, 0x8, 0x7cc, 0x1, 0xffffffff, 0x7f, 0xffffffff, 0x5, 0x81, 0x7, 0x3f, 0xc4, 0x3, 0x6, 0x10000, 0x9, 0x75, 0xfffffffa, 0x1, 0x0, 0x0, 0xfff, 0x3f, 0x792, 0x7, 0xa7c, 0x80, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6, 0x6, 0x400, 0x2, 0x3, 0x5, 0x8, 0x8020, 0x3d3b, 0x9, 0x8, 0x2, 0x81, 0x0, 0x5, 0x2, 0xd62, 0x40, 0x5, 0x5, 0x1, 0x10000, 0x8, 0x20, 0x47, 0x80000000, 0xbc, 0x3, 0x8, 0x7000000, 0x40, 0x0, 0x2, 0x40, 0x2519c50e, 0x9, 0x4, 0x0, 0x0, 0x8, 0x4, 0x1, 0x4, 0x10001, 0x3, 0x8, 0x0, 0x9, 0x51367427, 0x7, 0xfffffffe, 0x8, 0x0, 0xffffe0d3, 0x9, 0xffffffff, 0x40, 0x8, 0x80, 0xfffff001, 0x40, 0x8, 0x7f, 0x4, 0xfc7, 0x4, 0x4, 0xffff8000, 0x3, 0x2, 0x6, 0x7, 0x7, 0x1, 0x3, 0x0, 0x9, 0x6, 0x1, 0xc763, 0x10000, 0x7, 0xfa9, 0x7, 0x314, 0x1, 0x0, 0x8, 0x7fff, 0x5, 0x401, 0xfffffffc, 0x9, 0x0, 0x2, 0x27b, 0x401, 0x2, 0x2, 0x80, 0xff, 0x2, 0x0, 0x6, 0x9, 0x5, 0x400, 0x55c, 0x2000, 0xce2c, 0x5, 0x49e, 0x800, 0x6, 0x8001, 0x1, 0x3, 0x7, 0x80000000, 0x8, 0x3f, 0x40, 0x9, 0x1, 0x3ff, 0x5, 0xfffffc01, 0x8, 0x40, 0xfffff278, 0x1, 0x5, 0x13c, 0x9c00000, 0x6, 0xff, 0x2908, 0x8a7, 0x6e16, 0x1, 0x401, 0xfffff49a, 0xff, 0x0, 0xfc, 0x4022, 0x1, 0x7, 0x0, 0x5, 0x12, 0x6, 0x3f, 0x10000, 0x401, 0x7, 0x80000001, 0xf5, 0x1, 0x10, 0x1ff, 0x3, 0x8, 0x1, 0x101, 0x1, 0xed75, 0x8, 0x5c, 0x2, 0x8, 0x0, 0x98, 0x7f, 0x5, 0x80, 0x3ff, 0x1, 0x83, 0x9, 0x1, 0x8001, 0x4, 0x0, 0x302e, 0x4, 0x8, 0x7, 0x10000, 0x80000001, 0x9, 0x0, 0x101, 0x4, 0x57f, 0x4, 0x9, 0x7ff, 0xf4a, 0x7f, 0xffffffff, 0x2, 0x5, 0x2, 0x7, 0x3f, 0x9a, 0x4, 0x37, 0x2, 0x0, 0x7f, 0x1, 0xfffffffa, 0x9, 0x7, 0x8, 0x2, 0x1f, 0x6, 0x7, 0x3, 0x4, 0x400, 0x6, 0x9, 0xd3, 0xffffffc1, 0xf1, 0xad3, 0x4, 0xfff, 0xcacd, 0x55, 0x1f, 0x0, 0x100, 0x4, 0xffff, 0x7fff, 0x0, 0x7ff, 0x1, 0x80, 0x7, 0x4f, 0x1, 0x7, 0x2, 0xe8f, 0xfe35, 0x8, 0x1, 0x3, 0x7, 0x7fff, 0xfffffff9, 0x2, 0x1, 0x3, 0x7, 0xfffffffb, 0x55, 0x8, 0x401, 0x800, 0x3ff, 0x0, 0xe968, 0x0, 0x9, 0x2, 0x7, 0x0, 0x4, 0xfffffffc, 0x5, 0x20, 0x4, 0x401, 0x7, 0xfe00000, 0x5, 0x81, 0x7, 0xb3, 0x1, 0x800, 0x0, 0x55, 0x7f, 0xfffffffe, 0x9, 0x5, 0xab4, 0x2, 0x7fff, 0x40, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfff, 0x20, 0x0, 0x6, 0x3, 0x6, 0x1, 0x6000000, 0x5e, 0x6, 0x7, 0x5, 0xb925, 0x1200000, 0x7fff, 0xff, 0x3057, 0x2, 0x0, 0x8, 0x7, 0x8000, 0x9, 0x0, 0x2, 0x7ff, 0x80, 0xb56d, 0xffffffff, 0x6, 0x5, 0x0, 0x8, 0x586d, 0x6, 0x2, 0xffffff30, 0x21, 0xffff7fff, 0x4, 0x3, 0x8, 0x5, 0x200, 0x3c, 0x9c, 0x0, 0x8000, 0x7, 0x7fffffff, 0x5, 0x5cc3, 0x2, 0x1f, 0x697, 0xfff, 0x5, 0x80000000, 0x6, 0x2, 0x7fff, 0x6, 0x0, 0x5, 0x9, 0xffffffff, 0x2, 0x100, 0x1]}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0x3, 0xff, 0x2, 0x8, 0x8}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) 04:48:48 executing program 2: socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x3, 0x4) 04:48:48 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x0) 04:48:48 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000280)={r1, 0x1}) (async) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000280)={r1, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000200)={r3, &(0x7f0000000140)=""/155}) socket(0x10, 0x2, 0x7) (async) r4 = socket(0x10, 0x2, 0x7) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000890) socket(0xf, 0xc, 0x3) 04:48:48 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) 04:48:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x121201, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x5, 0x5, 0x2, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, r4, 0x0, 0x0], 0x4, 0x0, r5, 0x81, 0x4, 0x4, 0xd53, {0x9, 0x3, 0xf2, 0xd6cb, 0xfff, 0x9, 0x7, 0x7ff, 0xb95d, 0xe7ac, 0x6, 0x200, 0x2, 0x3, "3b95c0b82b8291c2171bc51a5d08b1873fc95077665744df01d79fb5cd921484"}}) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x9, 0x200000) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000b00)={{0x3, 0xffffffff, 0x1, 0x3, 0x31, 0x7}, 0x21f, [0x1, 0x1000, 0x7ff0000, 0xffffff61, 0xd2c8, 0x0, 0x6, 0xfffffffe, 0x1, 0xfffffffa, 0xffffff81, 0x10001, 0x3ff, 0x5, 0x0, 0x5, 0xdcc, 0x4, 0x0, 0x81, 0x400, 0xff, 0x4, 0x6, 0x10001, 0x0, 0x8001, 0x4, 0x2, 0xd37, 0x9, 0x0, 0x8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0x800, 0x5, 0x6, 0x61, 0x200, 0x1f, 0x7f, 0x400, 0x400, 0x3, 0x2dc, 0x9, 0xffffd0c2, 0xd132, 0x6, 0x3, 0x7, 0x7fff, 0x3, 0x6, 0x8, 0x7fff, 0xffff, 0xfae0, 0x7f, 0x80000000, 0x8, 0x3f, 0x1, 0x80, 0x7ff, 0x94bc, 0x10000, 0x7fff, 0xc259, 0xffff, 0x2a, 0x0, 0x0, 0x7, 0x1, 0x8, 0x200, 0x6, 0x0, 0x3, 0x1f, 0xdf9, 0x0, 0x0, 0xcfb6, 0x84, 0x40, 0x2, 0x1, 0x1, 0x2, 0x2, 0x9beef8b8, 0x4, 0xfffffffe, 0x656, 0x27, 0x9, 0x4, 0x8, 0x9, 0x5d, 0x4, 0x81, 0x3, 0xee, 0x800, 0x7, 0x80000001, 0x10000, 0xb9e, 0x200, 0x3, 0x80000000, 0x101, 0x7, 0x9, 0x0, 0x5, 0x7, 0xf4b3, 0x0, 0x8000, 0x20, 0x4, 0x4, 0x0, 0x800, 0x8a0, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x7, 0x3f, 0xff, 0x3, 0x3, 0xfffffff9, 0x40, 0xffffff11, 0xa4b, 0x4, 0x140, 0x401, 0x21f, 0xfe7, 0xffff, 0x7, 0x3, 0x40, 0x1, 0x81e, 0xfffffffc, 0x3ff, 0x400, 0x1, 0x48000, 0x100, 0x5, 0x0, 0x2ffd, 0x5, 0xffffbe52, 0x3f, 0x3, 0x0, 0x5, 0x0, 0x8, 0xef93, 0x6, 0x7215, 0x0, 0x28368fe8, 0x8, 0x2, 0x6, 0x8, 0x75c2, 0x0, 0x5, 0x9, 0x8, 0xd708, 0x3, 0xffffff01, 0x0, 0x20, 0xffff, 0x7, 0x4, 0x9, 0x5, 0x0, 0x0, 0x4, 0x2, 0x7, 0x0, 0x4, 0x80000001, 0x0, 0xfffff153, 0x80000000, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0xcea, 0x10001, 0x80, 0x9, 0x1, 0x80000001, 0xf7, 0x0, 0x7, 0x6, 0x2, 0x6, 0x7, 0x10000, 0x5, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x1ce, 0x401, 0x7ff, 0x1, 0x3, 0x8, 0xfff, 0x4, 0xfb, 0x9, 0x4, 0x3, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9e0f, 0x5, 0x5, 0x3f, 0x9, 0x7fffffff, 0x101, 0x7, 0x121, 0x8, 0x6, 0x1, 0x0, 0x4, 0xff, 0x5d3, 0x1f, 0x4, 0x7, 0x7, 0x9, 0x9, 0x7ff, 0x800, 0x3, 0x524e, 0x400, 0x10000, 0x7, 0x6, 0x80, 0x1ff, 0x2e, 0x5, 0xcb68, 0x10000, 0x0, 0x4, 0x51, 0x1, 0x3f, 0x8, 0x200, 0x401, 0xfffffffe, 0x3, 0xfffffffc, 0x7fff, 0x3, 0xc000, 0x5, 0x3, 0x3f, 0x7, 0x7fffffff, 0xfff, 0x7f, 0x218f, 0x2, 0x6, 0x8, 0x3, 0x1000, 0x4, 0x80000001, 0x1, 0xce6, 0x4, 0xfff, 0x7ff, 0x6, 0x4, 0x3, 0x7, 0x8, 0x0, 0xfffffffd, 0x2, 0x3f, 0x1, 0x7fffffff, 0x2e, 0x412, 0x5, 0x2a5085aa, 0x4, 0x80000000, 0x1786, 0x909, 0x80, 0x1, 0x9, 0x0, 0x4, 0x29, 0x9, 0x3, 0xffff7fff, 0x80000000, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x7, 0xae, 0x6, 0x7, 0x8, 0x1, 0xffffffff, 0xfff, 0x3ff, 0x6, 0x3, 0x6, 0xab, 0xffff, 0x8, 0x7ff, 0x401, 0x4, 0x3ff, 0x101, 0x83, 0x2, 0x400, 0x2, 0x2, 0x4, 0x7fff, 0x9, 0x1, 0x1f, 0x7f, 0xfffffe00, 0xf323, 0x9, 0x5, 0x6, 0x5000000, 0x7, 0x704c, 0xffffffff, 0x3, 0x1, 0x1000, 0xffff20ad, 0x80, 0x1ff, 0x1000, 0xffffffff, 0x8, 0x4, 0x8, 0x6, 0x7ff, 0x2, 0x7fffffff, 0xa8, 0x7ff, 0x8, 0x80, 0x9c, 0x6d, 0x100, 0x90e3767, 0x75, 0x401, 0x1, 0x1f, 0x800, 0x4, 0x3, 0x45, 0x0, 0x5, 0x2, 0x1, 0x4, 0xfffffeff, 0xc3, 0xdd, 0x723e, 0x40, 0x6, 0x37, 0x0, 0x6, 0x89cf, 0x1ff, 0x8000, 0x6, 0x8001, 0x6, 0x9, 0x6, 0x1, 0x5, 0x8, 0x56fd8c7d, 0x100, 0x401, 0x1e2f, 0x5, 0x1, 0x4, 0xfffffff8, 0x6, 0x7fde, 0x0, 0x101, 0x8, 0x4, 0x7, 0x18e, 0x1ac0, 0x9, 0xfffffff9, 0x9, 0x10001, 0xf67, 0x7fffffff, 0x7b, 0x4bb, 0x80, 0x3, 0x80000000, 0x81, 0x7, 0x3, 0x6, 0x8, 0x4, 0x6, 0x0, 0x8, 0x8, 0x2, 0xffffffff, 0xde8, 0x1, 0x9, 0x7, 0x7, 0x4, 0xfffffffa, 0x59d, 0x7f, 0x1000, 0x800, 0xd50, 0x7, 0x9c5, 0x1, 0x800, 0xffffff81, 0x6, 0x9, 0xffffffff, 0x2, 0x80000001, 0x10001, 0xffff, 0x8, 0x2, 0x1, 0x6, 0x837, 0x10001, 0x9, 0x5, 0x7fff, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0xffffffff, 0x2e, 0x1000, 0x401, 0x10000, 0x7c, 0xdcf, 0x1, 0x9, 0x1, 0x3, 0x8, 0x80000000, 0x5a5, 0x3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x6, 0xfff, 0x18ae, 0x6, 0x7, 0x0, 0xfffffffa, 0x2, 0x5, 0x5, 0x1, 0xa8, 0x1, 0x9, 0x200, 0x6, 0x0, 0x1000, 0x7ff, 0x6, 0x1, 0x2, 0x3, 0x7, 0x1f, 0x9537, 0x5, 0x0, 0x6, 0x24, 0x9, 0x7, 0x1, 0x0, 0x4, 0x0, 0x6, 0x6be46f7f, 0x400, 0x4, 0x4, 0x8, 0x6, 0x7, 0xa5, 0x4, 0x4, 0x4, 0x952, 0x3ff, 0x2, 0x1, 0x3, 0x7, 0xe36f, 0x4, 0x2, 0x9, 0xffffffff, 0x8, 0x7cc, 0x1, 0xffffffff, 0x7f, 0xffffffff, 0x5, 0x81, 0x7, 0x3f, 0xc4, 0x3, 0x6, 0x10000, 0x9, 0x75, 0xfffffffa, 0x1, 0x0, 0x0, 0xfff, 0x3f, 0x792, 0x7, 0xa7c, 0x80, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6, 0x6, 0x400, 0x2, 0x3, 0x5, 0x8, 0x8020, 0x3d3b, 0x9, 0x8, 0x2, 0x81, 0x0, 0x5, 0x2, 0xd62, 0x40, 0x5, 0x5, 0x1, 0x10000, 0x8, 0x20, 0x47, 0x80000000, 0xbc, 0x3, 0x8, 0x7000000, 0x40, 0x0, 0x2, 0x40, 0x2519c50e, 0x9, 0x4, 0x0, 0x0, 0x8, 0x4, 0x1, 0x4, 0x10001, 0x3, 0x8, 0x0, 0x9, 0x51367427, 0x7, 0xfffffffe, 0x8, 0x0, 0xffffe0d3, 0x9, 0xffffffff, 0x40, 0x8, 0x80, 0xfffff001, 0x40, 0x8, 0x7f, 0x4, 0xfc7, 0x4, 0x4, 0xffff8000, 0x3, 0x2, 0x6, 0x7, 0x7, 0x1, 0x3, 0x0, 0x9, 0x6, 0x1, 0xc763, 0x10000, 0x7, 0xfa9, 0x7, 0x314, 0x1, 0x0, 0x8, 0x7fff, 0x5, 0x401, 0xfffffffc, 0x9, 0x0, 0x2, 0x27b, 0x401, 0x2, 0x2, 0x80, 0xff, 0x2, 0x0, 0x6, 0x9, 0x5, 0x400, 0x55c, 0x2000, 0xce2c, 0x5, 0x49e, 0x800, 0x6, 0x8001, 0x1, 0x3, 0x7, 0x80000000, 0x8, 0x3f, 0x40, 0x9, 0x1, 0x3ff, 0x5, 0xfffffc01, 0x8, 0x40, 0xfffff278, 0x1, 0x5, 0x13c, 0x9c00000, 0x6, 0xff, 0x2908, 0x8a7, 0x6e16, 0x1, 0x401, 0xfffff49a, 0xff, 0x0, 0xfc, 0x4022, 0x1, 0x7, 0x0, 0x5, 0x12, 0x6, 0x3f, 0x10000, 0x401, 0x7, 0x80000001, 0xf5, 0x1, 0x10, 0x1ff, 0x3, 0x8, 0x1, 0x101, 0x1, 0xed75, 0x8, 0x5c, 0x2, 0x8, 0x0, 0x98, 0x7f, 0x5, 0x80, 0x3ff, 0x1, 0x83, 0x9, 0x1, 0x8001, 0x4, 0x0, 0x302e, 0x4, 0x8, 0x7, 0x10000, 0x80000001, 0x9, 0x0, 0x101, 0x4, 0x57f, 0x4, 0x9, 0x7ff, 0xf4a, 0x7f, 0xffffffff, 0x2, 0x5, 0x2, 0x7, 0x3f, 0x9a, 0x4, 0x37, 0x2, 0x0, 0x7f, 0x1, 0xfffffffa, 0x9, 0x7, 0x8, 0x2, 0x1f, 0x6, 0x7, 0x3, 0x4, 0x400, 0x6, 0x9, 0xd3, 0xffffffc1, 0xf1, 0xad3, 0x4, 0xfff, 0xcacd, 0x55, 0x1f, 0x0, 0x100, 0x4, 0xffff, 0x7fff, 0x0, 0x7ff, 0x1, 0x80, 0x7, 0x4f, 0x1, 0x7, 0x2, 0xe8f, 0xfe35, 0x8, 0x1, 0x3, 0x7, 0x7fff, 0xfffffff9, 0x2, 0x1, 0x3, 0x7, 0xfffffffb, 0x55, 0x8, 0x401, 0x800, 0x3ff, 0x0, 0xe968, 0x0, 0x9, 0x2, 0x7, 0x0, 0x4, 0xfffffffc, 0x5, 0x20, 0x4, 0x401, 0x7, 0xfe00000, 0x5, 0x81, 0x7, 0xb3, 0x1, 0x800, 0x0, 0x55, 0x7f, 0xfffffffe, 0x9, 0x5, 0xab4, 0x2, 0x7fff, 0x40, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfff, 0x20, 0x0, 0x6, 0x3, 0x6, 0x1, 0x6000000, 0x5e, 0x6, 0x7, 0x5, 0xb925, 0x1200000, 0x7fff, 0xff, 0x3057, 0x2, 0x0, 0x8, 0x7, 0x8000, 0x9, 0x0, 0x2, 0x7ff, 0x80, 0xb56d, 0xffffffff, 0x6, 0x5, 0x0, 0x8, 0x586d, 0x6, 0x2, 0xffffff30, 0x21, 0xffff7fff, 0x4, 0x3, 0x8, 0x5, 0x200, 0x3c, 0x9c, 0x0, 0x8000, 0x7, 0x7fffffff, 0x5, 0x5cc3, 0x2, 0x1f, 0x697, 0xfff, 0x5, 0x80000000, 0x6, 0x2, 0x7fff, 0x6, 0x0, 0x5, 0x9, 0xffffffff, 0x2, 0x100, 0x1]}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0x3, 0xff, 0x2, 0x8, 0x8}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x121201, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x4, 0x3, 0x2, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x5, 0x5, 0x2, 0x3}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000380)=[0x0, r4, 0x0, 0x0], 0x4, 0x0, r5, 0x81, 0x4, 0x4, 0xd53, {0x9, 0x3, 0xf2, 0xd6cb, 0xfff, 0x9, 0x7, 0x7ff, 0xb95d, 0xe7ac, 0x6, 0x200, 0x2, 0x3, "3b95c0b82b8291c2171bc51a5d08b1873fc95077665744df01d79fb5cd921484"}}) (async) syz_open_dev$hiddev(&(0x7f0000000300), 0x9, 0x200000) (async) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000000b00)={{0x3, 0xffffffff, 0x1, 0x3, 0x31, 0x7}, 0x21f, [0x1, 0x1000, 0x7ff0000, 0xffffff61, 0xd2c8, 0x0, 0x6, 0xfffffffe, 0x1, 0xfffffffa, 0xffffff81, 0x10001, 0x3ff, 0x5, 0x0, 0x5, 0xdcc, 0x4, 0x0, 0x81, 0x400, 0xff, 0x4, 0x6, 0x10001, 0x0, 0x8001, 0x4, 0x2, 0xd37, 0x9, 0x0, 0x8, 0x1, 0x8001, 0x3, 0x3, 0x80000000, 0x800, 0x5, 0x6, 0x61, 0x200, 0x1f, 0x7f, 0x400, 0x400, 0x3, 0x2dc, 0x9, 0xffffd0c2, 0xd132, 0x6, 0x3, 0x7, 0x7fff, 0x3, 0x6, 0x8, 0x7fff, 0xffff, 0xfae0, 0x7f, 0x80000000, 0x8, 0x3f, 0x1, 0x80, 0x7ff, 0x94bc, 0x10000, 0x7fff, 0xc259, 0xffff, 0x2a, 0x0, 0x0, 0x7, 0x1, 0x8, 0x200, 0x6, 0x0, 0x3, 0x1f, 0xdf9, 0x0, 0x0, 0xcfb6, 0x84, 0x40, 0x2, 0x1, 0x1, 0x2, 0x2, 0x9beef8b8, 0x4, 0xfffffffe, 0x656, 0x27, 0x9, 0x4, 0x8, 0x9, 0x5d, 0x4, 0x81, 0x3, 0xee, 0x800, 0x7, 0x80000001, 0x10000, 0xb9e, 0x200, 0x3, 0x80000000, 0x101, 0x7, 0x9, 0x0, 0x5, 0x7, 0xf4b3, 0x0, 0x8000, 0x20, 0x4, 0x4, 0x0, 0x800, 0x8a0, 0x7, 0x4, 0x5, 0xfffffffe, 0x5, 0x7, 0x3f, 0xff, 0x3, 0x3, 0xfffffff9, 0x40, 0xffffff11, 0xa4b, 0x4, 0x140, 0x401, 0x21f, 0xfe7, 0xffff, 0x7, 0x3, 0x40, 0x1, 0x81e, 0xfffffffc, 0x3ff, 0x400, 0x1, 0x48000, 0x100, 0x5, 0x0, 0x2ffd, 0x5, 0xffffbe52, 0x3f, 0x3, 0x0, 0x5, 0x0, 0x8, 0xef93, 0x6, 0x7215, 0x0, 0x28368fe8, 0x8, 0x2, 0x6, 0x8, 0x75c2, 0x0, 0x5, 0x9, 0x8, 0xd708, 0x3, 0xffffff01, 0x0, 0x20, 0xffff, 0x7, 0x4, 0x9, 0x5, 0x0, 0x0, 0x4, 0x2, 0x7, 0x0, 0x4, 0x80000001, 0x0, 0xfffff153, 0x80000000, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0xcea, 0x10001, 0x80, 0x9, 0x1, 0x80000001, 0xf7, 0x0, 0x7, 0x6, 0x2, 0x6, 0x7, 0x10000, 0x5, 0x4, 0x8000, 0x4, 0x7, 0x1, 0x4, 0x4, 0x1, 0x10001, 0x1ce, 0x401, 0x7ff, 0x1, 0x3, 0x8, 0xfff, 0x4, 0xfb, 0x9, 0x4, 0x3, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9e0f, 0x5, 0x5, 0x3f, 0x9, 0x7fffffff, 0x101, 0x7, 0x121, 0x8, 0x6, 0x1, 0x0, 0x4, 0xff, 0x5d3, 0x1f, 0x4, 0x7, 0x7, 0x9, 0x9, 0x7ff, 0x800, 0x3, 0x524e, 0x400, 0x10000, 0x7, 0x6, 0x80, 0x1ff, 0x2e, 0x5, 0xcb68, 0x10000, 0x0, 0x4, 0x51, 0x1, 0x3f, 0x8, 0x200, 0x401, 0xfffffffe, 0x3, 0xfffffffc, 0x7fff, 0x3, 0xc000, 0x5, 0x3, 0x3f, 0x7, 0x7fffffff, 0xfff, 0x7f, 0x218f, 0x2, 0x6, 0x8, 0x3, 0x1000, 0x4, 0x80000001, 0x1, 0xce6, 0x4, 0xfff, 0x7ff, 0x6, 0x4, 0x3, 0x7, 0x8, 0x0, 0xfffffffd, 0x2, 0x3f, 0x1, 0x7fffffff, 0x2e, 0x412, 0x5, 0x2a5085aa, 0x4, 0x80000000, 0x1786, 0x909, 0x80, 0x1, 0x9, 0x0, 0x4, 0x29, 0x9, 0x3, 0xffff7fff, 0x80000000, 0x3, 0x6, 0x5, 0x80000000, 0x0, 0x7, 0xae, 0x6, 0x7, 0x8, 0x1, 0xffffffff, 0xfff, 0x3ff, 0x6, 0x3, 0x6, 0xab, 0xffff, 0x8, 0x7ff, 0x401, 0x4, 0x3ff, 0x101, 0x83, 0x2, 0x400, 0x2, 0x2, 0x4, 0x7fff, 0x9, 0x1, 0x1f, 0x7f, 0xfffffe00, 0xf323, 0x9, 0x5, 0x6, 0x5000000, 0x7, 0x704c, 0xffffffff, 0x3, 0x1, 0x1000, 0xffff20ad, 0x80, 0x1ff, 0x1000, 0xffffffff, 0x8, 0x4, 0x8, 0x6, 0x7ff, 0x2, 0x7fffffff, 0xa8, 0x7ff, 0x8, 0x80, 0x9c, 0x6d, 0x100, 0x90e3767, 0x75, 0x401, 0x1, 0x1f, 0x800, 0x4, 0x3, 0x45, 0x0, 0x5, 0x2, 0x1, 0x4, 0xfffffeff, 0xc3, 0xdd, 0x723e, 0x40, 0x6, 0x37, 0x0, 0x6, 0x89cf, 0x1ff, 0x8000, 0x6, 0x8001, 0x6, 0x9, 0x6, 0x1, 0x5, 0x8, 0x56fd8c7d, 0x100, 0x401, 0x1e2f, 0x5, 0x1, 0x4, 0xfffffff8, 0x6, 0x7fde, 0x0, 0x101, 0x8, 0x4, 0x7, 0x18e, 0x1ac0, 0x9, 0xfffffff9, 0x9, 0x10001, 0xf67, 0x7fffffff, 0x7b, 0x4bb, 0x80, 0x3, 0x80000000, 0x81, 0x7, 0x3, 0x6, 0x8, 0x4, 0x6, 0x0, 0x8, 0x8, 0x2, 0xffffffff, 0xde8, 0x1, 0x9, 0x7, 0x7, 0x4, 0xfffffffa, 0x59d, 0x7f, 0x1000, 0x800, 0xd50, 0x7, 0x9c5, 0x1, 0x800, 0xffffff81, 0x6, 0x9, 0xffffffff, 0x2, 0x80000001, 0x10001, 0xffff, 0x8, 0x2, 0x1, 0x6, 0x837, 0x10001, 0x9, 0x5, 0x7fff, 0x5, 0x2, 0x1, 0x7, 0xffffffff, 0xffffffff, 0x2e, 0x1000, 0x401, 0x10000, 0x7c, 0xdcf, 0x1, 0x9, 0x1, 0x3, 0x8, 0x80000000, 0x5a5, 0x3, 0x9, 0x9, 0x8, 0x6, 0x8, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x6, 0xfff, 0x18ae, 0x6, 0x7, 0x0, 0xfffffffa, 0x2, 0x5, 0x5, 0x1, 0xa8, 0x1, 0x9, 0x200, 0x6, 0x0, 0x1000, 0x7ff, 0x6, 0x1, 0x2, 0x3, 0x7, 0x1f, 0x9537, 0x5, 0x0, 0x6, 0x24, 0x9, 0x7, 0x1, 0x0, 0x4, 0x0, 0x6, 0x6be46f7f, 0x400, 0x4, 0x4, 0x8, 0x6, 0x7, 0xa5, 0x4, 0x4, 0x4, 0x952, 0x3ff, 0x2, 0x1, 0x3, 0x7, 0xe36f, 0x4, 0x2, 0x9, 0xffffffff, 0x8, 0x7cc, 0x1, 0xffffffff, 0x7f, 0xffffffff, 0x5, 0x81, 0x7, 0x3f, 0xc4, 0x3, 0x6, 0x10000, 0x9, 0x75, 0xfffffffa, 0x1, 0x0, 0x0, 0xfff, 0x3f, 0x792, 0x7, 0xa7c, 0x80, 0x2, 0x3, 0x3, 0x3, 0x5, 0x6, 0x6, 0x400, 0x2, 0x3, 0x5, 0x8, 0x8020, 0x3d3b, 0x9, 0x8, 0x2, 0x81, 0x0, 0x5, 0x2, 0xd62, 0x40, 0x5, 0x5, 0x1, 0x10000, 0x8, 0x20, 0x47, 0x80000000, 0xbc, 0x3, 0x8, 0x7000000, 0x40, 0x0, 0x2, 0x40, 0x2519c50e, 0x9, 0x4, 0x0, 0x0, 0x8, 0x4, 0x1, 0x4, 0x10001, 0x3, 0x8, 0x0, 0x9, 0x51367427, 0x7, 0xfffffffe, 0x8, 0x0, 0xffffe0d3, 0x9, 0xffffffff, 0x40, 0x8, 0x80, 0xfffff001, 0x40, 0x8, 0x7f, 0x4, 0xfc7, 0x4, 0x4, 0xffff8000, 0x3, 0x2, 0x6, 0x7, 0x7, 0x1, 0x3, 0x0, 0x9, 0x6, 0x1, 0xc763, 0x10000, 0x7, 0xfa9, 0x7, 0x314, 0x1, 0x0, 0x8, 0x7fff, 0x5, 0x401, 0xfffffffc, 0x9, 0x0, 0x2, 0x27b, 0x401, 0x2, 0x2, 0x80, 0xff, 0x2, 0x0, 0x6, 0x9, 0x5, 0x400, 0x55c, 0x2000, 0xce2c, 0x5, 0x49e, 0x800, 0x6, 0x8001, 0x1, 0x3, 0x7, 0x80000000, 0x8, 0x3f, 0x40, 0x9, 0x1, 0x3ff, 0x5, 0xfffffc01, 0x8, 0x40, 0xfffff278, 0x1, 0x5, 0x13c, 0x9c00000, 0x6, 0xff, 0x2908, 0x8a7, 0x6e16, 0x1, 0x401, 0xfffff49a, 0xff, 0x0, 0xfc, 0x4022, 0x1, 0x7, 0x0, 0x5, 0x12, 0x6, 0x3f, 0x10000, 0x401, 0x7, 0x80000001, 0xf5, 0x1, 0x10, 0x1ff, 0x3, 0x8, 0x1, 0x101, 0x1, 0xed75, 0x8, 0x5c, 0x2, 0x8, 0x0, 0x98, 0x7f, 0x5, 0x80, 0x3ff, 0x1, 0x83, 0x9, 0x1, 0x8001, 0x4, 0x0, 0x302e, 0x4, 0x8, 0x7, 0x10000, 0x80000001, 0x9, 0x0, 0x101, 0x4, 0x57f, 0x4, 0x9, 0x7ff, 0xf4a, 0x7f, 0xffffffff, 0x2, 0x5, 0x2, 0x7, 0x3f, 0x9a, 0x4, 0x37, 0x2, 0x0, 0x7f, 0x1, 0xfffffffa, 0x9, 0x7, 0x8, 0x2, 0x1f, 0x6, 0x7, 0x3, 0x4, 0x400, 0x6, 0x9, 0xd3, 0xffffffc1, 0xf1, 0xad3, 0x4, 0xfff, 0xcacd, 0x55, 0x1f, 0x0, 0x100, 0x4, 0xffff, 0x7fff, 0x0, 0x7ff, 0x1, 0x80, 0x7, 0x4f, 0x1, 0x7, 0x2, 0xe8f, 0xfe35, 0x8, 0x1, 0x3, 0x7, 0x7fff, 0xfffffff9, 0x2, 0x1, 0x3, 0x7, 0xfffffffb, 0x55, 0x8, 0x401, 0x800, 0x3ff, 0x0, 0xe968, 0x0, 0x9, 0x2, 0x7, 0x0, 0x4, 0xfffffffc, 0x5, 0x20, 0x4, 0x401, 0x7, 0xfe00000, 0x5, 0x81, 0x7, 0xb3, 0x1, 0x800, 0x0, 0x55, 0x7f, 0xfffffffe, 0x9, 0x5, 0xab4, 0x2, 0x7fff, 0x40, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x0, 0x7, 0xfff, 0x20, 0x0, 0x6, 0x3, 0x6, 0x1, 0x6000000, 0x5e, 0x6, 0x7, 0x5, 0xb925, 0x1200000, 0x7fff, 0xff, 0x3057, 0x2, 0x0, 0x8, 0x7, 0x8000, 0x9, 0x0, 0x2, 0x7ff, 0x80, 0xb56d, 0xffffffff, 0x6, 0x5, 0x0, 0x8, 0x586d, 0x6, 0x2, 0xffffff30, 0x21, 0xffff7fff, 0x4, 0x3, 0x8, 0x5, 0x200, 0x3c, 0x9c, 0x0, 0x8000, 0x7, 0x7fffffff, 0x5, 0x5cc3, 0x2, 0x1f, 0x697, 0xfff, 0x5, 0x80000000, 0x6, 0x2, 0x7fff, 0x6, 0x0, 0x5, 0x9, 0xffffffff, 0x2, 0x100, 0x1]}) (async) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000140)={0x2, 0x3, 0xff, 0x2, 0x8, 0x8}) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/42, &(0x7f0000000080)=0x2a) (async) 04:48:48 executing program 4: socket(0x0, 0x5, 0x0) 04:48:48 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x3ff, 0x4) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "b08a6d942b74c491", "8e986986612ae6c1df0e9813ba9dbf3c", "6530ee46", "d31780ec3197599b"}, 0x28) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:48 executing program 1: socket(0x6, 0x2, 0x7) 04:48:48 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 04:48:48 executing program 1: socket(0x6, 0x2, 0x7) 04:48:48 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0x1, 0x6}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:48 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000240)=@raw=[@ldst], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:48 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:48 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="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", &(0x7f00000001c0)=@tcp6=r2}, 0x20) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x2, 0xffffffff, 0x9056, 0x10000, 0xd6, 0x3}) socket(0x10, 0x2, 0x7) 04:48:48 executing program 1: socket(0x6, 0x2, 0x7) 04:48:49 executing program 4: socket(0x0, 0x5, 0x0) 04:48:49 executing program 1: socket(0x10, 0x2, 0x7) socket(0xf, 0x2, 0x10000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 04:48:49 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:49 executing program 3: ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000000)={{0x3, 0x2, 0x7fffffff, 0x7, 0x4, 0x1}, 0x3e1, [0x0, 0x401, 0xfffffffc, 0x6, 0x3, 0xfff, 0x0, 0x7e, 0x2, 0x1, 0x8, 0xffffffff, 0x40, 0x40, 0x4, 0x7fff, 0x7fffffff, 0x6, 0x49, 0x488, 0x5, 0x1, 0x6, 0x1ff, 0x8, 0x7ff, 0xfffffffc, 0x3ff, 0x2, 0x2, 0x3, 0x2, 0x0, 0x0, 0x7fffffff, 0x800, 0x4, 0x0, 0x3, 0x2800, 0x7ff, 0x4e, 0x0, 0x6, 0x20, 0x4, 0x5, 0x5, 0x2, 0xffff2576, 0x3ff, 0x2, 0x0, 0x1, 0x7f, 0x5, 0x82d2, 0x9cc3, 0x1, 0x6, 0x400, 0x7b, 0xffff, 0x9, 0x10000, 0x7, 0x3, 0x80000001, 0x8, 0x101, 0x4, 0x0, 0x9, 0x5, 0xd1, 0x8, 0x52, 0x40, 0x2, 0x3, 0xffffffff, 0x2, 0x3, 0x3, 0x7, 0x79f, 0x100, 0x4, 0x25d4, 0x0, 0x81, 0xff, 0x8, 0x7, 0x0, 0x7, 0x2, 0xf1700, 0xffffffc0, 0x4, 0x1, 0x9, 0x2, 0x101, 0x2db, 0x1, 0x8, 0xfffffffc, 0x3ff, 0x6, 0x3, 0x9, 0x7fff, 0x0, 0x7fffffff, 0x7fff, 0x1, 0x200, 0x93, 0x3, 0x3, 0xc759, 0x5, 0x4a46, 0x12000, 0xb53, 0x2, 0x3, 0xe732, 0x81, 0x20000, 0x400, 0x5c3c, 0x1, 0x3, 0x1, 0x0, 0x3f, 0x80, 0x7ff, 0x1, 0x3, 0x1106, 0x5, 0x4, 0x6, 0x6, 0x7d, 0x7, 0x10001, 0x9, 0xfff, 0x6, 0x1f, 0x0, 0x8001, 0x401, 0x4, 0xc3, 0x9, 0x2e, 0x4, 0x6bc, 0x8001, 0x4, 0x8, 0xff, 0x2d, 0x82, 0x1, 0x9, 0x1, 0x6, 0x0, 0x4, 0xc57, 0x3, 0xffff, 0x5, 0x0, 0x20, 0x40, 0xf2, 0x40, 0x2, 0xfff, 0x9, 0x81, 0xe59f, 0x0, 0x7, 0xffffffdc, 0x3c2b, 0x2, 0x33, 0x20000000, 0x75f, 0x1000, 0x3, 0x3, 0x632e4607, 0x1, 0x4b5, 0x200, 0xffffffff, 0x9, 0x0, 0x8, 0xde, 0x72, 0x9, 0xfff, 0x4ba, 0xff, 0x1f, 0x4, 0x9, 0x6, 0x101, 0x6, 0x6f323fc5, 0xb54, 0x100, 0x5, 0x401, 0x8, 0x9, 0x7, 0x1f, 0xffffffff, 0x0, 0x8f4, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, 0x6, 0x6, 0x7, 0x6, 0x8, 0xb5b, 0x80000000, 0xffff, 0x0, 0xc52, 0xccc70, 0x9, 0x8, 0x40, 0x4, 0xe03c, 0x3, 0x0, 0x8bd, 0x47, 0x5, 0x3, 0x668, 0xdf20, 0x4d400000, 0x5, 0x85f, 0x0, 0x8000, 0x8, 0x100, 0x6, 0x2, 0xfff, 0x2, 0x7c94d8ac, 0x9, 0x80000001, 0x2, 0x5, 0x6, 0x1, 0x1, 0x4, 0x753, 0x20, 0xfffffffa, 0x3, 0x2, 0x10000, 0x401, 0xffffffff, 0x8001, 0x5, 0x80000000, 0x8, 0x1, 0xffffffff, 0x101, 0x80, 0xdc20, 0x4, 0x1, 0x2, 0x1, 0x1, 0x8, 0x9, 0x5, 0x1, 0xfff, 0x1, 0x200, 0x7, 0x6, 0x800, 0x2, 0x4, 0x3, 0x5, 0x10001, 0x4, 0x1000, 0x400, 0x20, 0x5, 0x4b, 0x139, 0x7, 0x100, 0xbc, 0x9, 0xfffff8f5, 0x8, 0xfffffff7, 0x8, 0x9, 0x4, 0x10001, 0x3, 0x6, 0x885, 0x0, 0x5, 0x401, 0xde, 0x950, 0x7, 0x0, 0x1, 0x728827bb, 0x1, 0x25, 0x1f, 0x9, 0x81, 0x4, 0x2, 0x1da0, 0x1f, 0xffffffff, 0x9, 0xfffffb5d, 0x3, 0x8, 0x0, 0x80000000, 0x1, 0xa43, 0x5, 0x2, 0x5, 0x3f3, 0x1000, 0x2, 0x3, 0x8, 0x6, 0xfff, 0x2, 0x0, 0x8, 0x7, 0x1, 0x9, 0x10000, 0x8, 0x6, 0x10001, 0x100, 0x800, 0x10001, 0x3, 0xffff, 0x7, 0x3, 0x10000, 0x7548, 0x4, 0x1f, 0xc81, 0x7, 0x8000, 0x170, 0x8000, 0x443ae65a, 0xf4b, 0x7, 0x5, 0x7, 0x200, 0x2, 0x5, 0x0, 0x6, 0x0, 0x5, 0xba, 0x4, 0x2, 0x10000, 0x8001, 0x5, 0x6, 0x9, 0x100, 0x80000001, 0x8, 0xa8, 0x2, 0x8, 0x3c1, 0xe860, 0x800, 0x7, 0x62a, 0x8000000, 0x80000001, 0x9, 0x1, 0x5eecc4e9, 0x7, 0x0, 0xfffffffa, 0x3, 0x1, 0x5, 0x40000000, 0x4, 0x10000, 0x10001, 0x1f, 0xd96b, 0x1, 0x6, 0x81, 0x6, 0x2, 0x40, 0xfffffffb, 0xa78, 0xfff, 0xd8, 0x400, 0x6, 0x4, 0x5, 0x6, 0x3ff, 0x55, 0xfff, 0xffff8001, 0x0, 0x1, 0xc5, 0xfff, 0x1, 0x0, 0x4, 0x5, 0x5a, 0xd0f, 0x3, 0x9, 0x7fff, 0x8000, 0xa4, 0x10, 0x6, 0xfff, 0xfffff105, 0x5, 0x9, 0xfff, 0xfffffff9, 0x8, 0x7, 0x7, 0x2, 0x1, 0xfffffffc, 0x1ca, 0xffffffff, 0xb94, 0x4, 0x2, 0x3, 0x5, 0x4, 0x0, 0x4, 0x1, 0x7, 0x40, 0xafc0, 0x7fff, 0xfffffeff, 0x0, 0x5, 0x101, 0x10001, 0x8, 0x2, 0x1, 0x3, 0xe5e, 0xfffffeff, 0x2, 0xd5, 0x3, 0x1ff, 0x6, 0xe68, 0xde, 0xffff356a, 0xe6c, 0x2f, 0x4, 0x6, 0x7fffffff, 0x3, 0x401, 0x5, 0x4, 0x0, 0x7fffffff, 0x7, 0x6, 0xfffff000, 0x9, 0x0, 0x9, 0x7, 0x3a, 0x80000001, 0x8f48, 0x8, 0x2, 0xffffffff, 0x4, 0x4, 0x2, 0x100000, 0xaf, 0x5, 0x10000, 0x2, 0x8000, 0x7d8, 0x6, 0xd7, 0x0, 0x5, 0x6, 0x1000, 0x1000, 0x1, 0x3, 0x8, 0x1000, 0x4496, 0x40, 0x4, 0x3b, 0x1000, 0x401, 0x1000, 0x4, 0x7, 0x0, 0x8, 0x7ff, 0x3, 0x10000, 0xe7d, 0x9, 0x28, 0x0, 0xfffffff7, 0x1, 0x9, 0x6380af9f, 0x2, 0x40, 0x1000, 0x7c4, 0x8, 0x2, 0x3, 0xfffffc01, 0x7, 0x1, 0x80, 0x2, 0x9f, 0x80000000, 0x5, 0x5fd, 0x8001, 0x6, 0x200, 0xfff, 0x7fff, 0x2, 0x80000001, 0x8, 0x2, 0xffffffff, 0x40000000, 0x3ff, 0x2, 0x1f, 0x1, 0x3ff, 0x1, 0x7fffffff, 0x401, 0x1, 0x436e, 0x6344, 0x4, 0x7, 0x7, 0x7f, 0xfffff801, 0x0, 0x80000000, 0x1, 0xfffffffd, 0x9, 0x4, 0xffffffff, 0x8001, 0x401, 0x9, 0x4, 0x1, 0x2, 0x400, 0x7, 0x400, 0x8, 0xff, 0x1ff, 0xd619, 0x4, 0x7, 0x6, 0x20, 0xfffffffc, 0x4, 0x0, 0x8001, 0x9a6c, 0xea2, 0x860, 0x8, 0x9, 0xd96, 0x10000, 0x7ff, 0x56, 0x2, 0x7bf9, 0x5, 0x8, 0xe8, 0x9, 0x6, 0x1, 0x40, 0x400, 0x3, 0x9, 0x0, 0x3, 0x7, 0x45c, 0x7, 0x20, 0x9, 0x8, 0x2, 0x7, 0x0, 0x1, 0x401, 0x4, 0xff, 0x1, 0x7fff, 0xffff8001, 0x0, 0x7f, 0x0, 0x4, 0x5, 0x81, 0x80, 0x4, 0x4, 0x2, 0x2, 0x6, 0xfffffffa, 0x5, 0x0, 0x862a, 0x4, 0x8, 0xfb, 0xe5, 0x80, 0x9, 0x9, 0x1, 0x9, 0x69155d98, 0xffffffff, 0x5, 0x5, 0x1, 0x2, 0x2, 0x30, 0xa0, 0x5e, 0x2, 0x7fffffff, 0x4, 0x3, 0x1, 0xff, 0xe5, 0x8, 0xffffffff, 0x10001, 0xfffff800, 0x35, 0x1, 0x3, 0x80000001, 0x0, 0x2, 0x0, 0x8001, 0x7f, 0x5, 0x7f, 0x5, 0x2, 0x8001, 0x0, 0x400, 0x4, 0x25, 0x7fffffff, 0x200, 0x401, 0x5, 0x3ae812d5, 0x9, 0x4, 0xea9, 0x5, 0x1c, 0x4, 0x5, 0x9f4f, 0x8, 0x6, 0x1f, 0xac4, 0x8, 0x10200, 0x5, 0x6, 0x4, 0x1, 0x1, 0x4, 0x4, 0xb9, 0xc3de, 0x5, 0x52, 0x1, 0xffff, 0x9, 0x9, 0x600000, 0x5, 0x2, 0x200, 0x7, 0x0, 0x400, 0x1ff, 0x59c, 0x7, 0x7, 0x3, 0x5, 0x4, 0x800, 0x306, 0x80000006, 0x2, 0x4, 0x5cd2, 0x3, 0x6, 0x7ff, 0x3ff, 0x2, 0x9, 0x8, 0x30b9f802, 0x8, 0x80000001, 0x3, 0x1f, 0x9, 0x8, 0x8, 0x80, 0x8, 0x7, 0x6, 0xf5, 0x20, 0xfffff42e, 0x10000, 0x2, 0x8000, 0x9, 0x1000, 0x0, 0x8000, 0x9b7, 0x6, 0x6, 0x9, 0x2, 0x6, 0x2, 0xb076, 0x4, 0x80000001, 0x0, 0x101, 0x5f, 0x3, 0x800, 0xaa1b, 0x40, 0x1f, 0x167c855f, 0xffff0000, 0x101, 0xfffffb8f, 0x0, 0x200, 0x0, 0x3, 0xb, 0x0, 0x5, 0x1, 0xffff, 0x0, 0x6, 0x2, 0x7fff, 0x0, 0x400, 0x200, 0x4, 0x9ee, 0xcb4e, 0xfffffffc, 0x0, 0x7, 0x5, 0x2, 0x7, 0x2, 0x7fffffff, 0x9, 0x7fffffff, 0x2, 0x2, 0x1c0000, 0x3, 0x3, 0x0, 0x1, 0x4, 0x1, 0x8, 0x4, 0x7, 0x5, 0x1, 0x4, 0xe7, 0x20, 0x3, 0x8, 0x5, 0x3, 0xfffffffd, 0xfffffffb, 0x8, 0xff, 0x7, 0x3, 0xfffffc01, 0x0, 0x6, 0x2c, 0x3, 0x6, 0xd74, 0xfffffffe, 0x1000, 0x8, 0x1, 0x0, 0x8, 0x8, 0x54db6e3c, 0x20, 0x80000001, 0x0, 0x7c4c3764, 0x40, 0x1, 0x92, 0x6, 0x399, 0x7fff, 0x2, 0x1, 0x3, 0x1, 0x7, 0x9, 0x7ff, 0x40, 0x38780000, 0x8, 0x10000, 0x4, 0x400, 0x10001, 0xdb5c, 0x5, 0x467c, 0x101, 0x5, 0x7, 0x3ff, 0x1, 0x5, 0x7, 0x4edd232, 0x8, 0x90, 0x68ad76fe, 0x20, 0x80000001, 0xfffffffa, 0xff, 0x6, 0x6, 0x80000001, 0x7fffffff, 0x7f, 0x7fffffff, 0x5, 0x6, 0x7f, 0x4, 0x7, 0xffffffff, 0xfffeffff, 0x9, 0x6, 0x0, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffff, 0x80000001, 0x9, 0x8, 0xffff, 0x1, 0x6, 0x9f7, 0x1, 0x1b]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000002080)={0x3, 0x1, 0xf1, 0xfff, 0x3, 0x58}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000002140)={{0x1, 0x3, 0x80000000, 0x0, 0x0, 0x1}, 0x3d8, [0x8001, 0x400, 0x89, 0x1, 0x6, 0x1f, 0x7fff, 0x1, 0x5, 0x4dc, 0xffff, 0xe8a, 0x7, 0x4, 0x8000, 0x8001, 0x595, 0x3, 0x5, 0xaf33, 0x9, 0x80, 0x3a2, 0x1, 0x1000, 0x8, 0x100, 0x3, 0x6, 0x0, 0x2, 0xa2, 0x5, 0x6, 0x5e, 0xff, 0x6759, 0x81, 0x80000001, 0x3, 0x2, 0x68, 0x2000000, 0x3, 0x1, 0x1, 0x1, 0xccf1, 0x3a, 0x6, 0xe3db, 0x10001, 0xffffffff, 0x9, 0xf0000000, 0x1, 0x5, 0x61, 0x3, 0x400, 0x1ff, 0x7fffffff, 0x5, 0x3, 0x7, 0x1f, 0x80000000, 0x10000, 0xd9b5, 0x6, 0x5, 0x3ff, 0x10000, 0x5, 0x67a2, 0x8, 0x5, 0x6, 0x4, 0x8, 0x4, 0x7ff, 0x5ff, 0xff, 0x727, 0x4, 0x6, 0x81, 0xfffffff8, 0x10001, 0x8, 0x6, 0x8, 0x35, 0x20, 0x2, 0x1, 0xf6, 0x7, 0x8, 0x3ff, 0x7, 0x1, 0x800, 0x3, 0xb67, 0x0, 0x7, 0x87, 0xfffffffc, 0xe7e1, 0x8001, 0x3, 0x7, 0x20, 0x4, 0x7, 0x80, 0x98, 0x8, 0x1, 0x4, 0x7ff, 0x80000001, 0x7, 0xdf2c, 0x8001, 0x3, 0xffffffff, 0x3, 0x0, 0x9, 0xff, 0x800, 0x400, 0xffffffff, 0x8, 0xffffffff, 0x7, 0x8c, 0x5, 0x4, 0x7, 0x36, 0x0, 0x2, 0x5, 0x7ff, 0x7fffffff, 0xf2c, 0x80000001, 0x6, 0x7fff, 0x7ff, 0xdd5b, 0xd3, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x5, 0x800, 0x1, 0x6, 0x765b, 0x933, 0x4, 0x343000, 0x40, 0x8, 0x401, 0x228, 0x4, 0x6, 0x6b, 0x6, 0x0, 0x0, 0x800, 0x7fff, 0x5, 0x1ff, 0x0, 0x6, 0x5, 0x200, 0x1, 0x8, 0x9, 0x9, 0x5, 0x8, 0x8000, 0x36, 0x7ff, 0x1, 0xa28, 0x5, 0x100, 0xfd6, 0x1, 0x3, 0x8, 0x7, 0xa71, 0x7e630d7e, 0x7, 0x1, 0x4, 0x8001, 0x0, 0xced, 0x7, 0x9, 0x2, 0x8b, 0x9, 0x3, 0x1, 0x80, 0x6, 0x100, 0x5, 0x101, 0x3, 0x2c33, 0xff, 0x5, 0xffffffff, 0x0, 0x7ff, 0x3ff, 0x7, 0x72e332d3, 0xfff, 0xbb, 0xf, 0x9, 0x800, 0x9, 0xd79, 0xf007, 0x400000, 0xb9d6, 0x2, 0xffffae58, 0x100, 0x9, 0xb9, 0x6, 0x0, 0x6, 0x10001, 0x7fff, 0x1, 0xb, 0xf0, 0x1, 0x400, 0x6, 0x0, 0x1, 0x9a, 0x5fc, 0x9, 0x5, 0x80000000, 0xb2, 0x20, 0x1ff, 0x5, 0xd67c, 0x1dff71dd, 0x4, 0x4, 0x0, 0x5, 0xaaaa, 0x1, 0x201, 0x4, 0x4, 0x7, 0xb7, 0x9f, 0xf202, 0x3, 0x1, 0x5, 0x1ff, 0x4, 0x6, 0x2, 0x0, 0x4, 0x7fff, 0x453, 0x8, 0x63d, 0x9, 0x0, 0x3ff, 0x4, 0x6, 0x8, 0x9, 0x2000400, 0x3, 0x0, 0x7, 0x1f, 0x8, 0x8, 0x7, 0x1, 0x2b000000, 0x1, 0x4169, 0x0, 0x5, 0xd0, 0x7, 0x5, 0x9, 0x100, 0xd4a, 0x2, 0x7fff, 0xfffffffb, 0x5, 0x0, 0xa405, 0x80000000, 0x8, 0x3, 0x9, 0x0, 0x8, 0x1, 0xffff, 0x1ff, 0x7, 0x822b, 0x0, 0x9, 0x9, 0x7, 0x80000000, 0x3f, 0x0, 0x8, 0x8000, 0x2, 0x32, 0x9, 0x1, 0x400, 0x3, 0x7, 0x8, 0x7d, 0xffff, 0x4, 0x7, 0x3, 0x4, 0x1000, 0x0, 0x2, 0x5, 0x0, 0x4000000, 0x1000, 0xcf, 0x28ee9432, 0x2, 0xffffff01, 0xe2000000, 0xffffffe1, 0x4, 0xd64, 0x7, 0x2, 0x1, 0xd3, 0x7fffffff, 0x401, 0x7f, 0x87, 0xffffffff, 0x7ff, 0x20, 0x4, 0x0, 0x8001, 0x2, 0x80, 0x93, 0x0, 0x4, 0x80, 0x200, 0x1, 0xfffffffd, 0xfffffffa, 0x6, 0x80000001, 0x1000, 0x20, 0x2, 0x7ff, 0x1, 0x491, 0x3f, 0x0, 0x6, 0x0, 0x3, 0x2a3b09f1, 0x8, 0x80, 0x8, 0x200, 0x7fff, 0x5, 0x5, 0x20, 0x0, 0x8, 0x65bf, 0x2fa4, 0xff88, 0x8, 0xfd0, 0x8, 0x9, 0x7, 0xff, 0x4, 0x2000000, 0x1000, 0x3, 0xa1, 0x4, 0x5, 0x0, 0x4, 0x6, 0xfa, 0x6, 0xfffff800, 0x4, 0x6, 0x7fffffff, 0x7, 0x6, 0x8, 0x4, 0x7f, 0x1, 0xcf7, 0x80000000, 0x2, 0x4, 0x0, 0x7, 0x6, 0x800, 0x7ff, 0x9, 0x9eb, 0x8, 0x9, 0x7fff, 0x7, 0x100, 0xfffffffb, 0x0, 0x0, 0x2, 0x9445, 0x6c8, 0x5, 0x3, 0x4bd1, 0x0, 0xfffffff7, 0x0, 0x80000001, 0x7, 0xffff, 0x5851, 0x7fff, 0x400, 0x0, 0x6, 0x10001, 0x4, 0x0, 0x1, 0x1, 0xf0ef, 0x8000, 0xdf, 0xffffffff, 0x3, 0x5, 0x400, 0x3, 0x4, 0x8, 0x80000001, 0x1, 0x197, 0x7fffffff, 0x2, 0x9, 0xfffffffc, 0xff, 0xbfb, 0x72e, 0xffff8001, 0x0, 0x10001, 0x7, 0x1, 0x81, 0x81, 0x20, 0x0, 0x80000000, 0x5412, 0xffffffc1, 0x9, 0x31b, 0xbc59, 0x438, 0x4, 0x4, 0xffffffff, 0x200, 0x10000, 0x1, 0x3, 0x0, 0xffff, 0x1fe, 0x8000, 0x2f3, 0x8, 0x401, 0x20, 0x6, 0x7, 0x1000, 0x3, 0x20, 0x4, 0x149, 0x84, 0xfffffe01, 0x6, 0x0, 0x3ff, 0x2, 0x400, 0xfffffffc, 0x800, 0x6, 0xcaf0, 0x0, 0x1, 0x0, 0x3f, 0x6, 0x7784, 0x200, 0x2, 0x4, 0x7b73, 0x7, 0x3, 0xbd, 0xfffffff7, 0x10001, 0x4, 0x0, 0xe72, 0x7, 0x1f, 0xde78, 0xffff0001, 0xfffffff7, 0x1f, 0x5, 0x31960000, 0x7, 0x80000000, 0x400, 0xfffffff9, 0x2a7, 0x0, 0x7ff, 0x2, 0xfff, 0xc4, 0x40000, 0x5, 0x100, 0x1, 0x1000, 0x6ce, 0x5, 0x2, 0x100, 0x80, 0xffffff75, 0x3, 0x2, 0xffffffc0, 0x80000001, 0x200, 0x53, 0x5, 0x3, 0x4, 0x1, 0x10000, 0x5, 0x3, 0x5738, 0x6cfd, 0x6, 0xfff, 0x2, 0x80, 0x45f6942c, 0x0, 0xc0000, 0x8, 0x7ff, 0x5c, 0xdf, 0x96, 0x80000001, 0x2, 0x3, 0xcad, 0x9, 0x80000001, 0x6, 0x8001, 0xa32, 0x5, 0x5, 0x0, 0xdb9, 0x6, 0x3, 0x7f, 0x1000, 0x7fffffff, 0xfff, 0x5, 0x1, 0x7, 0x1f, 0x1, 0x7, 0x9, 0x0, 0x7fffffff, 0x3, 0x60, 0x0, 0x401, 0x0, 0xa3, 0x0, 0x6, 0x56, 0x2, 0x5, 0x400, 0x1, 0x800, 0x7fff, 0x7, 0x9, 0x9, 0x1, 0x3, 0x5, 0x1, 0x10001, 0x89, 0x4, 0x9, 0x5, 0xb2, 0x3dd, 0x1, 0x4, 0x6, 0x8001, 0x7, 0x0, 0x0, 0x2f9, 0x1, 0x5, 0x8, 0x5, 0x10000, 0x1, 0x1, 0x10000, 0x0, 0x3, 0xffff, 0x401, 0x0, 0x6, 0x0, 0x3, 0x8, 0xfffffffe, 0x8, 0x6, 0x8, 0x18a, 0x1ff, 0x8000, 0x5, 0x6, 0x7ff, 0x8000, 0x7, 0xa2eb, 0x6, 0x80000001, 0x3f, 0x8000, 0x27403f62, 0x9, 0x8, 0x470, 0xd5f, 0x13, 0x67d, 0x7fffffff, 0x7f, 0xc84, 0x20, 0x20, 0xffffffff, 0xfffffffb, 0x81, 0x401, 0x4, 0x401, 0x1, 0x1, 0x80000000, 0x8, 0x8000, 0xfff, 0x7fff, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x4, 0x8, 0x0, 0x3, 0x0, 0x7f, 0x0, 0x1, 0x2, 0x7, 0x0, 0x5, 0x9, 0x4, 0x5a10d207, 0x7, 0x8001, 0x10000, 0xc68, 0xfffffe00, 0x9, 0xfffffff7, 0x2f, 0xd3d0, 0x6, 0x4cdece59, 0x6, 0x2, 0x6, 0x4, 0x1, 0x9, 0x9, 0x1, 0x6, 0x25, 0x7, 0x1, 0x10000, 0xffff, 0x8001, 0x100, 0x1f, 0x7, 0x0, 0x5, 0x1, 0xffffffff, 0xffff, 0xcf2, 0x8000, 0x8, 0x6, 0x2, 0x7, 0xfffffff7, 0x5, 0x6, 0xca4d, 0x2, 0x4, 0x10001, 0x2, 0xffffffff, 0x3ff, 0x7, 0xd044, 0x4, 0x6c10000, 0xfffffffe, 0x2, 0x1, 0x1000, 0x7c, 0x1ff8, 0xfffffffc, 0x6, 0x7, 0x4, 0x9, 0x81, 0x7, 0xeb17, 0x5d3, 0x9, 0x25e, 0x9, 0x7, 0x8000, 0xb9, 0x6, 0xf45, 0xfff, 0x4, 0x6, 0x0, 0x6, 0x1000, 0xd6ae, 0x8, 0x4, 0x401, 0x3b9fc853, 0x9ea, 0x9, 0x81, 0x0, 0x2, 0xbd4e, 0x3, 0x9, 0xffffffff, 0x8001, 0x9fd, 0x62f, 0x7, 0xffffff7f, 0x200, 0x7, 0x5, 0xfd6, 0x4, 0x80, 0x4, 0x1, 0x401, 0x5, 0x80, 0x38, 0x9, 0xd4, 0x6, 0x3, 0x6, 0x10001, 0x8, 0x8, 0x9, 0x0, 0x7, 0x6, 0x5, 0xfffffffa, 0x5, 0x3f, 0x1, 0x4, 0x8000, 0x9, 0x2e, 0x200, 0x7, 0x81, 0x2, 0xf9, 0x3, 0x3, 0x1, 0x8, 0x5, 0x4, 0x1f, 0xfffffffd, 0x100000, 0x77, 0x10000, 0x9, 0x1, 0x8, 0x3, 0x8, 0x6, 0x401, 0x7, 0x2, 0x0, 0x9, 0x9, 0x937, 0x8000, 0x0, 0xc0, 0x4, 0x2, 0x8001, 0x0, 0x91e, 0x2, 0x5, 0x0, 0xee, 0x8000, 0x7fffffff, 0x8, 0xea3e, 0x4f028000, 0xb0, 0x6, 0x3, 0x200, 0x4, 0x4, 0x0, 0x10001, 0x401, 0x2, 0x4, 0x8, 0x3, 0x0, 0x7, 0x9, 0x7, 0xfc, 0x401, 0x1, 0x81, 0x0, 0x8001, 0x3b4, 0x101, 0x2, 0xfffffffb, 0x5, 0x3, 0x8, 0x800, 0x7, 0x4dff, 0x5, 0x0, 0x7, 0x1280000, 0x7, 0x7, 0x6, 0x9, 0x10000, 0xac32, 0x1, 0x9, 0x1f, 0x1000, 0x93beec6, 0x0, 0x5, 0x5, 0x8, 0x3ce9]}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000020c0)=""/29, &(0x7f0000002100)=0x1d) ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000003200)) r3 = syz_open_dev$hiddev(&(0x7f0000003180), 0xffff, 0x0) ioctl$HIDIOCAPPLICATION(r3, 0x4802, 0x3) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000001040)={{0x3, 0x2, 0x20, 0x6, 0x1000, 0xfffffffb}, 0x196, [0xffff, 0x8, 0xff, 0x10001, 0x2, 0x200, 0x101, 0x762f, 0x6, 0x0, 0xffffff16, 0x1, 0x7fff, 0x5, 0x1be, 0xaad, 0x9, 0x8, 0x0, 0x7, 0xffff, 0x4, 0x400, 0xffff, 0x1, 0x2, 0xe1, 0x9, 0x800, 0x200, 0x4, 0x2, 0x7, 0x81, 0x3, 0x1f, 0xea0, 0x8, 0x4, 0x1, 0x9, 0x7, 0x200, 0x80, 0x3, 0x200, 0x1, 0x0, 0x4a086adf, 0x66, 0x1ff, 0xfff, 0x2, 0x5, 0x9, 0x9, 0xffffffff, 0x1ff, 0x1000, 0xa9, 0x5, 0xffff, 0x40, 0x100, 0x800, 0x80, 0xc5, 0x5, 0x8, 0x6b000000, 0x200, 0x10000, 0x0, 0x9, 0xe66b, 0x7795, 0x103eafa6, 0x9, 0x10001, 0x4, 0x5, 0xf81, 0x40, 0x7, 0x4, 0x4, 0x8, 0x7, 0x7, 0x200, 0xff, 0x5471, 0x6, 0x3, 0x4, 0x1, 0x6, 0xbc16, 0x1ec, 0x20, 0x1, 0xfff, 0x17, 0x1ff, 0x80000001, 0x5, 0xfffffffd, 0x1, 0x80000000, 0x1, 0xa8000000, 0x10001, 0x80, 0x4, 0x4, 0x0, 0x9, 0x98ec, 0x400, 0xae, 0xb2, 0x8, 0xfff, 0x3, 0xb04, 0xf759, 0x0, 0x5, 0x0, 0x400, 0x6, 0x75, 0xfffffffa, 0x7, 0x5, 0x1000, 0x6, 0x3, 0x8, 0x80000000, 0x9, 0x1, 0x6, 0x8, 0x9, 0x5, 0x10f5, 0x5, 0x1, 0x7fff, 0x16000000, 0x1, 0x3, 0x2, 0x444a, 0x7e21f06c, 0x4, 0x0, 0x1f, 0x7fffffff, 0xffffffff, 0x0, 0x5, 0x7, 0x1c10, 0x1, 0x3, 0x3ff, 0x46, 0x401, 0x4, 0x74f302f2, 0x20, 0x2, 0x4, 0x9, 0x3, 0x800, 0xff, 0x30, 0x9, 0x862, 0xff, 0x4, 0x80000001, 0x1, 0x6c54de1b, 0x0, 0x3ff, 0x23cf, 0xfffffffa, 0x400, 0xf2, 0xf7, 0x1, 0x1ff, 0x80, 0x1, 0x6, 0x317, 0x2, 0x8, 0xd878, 0x7168, 0x8a, 0x2, 0x7fffffff, 0x101, 0x1, 0x9, 0x100, 0x6, 0x400, 0x4, 0x2, 0x7, 0x7, 0x400, 0x60, 0x1, 0x4, 0x1, 0x4a5, 0x5, 0x7fe00, 0x2, 0x2, 0x8, 0xdb, 0x1, 0x1, 0x2, 0xdc1f, 0x45a, 0x2, 0xffffffff, 0x8c, 0x20, 0xa3f3, 0x3, 0x9, 0x7f, 0xffff34cd, 0x6, 0x6, 0x3ff, 0xa3, 0x4, 0x200, 0x7778, 0x4, 0x0, 0x9, 0x7, 0x2d, 0x1ff, 0x8001, 0xfffffbfc, 0x72, 0x400, 0x101, 0x6, 0x24, 0x6, 0x7, 0x3, 0x101, 0x6, 0x2, 0x39d, 0x1, 0x20, 0x8, 0x9, 0x3, 0x0, 0x9, 0x748, 0x10000, 0x18000000, 0x8000, 0x9, 0x3f, 0x3, 0x1, 0x4, 0x2, 0x1000, 0x9, 0x8, 0x2543, 0x2, 0x4, 0x4, 0x7, 0x9, 0xfffffffa, 0x8, 0x8001, 0x0, 0x28dc, 0x1, 0x265, 0x1, 0x2, 0x20, 0x601, 0xffff, 0x1c00000, 0xf3, 0x7, 0xfffffffa, 0x5, 0x9, 0x7fff, 0x2, 0x7f, 0x9584, 0xa17, 0x1, 0x2bb, 0x1f, 0x10000, 0x2, 0x8001, 0xbe1a, 0x685, 0x5, 0x10000, 0x9, 0x4, 0x1, 0xfff, 0xffff3a9e, 0x6, 0xe061, 0x10001, 0x2, 0x100, 0x3, 0x401, 0x8, 0x40, 0x7fff, 0x77a40f64, 0x6a8, 0x1, 0x8, 0x9, 0xffff, 0x2, 0x1000, 0x7fff, 0x2, 0x1000, 0x4, 0x7f, 0x9, 0x5, 0x4, 0x6, 0xda0, 0x3ff, 0x6, 0x7, 0x2, 0x9, 0xffffffa8, 0x2, 0xfffffff7, 0x76, 0x3, 0xfffffffc, 0x81, 0x6, 0x5, 0xa3, 0x5, 0x4429, 0xcc, 0x800, 0xbe0, 0x5, 0x7ff, 0xfffffff8, 0x9, 0x9, 0x8bf1, 0x0, 0x81, 0x1, 0x4, 0x7fff, 0x80000000, 0x80000000, 0x1, 0x1, 0x78, 0xeb, 0xfff, 0x43b, 0x3, 0xf954, 0x1, 0x7, 0x10a2, 0xd53d, 0x4, 0x0, 0xa80, 0xff, 0x80000000, 0x3ff, 0x82650a1, 0x2, 0x3b, 0xfffffffa, 0x3, 0x3, 0x9, 0x81, 0x0, 0x80000001, 0x0, 0x3, 0x8, 0x10000, 0xfffffffd, 0x5, 0x1000, 0x6, 0x8001, 0x7d, 0x6, 0x6, 0x2, 0x7, 0x96, 0x1, 0x8001, 0x8001, 0x3, 0x3, 0x1, 0x0, 0x3, 0x8001, 0x4, 0x7, 0x7f, 0x1, 0x5, 0x102e, 0x40000, 0x101, 0x7420ead3, 0x313cf85b, 0x4, 0x8, 0x3, 0x9, 0x9, 0x8, 0xfffffff8, 0x3f, 0x7f, 0x9, 0x4, 0x40, 0xffffffff, 0x81, 0x9, 0xffff9c99, 0x1, 0x8000, 0x6f, 0x0, 0xfffffffa, 0xbb7, 0x7, 0xffffff81, 0x7, 0x4, 0xfffff801, 0xffffffff, 0x6f, 0x24a, 0x3, 0x6, 0x9, 0x9, 0x5, 0xffff, 0x2, 0x9, 0xfffff34d, 0x80, 0x40000, 0x3, 0x3f, 0xfffffff8, 0x5, 0x84fb, 0x8, 0xf72b, 0x9, 0x8001, 0x6, 0xfc, 0x40, 0x4045aff3, 0x0, 0x4, 0x2, 0x40, 0x1, 0xb3ca, 0x1, 0xd1, 0x3f, 0x100, 0x400, 0xffffff25, 0x2, 0x1, 0xce, 0x7fff, 0xf966, 0x7, 0x2, 0x3, 0x5, 0xff, 0x4, 0x2b89, 0xffffffff, 0x2, 0x1000, 0x7, 0x80000000, 0x67, 0x5, 0x7743, 0x3, 0x8d, 0x1ff, 0x25351d80, 0x1, 0xbd6, 0x3, 0xffff, 0x2e9d, 0x846, 0x8000, 0x1, 0x7ff, 0x8, 0x401, 0xa73, 0x7, 0x5, 0x81, 0x6, 0x7, 0x7, 0x231, 0x100, 0x8, 0x7fffffff, 0x80000001, 0x89, 0x5, 0x3ff, 0x7, 0x3, 0x3ff, 0x0, 0xfc56, 0xc7, 0x81, 0x3ff, 0x1, 0x8001, 0x0, 0x7fffffff, 0x5, 0x6, 0x401, 0x6, 0x1, 0x1ff, 0x2, 0x4, 0x183, 0x8, 0x7, 0x5, 0x400, 0x7f, 0x46d, 0x5, 0x5, 0x2, 0x420, 0xffffffff, 0x1, 0x7, 0x1, 0x7, 0x6, 0x10000, 0x0, 0x1, 0x3ff, 0x5cc, 0x40, 0x20, 0x7, 0x4b, 0x3, 0x1000, 0x800, 0xc94, 0x100, 0x5, 0x1, 0xa4, 0x2, 0x1, 0x8, 0x1f, 0x80, 0x7ff, 0x7ff, 0xff, 0x1, 0xfff, 0x5, 0x0, 0x9, 0x4, 0xf1, 0x1, 0x7fffffff, 0xf9fa, 0x7, 0x0, 0x1, 0x3ff, 0x1, 0x1b, 0x80000001, 0x80, 0x48a, 0xfffffffa, 0x6, 0x7, 0x0, 0xb8, 0xfffffffd, 0xffff, 0x1000, 0xfffffff9, 0x1f, 0x0, 0x2, 0x7, 0x7, 0x10000, 0xa5ca, 0x5, 0xff, 0xffffffff, 0x1, 0x7ff, 0x800, 0x800, 0x2, 0x5, 0x9, 0x9, 0x1, 0x2, 0xa39, 0x9, 0x7, 0x3a, 0x800, 0x0, 0x8, 0x4, 0x8, 0x10001, 0x2, 0xad, 0xffffffff, 0xb6, 0x3a0f, 0x3, 0xfff, 0x40, 0x3f, 0x5, 0x401, 0x800, 0x6, 0x9, 0x7f, 0x8, 0x3, 0x4, 0x81, 0x4, 0x5, 0x30, 0x9, 0x3, 0xfffffff9, 0x9, 0x1, 0x0, 0xd1, 0x6, 0x10001, 0x2, 0x50, 0x4, 0x40, 0x7, 0x8, 0x35d1, 0x9, 0x8, 0x7, 0x1ff, 0x10000, 0x2, 0x5, 0x4, 0x101, 0x1ff, 0x8000, 0x1, 0xdad, 0x401, 0x0, 0x1a21, 0x800, 0x3f, 0x69bece3e, 0x4, 0x6, 0x8, 0x4, 0x3, 0x7, 0x16, 0x9432, 0x3, 0x28, 0x200, 0x5, 0x2, 0x7b, 0x675, 0x8, 0x2c5e, 0x6, 0x9, 0xfc, 0x1, 0x6, 0x0, 0x1000, 0xe70, 0x0, 0x7, 0x5, 0x1ff, 0x8, 0x80000000, 0x7ff, 0x7fffffff, 0x7fff, 0xaa4, 0xffffffc1, 0x5, 0x100, 0x6, 0x1, 0x31, 0xff, 0x7, 0x5, 0x6e7a3cb4, 0x7, 0x77, 0x80, 0xffff9cc6, 0x2d75, 0x7f, 0x8001, 0xfffeffff, 0x1, 0x20, 0x4, 0x9, 0x0, 0x1, 0x4, 0x6, 0x3, 0x6, 0xfffffffa, 0x81, 0x1, 0xd067, 0x7ff, 0x185, 0x1, 0x0, 0x100, 0x7, 0x3, 0xc932, 0x5, 0x1000, 0x6, 0x6, 0x5, 0x8000, 0x100, 0x1, 0x4, 0x0, 0x9a6, 0x9, 0x929, 0x84, 0xdcc1, 0x80, 0x7, 0x8000, 0x5, 0x1, 0x8000, 0x1000, 0xb86d, 0x0, 0xeb, 0x7ff, 0x1, 0x3f, 0xfffffffe, 0x818e, 0x400, 0x4f, 0x8, 0xffffffff, 0x2055047e, 0x4, 0x2, 0x5, 0x2, 0x20, 0x7fff, 0x7, 0x800, 0x5, 0x10001, 0x80000000, 0xa0000000, 0x81, 0x5, 0xead, 0x2, 0x72b, 0x8000, 0x7, 0x5bb, 0x9, 0x2, 0x5adc, 0x3, 0xfffffff9, 0x401, 0x100, 0x4, 0x7fffffff, 0xfbcd, 0x1, 0x9, 0x2, 0x40, 0x80000000, 0x4, 0x100, 0x7ff, 0x2, 0x8, 0x2, 0xffff97c6, 0x9, 0x101, 0xc4c, 0xffff, 0x3, 0x3, 0x4, 0x2, 0x8001, 0x0, 0x5, 0x3ff, 0x4, 0x7, 0x91, 0xd07d, 0x7fffffff, 0x8, 0x5, 0x4, 0x9, 0x67, 0x5, 0x8, 0xfffffffc, 0x8, 0x9, 0x9053, 0xc1, 0x755b9522, 0xb3a, 0x32, 0x6, 0x6, 0x7, 0xf5, 0x1, 0x1, 0x4, 0x0, 0x80000001, 0x6, 0x7fffffff, 0xfec, 0x4, 0x200, 0x8000000, 0xaa, 0xdb0f, 0x9, 0x1000, 0x4, 0x5, 0x2, 0x20, 0x7fff, 0x6, 0x9, 0xfff, 0x493, 0x101, 0x1f, 0x3f, 0xab0b, 0x10000, 0x3, 0x2b, 0xfff, 0x9, 0x1, 0x9, 0x40, 0x81, 0x7fff, 0x6, 0x80, 0x9, 0x10001, 0x8c800000, 0x3, 0x8, 0x0, 0x6, 0x0, 0x1, 0x6, 0x842e, 0x6, 0xf1ae, 0x1000, 0x0, 0x10000, 0x8000, 0x9, 0x5, 0x9, 0x2, 0x2, 0x7, 0xffffffff, 0x2, 0x400, 0x7fff, 0x3f36, 0x0, 0x3, 0x800, 0x1, 0x7, 0xfffffff9, 0x2, 0x10000, 0x2, 0xfffffff7, 0xffffff44, 0xed9b, 0x400, 0xffff, 0x6, 0x6, 0x2, 0x1]}) connect$bt_sco(0xffffffffffffffff, 0x0, 0xfffffd74) 04:48:49 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:49 executing program 1: socket(0x10, 0x2, 0x7) (async) socket(0x10, 0x2, 0x7) socket(0xf, 0x2, 0x10000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 04:48:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="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", &(0x7f00000001c0)=@tcp6=r2}, 0x20) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x2, 0xffffffff, 0x9056, 0x10000, 0xd6, 0x3}) socket(0x10, 0x2, 0x7) [ 1158.279900][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:48:49 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000140)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:49 executing program 4: socket(0x14, 0x0, 0x0) 04:48:49 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd07, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60008080}, 0x0) 04:48:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="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", &(0x7f00000001c0)=@tcp6=r2}, 0x20) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x2, 0xffffffff, 0x9056, 0x10000, 0xd6, 0x3}) socket(0x10, 0x2, 0x7) 04:48:49 executing program 1: socket(0x10, 0x2, 0x7) socket(0xf, 0x2, 0x10000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 04:48:49 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0x1, 0x6}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:49 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd07, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60008080}, 0x0) 04:48:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="376d7bf0c813a944ce1343e4d573549ca727d6249747fe18617341db2bf0482bf49f01980d53a2744922b81d67907feb167efbef424b3e8f0abc2d7f60650c081acf5173f1580788479f164bf395d67e465dc54dfc6be31528008449e098fed30aa16a07358a024013859494a82983aba5b6d438ac362f7161babb2cfa25174d4c454ccf420419cacf9d2008c139fe3289b80da64f8cb7acec48d876b548aac6b92e860ae06864a15c3e6f0490ad8b66aabbcfa48239c29c0a338b89ec7867f9ac442f34111650ff6edfeab31428d05e026aaf86066bf007352bc55b2ba4b2d358c921960fdf8c957008b3aca713be9db44fd2d9b8bc47994e6a1281a1", &(0x7f00000001c0)=@tcp6=r2}, 0x20) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, &(0x7f0000000000)={0x2, 0xffffffff, 0x9056, 0x10000, 0xd6, 0x3}) 04:48:49 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:49 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="376d7bf0c813a944ce1343e4d573549ca727d6249747fe18617341db2bf0482bf49f01980d53a2744922b81d67907feb167efbef424b3e8f0abc2d7f60650c081acf5173f1580788479f164bf395d67e465dc54dfc6be31528008449e098fed30aa16a07358a024013859494a82983aba5b6d438ac362f7161babb2cfa25174d4c454ccf420419cacf9d2008c139fe3289b80da64f8cb7acec48d876b548aac6b92e860ae06864a15c3e6f0490ad8b66aabbcfa48239c29c0a338b89ec7867f9ac442f34111650ff6edfeab31428d05e026aaf86066bf007352bc55b2ba4b2d358c921960fdf8c957008b3aca713be9db44fd2d9b8bc47994e6a1281a1", &(0x7f00000001c0)=@tcp6=r2}, 0x20) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) 04:48:49 executing program 1: socket(0x10, 0x800, 0x7) 04:48:49 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r2, 0x4, 0x70bd07, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x60008080}, 0x0) 04:48:49 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:49 executing program 3: r0 = socket(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) 04:48:49 executing program 1: socket(0x10, 0x800, 0x7) 04:48:49 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f00000000c0)="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", &(0x7f00000001c0)=@tcp6=r2}, 0x20) 04:48:50 executing program 3: r0 = socket(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:50 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:50 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) r1 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:50 executing program 1: socket(0x10, 0x800, 0x7) 04:48:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) 04:48:50 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7, 0x1, 0x6}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) connect$bt_sco(r2, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 32) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:50 executing program 1: socket(0x10, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x29, 0x4, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) 04:48:50 executing program 3: r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x5, 0x4, 0x8}) 04:48:50 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:50 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)={0x9e, "198122069b7ec0bd253dc79c439c92d69a871def7c10ef3937fff7a8dffd210599f493923dcdcb96fb1e4850babea7ba9da72f91ce8b4c5f3f202762d786e34162befe15e6d3b6f82b172bfb945215ba1e6ac62f528452e8f8f293156ee09df0ff710888719e98a573713b324f500f15b05e57885d1a4500ecbbdb15851b3e3cb8ad7e986e4ec4c9364740faaf7221cb088f6f0572ba924d7a3acde633fc"}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x3, 0x1, 0x4, 0x8000, 0x8, 0x81}) connect$bt_sco(r0, &(0x7f0000000080), 0x8) 04:48:50 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:50 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:50 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 04:48:50 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:48:50 executing program 5: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) r1 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:50 executing program 1: socket(0x10, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x29, 0x4, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) socket(0x10, 0x2, 0x7) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket(0x29, 0x4, 0x7) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) (async) 04:48:50 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 04:48:50 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:50 executing program 5: socket(0x1f, 0x3, 0x4) r0 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:50 executing program 3: r0 = socket(0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) [ 1160.359946][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)={0x9e, "198122069b7ec0bd253dc79c439c92d69a871def7c10ef3937fff7a8dffd210599f493923dcdcb96fb1e4850babea7ba9da72f91ce8b4c5f3f202762d786e34162befe15e6d3b6f82b172bfb945215ba1e6ac62f528452e8f8f293156ee09df0ff710888719e98a573713b324f500f15b05e57885d1a4500ecbbdb15851b3e3cb8ad7e986e4ec4c9364740faaf7221cb088f6f0572ba924d7a3acde633fc"}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x3, 0x1, 0x4, 0x8000, 0x8, 0x81}) connect$bt_sco(r0, &(0x7f0000000080), 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)={0x9e, "198122069b7ec0bd253dc79c439c92d69a871def7c10ef3937fff7a8dffd210599f493923dcdcb96fb1e4850babea7ba9da72f91ce8b4c5f3f202762d786e34162befe15e6d3b6f82b172bfb945215ba1e6ac62f528452e8f8f293156ee09df0ff710888719e98a573713b324f500f15b05e57885d1a4500ecbbdb15851b3e3cb8ad7e986e4ec4c9364740faaf7221cb088f6f0572ba924d7a3acde633fc"}) (async) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x3, 0x1, 0x4, 0x8000, 0x8, 0x81}) (async) connect$bt_sco(r0, &(0x7f0000000080), 0x8) (async) 04:48:51 executing program 1: socket(0x10, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, r0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x29, 0x4, 0x7) (async) socket(0x29, 0x4, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) (async) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) 04:48:51 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) 04:48:51 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:51 executing program 5: r0 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:51 executing program 3: r0 = socket(0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7ff, 0x8, 0x7fff, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:51 executing program 5: r0 = socket(0x0, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:51 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) 04:48:51 executing program 3: r0 = socket(0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:51 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:48:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f00000000c0)={0x9e, "198122069b7ec0bd253dc79c439c92d69a871def7c10ef3937fff7a8dffd210599f493923dcdcb96fb1e4850babea7ba9da72f91ce8b4c5f3f202762d786e34162befe15e6d3b6f82b172bfb945215ba1e6ac62f528452e8f8f293156ee09df0ff710888719e98a573713b324f500f15b05e57885d1a4500ecbbdb15851b3e3cb8ad7e986e4ec4c9364740faaf7221cb088f6f0572ba924d7a3acde633fc"}) (async, rerun: 32) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000180)={0x3, 0x1, 0x4, 0x8000, 0x8, 0x81}) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000080), 0x8) 04:48:51 executing program 5: r0 = socket(0x0, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:51 executing program 1: socket(0x10, 0x2, 0x7) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x8000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x70bd2d, 0x80000001, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x480000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xff, 0x89, 0x401]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 04:48:51 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:48:51 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 04:48:51 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) 04:48:51 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:48:51 executing program 3: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:51 executing program 5: r0 = socket(0x0, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:51 executing program 1: socket(0x10, 0x2, 0x7) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x8000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x70bd2d, 0x80000001, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x480000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xff, 0x89, 0x401]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 04:48:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x7ff, 0x8, 0x7fff, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:51 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 04:48:52 executing program 1: socket(0x10, 0x2, 0x7) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0x8000) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x4c, 0x0, 0x1, 0x70bd2d, 0x80000001, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x480000}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xff, 0x89, 0x401]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) 04:48:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9e933625ea9d77b5, 0x2, 0x6d641a4048749dbb, 0xfffffffffffffffc, 0x4}, @exit, @generic={0x1, 0xe, 0xe, 0xcd0, 0x657}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x4, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x4, 0x5, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x4, 0x3}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x3}, 0x90) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4e0400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RWRITE(r4, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x6}, 0xb) 04:48:52 executing program 3: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:52 executing program 5: r0 = socket(0x11, 0x0, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:52 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) 04:48:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x7ff, 0x8, 0x7fff, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:52 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 04:48:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x7ff, 0x8, 0x7fff, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:52 executing program 5: r0 = socket(0x11, 0x0, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:52 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x8, 0x7fff, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:52 executing program 1: socket(0x10, 0x2, 0x7) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x81}) 04:48:52 executing program 5: r0 = socket(0x11, 0x0, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9e933625ea9d77b5, 0x2, 0x6d641a4048749dbb, 0xfffffffffffffffc, 0x4}, @exit, @generic={0x1, 0xe, 0xe, 0xcd0, 0x657}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x4, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x4, 0x5, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x4, 0x3}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x3}, 0x90) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4e0400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RWRITE(r4, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x6}, 0xb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9e933625ea9d77b5, 0x2, 0x6d641a4048749dbb, 0xfffffffffffffffc, 0x4}, @exit, @generic={0x1, 0xe, 0xe, 0xcd0, 0x657}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x4, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x4, 0x5, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x4, 0x3}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x3}, 0x90) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4e0400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) (async) write$P9_RWRITE(r4, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x6}, 0xb) (async) 04:48:53 executing program 3: r0 = socket(0x2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:53 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:53 executing program 1: socket(0x10, 0x2, 0x7) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x81}) 04:48:53 executing program 5: socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:53 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:53 executing program 1: socket(0x10, 0x2, 0x7) (async) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000000)={0x0, 0x81}) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x812, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) [ 1162.440137][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9e933625ea9d77b5, 0x2, 0x6d641a4048749dbb, 0xfffffffffffffffc, 0x4}, @exit, @generic={0x1, 0xe, 0xe, 0xcd0, 0x657}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x4, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x4, 0x5, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x4, 0x3}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x3}, 0x90) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4e0400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) write$P9_RWRITE(r4, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x6}, 0xb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9e933625ea9d77b5, 0x2, 0x6d641a4048749dbb, 0xfffffffffffffffc, 0x4}, @exit, @generic={0x1, 0xe, 0xe, 0xcd0, 0x657}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7fffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x7, 0x0, 0x1, 0x4, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x4, 0x5, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x5, 0x5, 0x4, 0x3}, {0x5, 0x4, 0xe, 0x2}], 0x10, 0x3}, 0x90) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4e0400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80000}) (async) write$P9_RWRITE(r4, &(0x7f00000000c0)={0xb, 0x77, 0x2, 0x6}, 0xb) (async) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:53 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:53 executing program 3: r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) 04:48:53 executing program 5: socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:53 executing program 1: write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x9}, 0xb) socket(0x10, 0x2, 0x4) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:53 executing program 4: gettid() r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:53 executing program 5: socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:53 executing program 1: write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x9}, 0xb) (async, rerun: 32) socket(0x10, 0x2, 0x4) (rerun: 32) 04:48:53 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:53 executing program 3: r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) 04:48:53 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:53 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x812, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:53 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:53 executing program 3: r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, r0) 04:48:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x812, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 04:48:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (rerun: 64) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:54 executing program 1: write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x9}, 0xb) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) 04:48:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:54 executing program 4: r0 = syz_open_dev$ndb(0x0, 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:54 executing program 3: socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x812}, 0x48) 04:48:54 executing program 2: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:54 executing program 1: r0 = socket(0xa, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8240, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x41) 04:48:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:54 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:54 executing program 3: socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:54 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:48:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:55 executing program 3: socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) 04:48:55 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:55 executing program 1: r0 = socket(0xa, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) (async, rerun: 32) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8240, 0x0) (async, rerun: 32) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x41) 04:48:55 executing program 3: r0 = socket(0xa, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8240, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x41) 04:48:55 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:48:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:55 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:55 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e8800, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/41, 0x29) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:55 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket(0x11, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x5, 0xe, 0x8, 0x4}, 0x14) 04:48:55 executing program 1: r0 = socket(0xa, 0x2, 0x7) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) (async, rerun: 64) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x8240, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r2) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) (async) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x41) [ 1164.519866][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:48:55 executing program 4: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x40000000001) 04:48:55 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:48:55 executing program 1: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) pidfd_open(0x0, 0x0) socket(0x9, 0xa, 0xf3) [ 1164.623179][T24232] dlm: non-version read from control device 41 04:48:55 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:48:55 executing program 4: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:48:55 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:55 executing program 1: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) pidfd_open(0x0, 0x0) (async) socket(0x9, 0xa, 0xf3) 04:48:55 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) socket(0x11, 0x2, 0x6) 04:48:55 executing program 1: ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) (async) pidfd_open(0x0, 0x0) (async) socket(0x9, 0xa, 0xf3) 04:48:56 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x2, @fixed}, 0x8) 04:48:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x700) epoll_create(0x1) 04:48:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r2, r0, 0x1, 0x31, &(0x7f0000000100)="04000000401a405d7b48073e11e0fc2e5371f7db9294fdb5abe402163182d117c27a7f452500"/49, 0x38, 0x1, 0x0, 0x7, 0x9, 0x0, 0x79, 'syz1\x00'}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000300)={0x1, 0x3, 0x80, 0x5, 0x7b7}) connect$bt_sco(r0, 0x0, 0x700) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) read$hiddev(r4, &(0x7f0000000200)=""/232, 0xe8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000340)={0x3, 0x200, 0x6, 0x153d, 0x7ff, 0x4}) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x1000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="300002806cb77800", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf25010000fc4b9d5baa964a5cbf6701c4f13bd561f4f576ebb93fb438290000001400146200"], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x42) 04:48:56 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x144c4, 0x0) socket(0x11, 0x2, 0x6) 04:48:56 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e8800, 0x0) read$hiddev(r0, &(0x7f0000000080)=""/41, 0x29) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e8800, 0x0) (async) read$hiddev(r0, &(0x7f0000000080)=""/41, 0x29) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:48:56 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x5) socket(0x11, 0x2, 0x6) 04:48:56 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x2, @fixed}, 0x8) [ 1165.468744][T24264] dlm: non-version read from control device 41 04:48:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r2, r0, 0x1, 0x31, &(0x7f0000000100)="04000000401a405d7b48073e11e0fc2e5371f7db9294fdb5abe402163182d117c27a7f452500"/49, 0x38, 0x1, 0x0, 0x7, 0x9, 0x0, 0x79, 'syz1\x00'}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000300)={0x1, 0x3, 0x80, 0x5, 0x7b7}) connect$bt_sco(r0, 0x0, 0x700) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) read$hiddev(r4, &(0x7f0000000200)=""/232, 0xe8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000340)={0x3, 0x200, 0x6, 0x153d, 0x7ff, 0x4}) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x1000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="300002806cb77800", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf25010000fc4b9d5baa964a5cbf6701c4f13bd561f4f576ebb93fb438290000001400146200"], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x42) 04:48:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:56 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x11, 0x2, 0x6) 04:48:56 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000003c0)={r2, r0, 0x1, 0x31, &(0x7f0000000100)="04000000401a405d7b48073e11e0fc2e5371f7db9294fdb5abe402163182d117c27a7f452500"/49, 0x38, 0x1, 0x0, 0x7, 0x9, 0x0, 0x79, 'syz1\x00'}) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000300)={0x1, 0x3, 0x80, 0x5, 0x7b7}) connect$bt_sco(r0, 0x0, 0x700) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x10}, 0x4844) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) read$hiddev(r4, &(0x7f0000000200)=""/232, 0xe8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000340)={0x3, 0x200, 0x6, 0x153d, 0x7ff, 0x4}) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x1000) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="300002806cb77800", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fddbdf25010000fc4b9d5baa964a5cbf6701c4f13bd561f4f576ebb93fb438290000001400146200"], 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x42) [ 1165.512327][T24267] dlm: non-version read from control device 232 04:48:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 04:48:56 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2c00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4e8800, 0x0) (async) read$hiddev(r0, &(0x7f0000000080)=""/41, 0x29) (async, rerun: 64) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:48:56 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 1165.563929][T24276] dlm: non-version read from control device 41 04:48:56 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) 04:48:56 executing program 2: r0 = socket(0x1f, 0x3, 0x4) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/109, &(0x7f0000000100)=0x6d) socket(0x11, 0x2, 0x6) [ 1165.605009][T24277] dlm: non-version read from control device 232 04:48:56 executing program 1: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:48:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) [ 1165.662437][T24289] dlm: non-version read from control device 41 [ 1165.688922][T24289] dlm: non-version read from control device 41 04:48:56 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) 04:48:56 executing program 2: socket(0x1f, 0x3, 0x4) socket(0x11, 0x2, 0x6) [ 1165.709450][T24286] dlm: non-version read from control device 232 04:48:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 04:48:56 executing program 4: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) write$P9_RWALK(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8049d39d3bb53802bb7f295a77483fcfd80a8d91c7f4bd519a22333ab7c7379efde905691c9aa7d00488f3269cd280ecedcacab0a787bcdf6aec5268ecd23c3354ad1a208e626a482d4f4663c490719c93fd559f8029b451db30234c25f96532014a95c058b4a942a01c31e173cf3709473c67729ae2dd9f"], 0x11) 04:48:56 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 04:48:56 executing program 1: socket(0x2, 0x2, 0x4) 04:48:56 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000002c0)={0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000145f6e18", @ANYRESHEX=r0, @ANYBLOB="00002abd7000fbdbdf25040000000500060019000000080002000000000005000600b400000005000600010000000f7e399ad7bb81c61a0ba3741f320e0ec5ae7bbf588c564cc8a2c4bdf29e1c711c4fa7fd9891e7ef039e3486789781a5c0d26c588ffaa83af39c51c0335cd802dcb322e3d8ec5c917f9adab7a9a4dbe6fc33c1e8cb3d4360e102e93fb19f30e8f0d1d5675ddcfb2cfa7e4dbe69d370c53086a7d878325183cdbba9b51bff414ad4ae3bca9bc44c88ecc0576b74cfcd094ff6a0bc0af4477eb1374d8c6b55d6af5594c7f7c5476d115c31f4470ec11f1e62e3cd3c594c30c27e2a29c9d173"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, r2, 0x0, 0x0, 0x4, 0x794, 0x4, 0x3, 0x5, 0x8, 0x8000, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) connect$bt_sco(r3, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3}], 0x66, 0x0, &(0x7f00000001c0)="4da2a6f45bb3f626699972b7af3ac4eb5a536ffacf3fb23b5d438a5fdd61bc6155d4bde71f130de60dfb804ce8b3da1f395f6a71ab624a6aebc9ad486b594cdd9472c6e4a3d1567fff6f3804b5c91c5c75627dc87848e9468dfdefb515bbcf2b877b4ffa0c07"}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) bind$bt_sco(r5, &(0x7f0000000380), 0x8) 04:48:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:57 executing program 2: socket(0x11, 0x2, 0x6) 04:48:57 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) 04:48:57 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x8, 0x4, 0x3}}, 0x14) connect$bt_sco(r0, 0x0, 0x700) 04:48:57 executing program 5: socket(0x11, 0x2, 0x7) 04:48:57 executing program 2: socket(0x0, 0x2, 0x6) 04:48:57 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 04:48:57 executing program 5: socket(0x11, 0x2, 0x7) 04:48:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) (fail_nth: 1) 04:48:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (fail_nth: 1) [ 1166.017098][T24337] FAULT_INJECTION: forcing a failure. [ 1166.017098][T24337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.039417][T24340] FAULT_INJECTION: forcing a failure. [ 1166.039417][T24340] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.043067][T24337] CPU: 1 PID: 24337 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1166.062211][T24337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1166.072441][T24337] Call Trace: [ 1166.075756][T24337] [ 1166.078776][T24337] dump_stack_lvl+0x125/0x1b0 [ 1166.083485][T24337] should_fail_ex+0x496/0x5b0 [ 1166.088173][T24337] _copy_from_user+0x30/0xf0 [ 1166.092773][T24337] __sys_bpf+0x210/0x4e90 [ 1166.097109][T24337] ? ksys_write+0x214/0x250 [ 1166.101616][T24337] ? bpf_perf_link_attach+0x540/0x540 [ 1166.106996][T24337] ? preempt_count_add+0x72/0x140 [ 1166.112028][T24337] ? vfs_write+0x14c/0xe40 [ 1166.116451][T24337] ? __mutex_unlock_slowpath+0x165/0x640 [ 1166.122088][T24337] ? bit_wait_timeout+0x160/0x160 [ 1166.127119][T24337] ? fput+0x30/0x1a0 [ 1166.131014][T24337] ? ksys_write+0x1a7/0x250 [ 1166.135511][T24337] ? __ia32_sys_read+0xb0/0xb0 [ 1166.140274][T24337] __x64_sys_bpf+0x78/0xc0 [ 1166.144688][T24337] ? syscall_enter_from_user_mode+0x26/0x80 [ 1166.150798][T24337] do_syscall_64+0x38/0xb0 [ 1166.155318][T24337] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1166.161310][T24337] RIP: 0033:0x7f82b3e7cae9 [ 1166.165716][T24337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1166.185441][T24337] RSP: 002b:00007f82b4c420c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1166.193936][T24337] RAX: ffffffffffffffda RBX: 00007f82b3f9bf80 RCX: 00007f82b3e7cae9 [ 1166.201925][T24337] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 0000000000000000 [ 1166.209897][T24337] RBP: 00007f82b4c42120 R08: 0000000000000000 R09: 0000000000000000 04:48:57 executing program 2: socket(0x0, 0x2, 0x6) [ 1166.217861][T24337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.225823][T24337] R13: 000000000000000b R14: 00007f82b3f9bf80 R15: 00007ffeb137c0f8 [ 1166.234249][T24337] [ 1166.237269][T24340] CPU: 0 PID: 24340 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1166.247438][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1166.257582][T24340] Call Trace: [ 1166.260854][T24340] [ 1166.263777][T24340] dump_stack_lvl+0x125/0x1b0 [ 1166.268463][T24340] should_fail_ex+0x496/0x5b0 [ 1166.273159][T24340] should_failslab+0x9/0x20 [ 1166.277658][T24340] __kmem_cache_alloc_node+0x2fd/0x350 [ 1166.283199][T24340] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1166.289346][T24340] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1166.295062][T24340] __kmalloc+0x4f/0x100 [ 1166.299224][T24340] tomoyo_realpath_from_path+0xb9/0x710 [ 1166.304758][T24340] ? lock_release+0x4bf/0x680 [ 1166.309518][T24340] ? tomoyo_profile+0x47/0x60 [ 1166.314191][T24340] tomoyo_path_number_perm+0x243/0x590 [ 1166.319636][T24340] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1166.325259][T24340] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1166.331063][T24340] ? lock_release+0x4bf/0x680 [ 1166.335740][T24340] ? reacquire_held_locks+0x4b0/0x4b0 [ 1166.341104][T24340] ? bit_wait_timeout+0x160/0x160 [ 1166.346152][T24340] ? __fget_files+0x279/0x410 [ 1166.350909][T24340] ? __fget_files+0x279/0x410 [ 1166.355574][T24340] security_file_ioctl+0x72/0xb0 [ 1166.360511][T24340] __x64_sys_ioctl+0xbb/0x210 [ 1166.365211][T24340] do_syscall_64+0x38/0xb0 [ 1166.369628][T24340] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1166.375624][T24340] RIP: 0033:0x7f9ab267cae9 [ 1166.380032][T24340] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1166.399809][T24340] RSP: 002b:00007f9ab34140c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.408209][T24340] RAX: ffffffffffffffda RBX: 00007f9ab279bf80 RCX: 00007f9ab267cae9 [ 1166.416258][T24340] RDX: 0000000000000000 RSI: 000000000000ab07 RDI: 0000000000000003 [ 1166.424314][T24340] RBP: 00007f9ab3414120 R08: 0000000000000000 R09: 0000000000000000 [ 1166.432301][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.440264][T24340] R13: 000000000000000b R14: 00007f9ab279bf80 R15: 00007ffeb962c4e8 [ 1166.448227][T24340] [ 1166.466042][T24340] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1166.599997][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:48:57 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) pipe2$9p(&(0x7f0000000200), 0x4000) 04:48:57 executing program 5: socket(0x11, 0x2, 0x7) 04:48:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) (fail_nth: 2) 04:48:57 executing program 2: socket(0x0, 0x2, 0x6) 04:48:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (fail_nth: 2) 04:48:57 executing program 5: socket(0x0, 0x2, 0x7) 04:48:57 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000002c0)={0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000145f6e18", @ANYRESHEX=r0, @ANYBLOB="00002abd7000fbdbdf25040000000500060019000000080002000000000005000600b400000005000600010000000f7e399ad7bb81c61a0ba3741f320e0ec5ae7bbf588c564cc8a2c4bdf29e1c711c4fa7fd9891e7ef039e3486789781a5c0d26c588ffaa83af39c51c0335cd802dcb322e3d8ec5c917f9adab7a9a4dbe6fc33c1e8cb3d4360e102e93fb19f30e8f0d1d5675ddcfb2cfa7e4dbe69d370c53086a7d878325183cdbba9b51bff414ad4ae3bca9bc44c88ecc0576b74cfcd094ff6a0bc0af4477eb1374d8c6b55d6af5594c7f7c5476d115c31f4470ec11f1e62e3cd3c594c30c27e2a29c9d173"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, r2, 0x0, 0x0, 0x4, 0x794, 0x4, 0x3, 0x5, 0x8, 0x8000, 0x7}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) connect$bt_sco(r3, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3}], 0x66, 0x0, &(0x7f00000001c0)="4da2a6f45bb3f626699972b7af3ac4eb5a536ffacf3fb23b5d438a5fdd61bc6155d4bde71f130de60dfb804ce8b3da1f395f6a71ab624a6aebc9ad486b594cdd9472c6e4a3d1567fff6f3804b5c91c5c75627dc87848e9468dfdefb515bbcf2b877b4ffa0c07"}) (async) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) bind$bt_sco(r5, &(0x7f0000000380), 0x8) [ 1166.698018][T24349] FAULT_INJECTION: forcing a failure. [ 1166.698018][T24349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.716560][T24353] FAULT_INJECTION: forcing a failure. [ 1166.716560][T24353] name failslab, interval 1, probability 0, space 0, times 0 04:48:57 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) [ 1166.752640][T24349] CPU: 0 PID: 24349 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1166.762769][T24349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1166.772830][T24349] Call Trace: [ 1166.776193][T24349] [ 1166.779205][T24349] dump_stack_lvl+0x125/0x1b0 [ 1166.783974][T24349] should_fail_ex+0x496/0x5b0 [ 1166.788744][T24349] _copy_to_user+0x30/0xb0 [ 1166.793172][T24349] simple_read_from_buffer+0xd0/0x150 [ 1166.798735][T24349] proc_fail_nth_read+0x1b0/0x290 [ 1166.803879][T24349] ? proc_sessionid_read+0x290/0x290 [ 1166.809260][T24349] ? security_file_permission+0xdc/0x100 [ 1166.814911][T24349] ? proc_sessionid_read+0x290/0x290 [ 1166.820215][T24349] vfs_read+0x1ce/0x930 [ 1166.824393][T24349] ? kernel_read+0x1b0/0x1b0 [ 1166.829008][T24349] ? __fget_files+0x279/0x410 [ 1166.833694][T24349] ksys_read+0x12f/0x250 [ 1166.837940][T24349] ? vfs_write+0xe40/0xe40 [ 1166.842362][T24349] ? rcu_is_watching+0x12/0xb0 [ 1166.847153][T24349] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 1166.853131][T24349] do_syscall_64+0x38/0xb0 [ 1166.857542][T24349] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1166.863430][T24349] RIP: 0033:0x7f82b3e7b78c [ 1166.867873][T24349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1166.887483][T24349] RSP: 002b:00007f82b4c420c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1166.896154][T24349] RAX: ffffffffffffffda RBX: 00007f82b3f9bf80 RCX: 00007f82b3e7b78c [ 1166.904210][T24349] RDX: 000000000000000f RSI: 00007f82b4c42130 RDI: 0000000000000003 [ 1166.912177][T24349] RBP: 00007f82b4c42120 R08: 0000000000000000 R09: 0000000000000000 [ 1166.920144][T24349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.928285][T24349] R13: 000000000000000b R14: 00007f82b3f9bf80 R15: 00007ffeb137c0f8 [ 1166.936353][T24349] [ 1166.947979][T24353] CPU: 0 PID: 24353 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1166.958131][T24353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1166.968365][T24353] Call Trace: [ 1166.971637][T24353] [ 1166.974557][T24353] dump_stack_lvl+0x125/0x1b0 [ 1166.979231][T24353] should_fail_ex+0x496/0x5b0 [ 1166.983912][T24353] should_failslab+0x9/0x20 [ 1166.988416][T24353] __kmem_cache_alloc_node+0x2fd/0x350 [ 1166.993875][T24353] ? tomoyo_encode2+0x100/0x3d0 [ 1166.998716][T24353] ? tomoyo_encode2+0x100/0x3d0 [ 1167.003560][T24353] __kmalloc+0x4f/0x100 [ 1167.007715][T24353] tomoyo_encode2+0x100/0x3d0 [ 1167.012388][T24353] ? rcu_is_watching+0x12/0xb0 [ 1167.017144][T24353] tomoyo_encode+0x29/0x50 [ 1167.021557][T24353] tomoyo_realpath_from_path+0x196/0x710 [ 1167.027216][T24353] tomoyo_path_number_perm+0x243/0x590 [ 1167.032674][T24353] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1167.038300][T24353] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1167.044110][T24353] ? lock_release+0x4bf/0x680 [ 1167.048789][T24353] ? reacquire_held_locks+0x4b0/0x4b0 [ 1167.054202][T24353] ? bit_wait_timeout+0x160/0x160 [ 1167.059222][T24353] ? __fget_files+0x279/0x410 [ 1167.063892][T24353] ? __fget_files+0x279/0x410 [ 1167.068557][T24353] security_file_ioctl+0x72/0xb0 [ 1167.073498][T24353] __x64_sys_ioctl+0xbb/0x210 [ 1167.078176][T24353] do_syscall_64+0x38/0xb0 [ 1167.082582][T24353] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1167.088496][T24353] RIP: 0033:0x7f9ab267cae9 [ 1167.092902][T24353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1167.112529][T24353] RSP: 002b:00007f9ab34140c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1167.120939][T24353] RAX: ffffffffffffffda RBX: 00007f9ab279bf80 RCX: 00007f9ab267cae9 [ 1167.128988][T24353] RDX: 0000000000000000 RSI: 000000000000ab07 RDI: 0000000000000003 [ 1167.136968][T24353] RBP: 00007f9ab3414120 R08: 0000000000000000 R09: 0000000000000000 [ 1167.144966][T24353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 04:48:58 executing program 2: socket(0x11, 0x0, 0x6) 04:48:58 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000002c0)={0x1, 0x4}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="34000000145f6e18", @ANYRESHEX=r0, @ANYBLOB="00002abd7000fbdbdf25040000000500060019000000080002000000000005000600b400000005000600010000000f7e399ad7bb81c61a0ba3741f320e0ec5ae7bbf588c564cc8a2c4bdf29e1c711c4fa7fd9891e7ef039e3486789781a5c0d26c588ffaa83af39c51c0335cd802dcb322e3d8ec5c917f9adab7a9a4dbe6fc33c1e8cb3d4360e102e93fb19f30e8f0d1d5675ddcfb2cfa7e4dbe69d370c53086a7d878325183cdbba9b51bff414ad4ae3bca9bc44c88ecc0576b74cfcd094ff6a0bc0af4477eb1374d8c6b55d6af5594c7f7c5476d115c31f4470ec11f1e62e3cd3c594c30c27e2a29c9d173"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, r2, 0x0, 0x0, 0x4, 0x794, 0x4, 0x3, 0x5, 0x8, 0x8000, 0x7}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) connect$bt_sco(r3, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r3, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x3}], 0x66, 0x0, &(0x7f00000001c0)="4da2a6f45bb3f626699972b7af3ac4eb5a536ffacf3fb23b5d438a5fdd61bc6155d4bde71f130de60dfb804ce8b3da1f395f6a71ab624a6aebc9ad486b594cdd9472c6e4a3d1567fff6f3804b5c91c5c75627dc87848e9468dfdefb515bbcf2b877b4ffa0c07"}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) bind$bt_sco(r5, &(0x7f0000000380), 0x8) (async) bind$bt_sco(r5, &(0x7f0000000380), 0x8) 04:48:58 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x40000000001) 04:48:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1167.152978][T24353] R13: 000000000000000b R14: 00007f9ab279bf80 R15: 00007ffeb962c4e8 [ 1167.161119][T24353] 04:48:58 executing program 3: gettid() syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:48:58 executing program 5: socket(0x0, 0x2, 0x7) 04:48:58 executing program 2: socket(0x11, 0x0, 0x6) 04:48:58 executing program 3: gettid() syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) [ 1167.248470][T24353] ERROR: Out of memory at tomoyo_realpath_from_path. 04:48:58 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (fail_nth: 3) 04:48:58 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:58 executing program 2: socket(0x11, 0x0, 0x6) 04:48:58 executing program 3: gettid() syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:48:58 executing program 5: socket(0x0, 0x2, 0x7) [ 1167.354685][T24389] FAULT_INJECTION: forcing a failure. [ 1167.354685][T24389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.382922][T24389] CPU: 0 PID: 24389 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1167.393053][T24389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1167.403127][T24389] Call Trace: [ 1167.406411][T24389] [ 1167.409341][T24389] dump_stack_lvl+0x125/0x1b0 [ 1167.414032][T24389] should_fail_ex+0x496/0x5b0 [ 1167.418715][T24389] _copy_to_user+0x30/0xb0 [ 1167.423121][T24389] simple_read_from_buffer+0xd0/0x150 [ 1167.428482][T24389] proc_fail_nth_read+0x1b0/0x290 [ 1167.433500][T24389] ? proc_sessionid_read+0x290/0x290 [ 1167.438778][T24389] ? security_file_permission+0xdc/0x100 [ 1167.444401][T24389] ? proc_sessionid_read+0x290/0x290 [ 1167.449674][T24389] vfs_read+0x1ce/0x930 [ 1167.453825][T24389] ? kernel_read+0x1b0/0x1b0 [ 1167.458399][T24389] ? __fget_files+0x279/0x410 [ 1167.463145][T24389] ksys_read+0x12f/0x250 [ 1167.467372][T24389] ? vfs_write+0xe40/0xe40 [ 1167.471772][T24389] ? rcu_is_watching+0x12/0xb0 [ 1167.476521][T24389] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 1167.482488][T24389] do_syscall_64+0x38/0xb0 [ 1167.486893][T24389] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1167.492771][T24389] RIP: 0033:0x7f9ab267b78c [ 1167.497199][T24389] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1167.516828][T24389] RSP: 002b:00007f9ab34140c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1167.525251][T24389] RAX: ffffffffffffffda RBX: 00007f9ab279bf80 RCX: 00007f9ab267b78c [ 1167.533245][T24389] RDX: 000000000000000f RSI: 00007f9ab3414130 RDI: 0000000000000004 [ 1167.541379][T24389] RBP: 00007f9ab3414120 R08: 0000000000000000 R09: 0000000000000000 [ 1167.549361][T24389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.557321][T24389] R13: 000000000000000b R14: 00007f9ab279bf80 R15: 00007ffeb962c4e8 [ 1167.565382][T24389] 04:48:59 executing program 2: socket(0x11, 0x2, 0x0) 04:48:59 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:59 executing program 3: gettid() syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:48:59 executing program 5: socket(0x11, 0x0, 0x7) 04:48:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:48:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) socket(0x15, 0x80007, 0x83) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 04:48:59 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:48:59 executing program 5: socket(0x11, 0x0, 0x7) 04:48:59 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x2, 0x0) 04:48:59 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:59 executing program 5: socket(0x11, 0x0, 0x7) 04:48:59 executing program 4: bpf$MAP_CREATE(0x4, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x10, 0x0) 04:48:59 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x80) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:48:59 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:48:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x301, 0x0) [ 1168.681499][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:00 executing program 2: bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:49:00 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x80) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:49:00 executing program 4: bpf$MAP_CREATE(0x5, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125d, 0x0) 04:49:00 executing program 5: socket(0x11, 0x2, 0x0) 04:49:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) socket(0x15, 0x80007, 0x83) (async) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 04:49:00 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:00 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0x80) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:49:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:00 executing program 5: socket(0x11, 0x2, 0x0) 04:49:00 executing program 2: bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:49:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) socket(0x15, 0x80007, 0x83) (async, rerun: 32) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) 04:49:00 executing program 4: bpf$MAP_CREATE(0x7, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125f, 0x0) 04:49:00 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x8000) 04:49:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:00 executing program 4: bpf$MAP_CREATE(0x8, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:00 executing program 2: bpf$MAP_CREATE(0x2, 0x0, 0x0) 04:49:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1260, 0x0) 04:49:00 executing program 4: bpf$MAP_CREATE(0x9, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:00 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x8000) 04:49:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:01 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x8000) 04:49:01 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000040), 0x48) 04:49:01 executing program 4: bpf$MAP_CREATE(0xa, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:01 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125e, 0x0) 04:49:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1261, 0x0) 04:49:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3f}, &(0x7f0000000280), 0x0, &(0x7f0000000b00)=""/4096, &(0x7f00000002c0)=[0x0], 0x1, {r1}}, 0x58) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = getegid() write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x10, {0x88, 0x4, 0x1}, 0x4e, 0xffffffffffffffff, r3, 0xfff, 0x8, 0x0, 0x6, 0x1, 0x5, 0x1ff, 0x800, 0x0, 0xdc73, 0xd, 0x1fe000000, 0x2, 0x2, 0x4}}, 0xa0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000100)={r0, r5, 0xfffc, 0xaf, &(0x7f0000000040)="3a10eec07b2b60eae0c4896a63c29d3139397a674a9f72bf293c02c478f9411752156278f2a915f50d8aae6499088ecb9fd7ad81566b473293f0cdbe0ec659973ac02a567a906fb259f525eab345f3ec56c8cb1ef940482da2f318aedf8f2498acf0e5be1209a5304be95083a5ab05d01e70ef8b1a293e3dc9177ee5832e9d11ea8029ccc2bfdd032a03a568712b2f7dfcd95fc1ca6cf1112be8b34f23037eb354fa44615e3af4ab0dd8768ab0c3fd", 0x3, 0x0, 0x80, 0x402, 0x1, 0x0, 0x0, 'syz1\x00'}) 04:49:01 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:01 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x8000) 04:49:01 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:01 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125e, 0x0) 04:49:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1262, 0x0) 04:49:01 executing program 4: bpf$MAP_CREATE(0xb, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:01 executing program 3: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:01 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:01 executing program 4: bpf$MAP_CREATE(0xc, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:01 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125e, 0x0) 04:49:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:01 executing program 2: bpf$MAP_CREATE(0x9, 0x0, 0x0) 04:49:01 executing program 4: bpf$MAP_CREATE(0xd, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1170.760195][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:01 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1264, 0x0) 04:49:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3f}, &(0x7f0000000280), 0x0, &(0x7f0000000b00)=""/4096, &(0x7f00000002c0)=[0x0], 0x1, {r1}}, 0x58) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) r3 = getegid() write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x10, {0x88, 0x4, 0x1}, 0x4e, 0xffffffffffffffff, r3, 0xfff, 0x8, 0x0, 0x6, 0x1, 0x5, 0x1ff, 0x800, 0x0, 0xdc73, 0xd, 0x1fe000000, 0x2, 0x2, 0x4}}, 0xa0) (async) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000100)={r0, r5, 0xfffc, 0xaf, &(0x7f0000000040)="3a10eec07b2b60eae0c4896a63c29d3139397a674a9f72bf293c02c478f9411752156278f2a915f50d8aae6499088ecb9fd7ad81566b473293f0cdbe0ec659973ac02a567a906fb259f525eab345f3ec56c8cb1ef940482da2f318aedf8f2498acf0e5be1209a5304be95083a5ab05d01e70ef8b1a293e3dc9177ee5832e9d11ea8029ccc2bfdd032a03a568712b2f7dfcd95fc1ca6cf1112be8b34f23037eb354fa44615e3af4ab0dd8768ab0c3fd", 0x3, 0x0, 0x80, 0x402, 0x1, 0x0, 0x0, 'syz1\x00'}) 04:49:02 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:02 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1265, 0x0) 04:49:02 executing program 2: bpf$MAP_CREATE(0x9, 0x0, 0x0) 04:49:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:02 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x0) 04:49:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3f}, &(0x7f0000000280), 0x0, &(0x7f0000000b00)=""/4096, &(0x7f00000002c0)=[0x0], 0x1, {r1}}, 0x58) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = getegid() write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x10, {0x88, 0x4, 0x1}, 0x4e, 0xffffffffffffffff, r3, 0xfff, 0x8, 0x0, 0x6, 0x1, 0x5, 0x1ff, 0x800, 0x0, 0xdc73, 0xd, 0x1fe000000, 0x2, 0x2, 0x4}}, 0xa0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000100)={r0, r5, 0xfffc, 0xaf, &(0x7f0000000040)="3a10eec07b2b60eae0c4896a63c29d3139397a674a9f72bf293c02c478f9411752156278f2a915f50d8aae6499088ecb9fd7ad81566b473293f0cdbe0ec659973ac02a567a906fb259f525eab345f3ec56c8cb1ef940482da2f318aedf8f2498acf0e5be1209a5304be95083a5ab05d01e70ef8b1a293e3dc9177ee5832e9d11ea8029ccc2bfdd032a03a568712b2f7dfcd95fc1ca6cf1112be8b34f23037eb354fa44615e3af4ab0dd8768ab0c3fd", 0x3, 0x0, 0x80, 0x402, 0x1, 0x0, 0x0, 'syz1\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000300)={0x100, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3f}, &(0x7f0000000280), 0x0, &(0x7f0000000b00)=""/4096, &(0x7f00000002c0)=[0x0], 0x1, {r1}}, 0x58) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) getegid() (async) write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x10, {0x88, 0x4, 0x1}, 0x4e, 0xffffffffffffffff, r3, 0xfff, 0x8, 0x0, 0x6, 0x1, 0x5, 0x1ff, 0x800, 0x0, 0xdc73, 0xd, 0x1fe000000, 0x2, 0x2, 0x4}}, 0xa0) (async) socket$bt_hidp(0x1f, 0x3, 0x6) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000100)={r0, r5, 0xfffc, 0xaf, &(0x7f0000000040)="3a10eec07b2b60eae0c4896a63c29d3139397a674a9f72bf293c02c478f9411752156278f2a915f50d8aae6499088ecb9fd7ad81566b473293f0cdbe0ec659973ac02a567a906fb259f525eab345f3ec56c8cb1ef940482da2f318aedf8f2498acf0e5be1209a5304be95083a5ab05d01e70ef8b1a293e3dc9177ee5832e9d11ea8029ccc2bfdd032a03a568712b2f7dfcd95fc1ca6cf1112be8b34f23037eb354fa44615e3af4ab0dd8768ab0c3fd", 0x3, 0x0, 0x80, 0x402, 0x1, 0x0, 0x0, 'syz1\x00'}) (async) 04:49:02 executing program 2: bpf$MAP_CREATE(0x9, 0x0, 0x0) 04:49:02 executing program 4: bpf$MAP_CREATE(0xf, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1267, 0x0) 04:49:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:02 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125e, 0x0) 04:49:02 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000040), 0x48) 04:49:02 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125e, 0x0) 04:49:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 04:49:02 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1263, 0x0) 04:49:02 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x125e, 0x0) 04:49:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x10, 0x80000, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x46000, 0x0) connect$bt_sco(r2, &(0x7f0000000080), 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0xd99, 0x0, &(0x7f0000000140)=[r1, r1, r2, 0xffffffffffffffff, r1]}, 0x5) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x7626, 0x4) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:02 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1263, 0x0) 04:49:02 executing program 4: bpf$MAP_CREATE(0x11, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1269, 0x0) 04:49:02 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1263, 0x0) 04:49:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 04:49:02 executing program 4: bpf$MAP_CREATE(0x12, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1274, 0x0) 04:49:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 04:49:02 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:03 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:03 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:03 executing program 4: bpf$MAP_CREATE(0x13, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 04:49:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1276, 0x0) 04:49:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket(0x10, 0x80000, 0x1) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x46000, 0x0) connect$bt_sco(r2, &(0x7f0000000080), 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0xd99, 0x0, &(0x7f0000000140)=[r1, r1, r2, 0xffffffffffffffff, r1]}, 0x5) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x7626, 0x4) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:03 executing program 4: bpf$MAP_CREATE(0x14, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:03 executing program 2: bpf$MAP_CREATE(0x10, 0x0, 0x0) 04:49:03 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1263, 0x0) 04:49:03 executing program 4: bpf$MAP_CREATE(0x15, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:03 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1268, 0x0) 04:49:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1277, 0x0) 04:49:03 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1263, 0x0) 04:49:03 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1268, 0x0) 04:49:03 executing program 2: bpf$MAP_CREATE(0x10, 0x0, 0x0) 04:49:03 executing program 4: bpf$MAP_CREATE(0x16, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1278, 0x0) 04:49:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket(0x10, 0x80000, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x46000, 0x0) connect$bt_sco(r2, &(0x7f0000000080), 0x2) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000180)={0xd99, 0x0, &(0x7f0000000140)=[r1, r1, r2, 0xffffffffffffffff, r1]}, 0x5) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000040)=0x7626, 0x4) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:03 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1263, 0x0) 04:49:03 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1268, 0x0) 04:49:03 executing program 2: bpf$MAP_CREATE(0x10, 0x0, 0x0) 04:49:03 executing program 4: bpf$MAP_CREATE(0x17, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:03 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1279, 0x0) 04:49:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) [ 1172.839883][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127a, 0x0) 04:49:04 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1263, 0x0) 04:49:04 executing program 4: bpf$MAP_CREATE(0x18, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:04 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040), 0x48) 04:49:04 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/107, &(0x7f00000000c0)=0x6b) 04:49:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 04:49:04 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:04 executing program 4: bpf$MAP_CREATE(0x19, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:04 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040), 0x48) 04:49:04 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000040), 0x48) 04:49:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x1268, 0x0) 04:49:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127c, 0x0) 04:49:04 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:04 executing program 4: bpf$MAP_CREATE(0x1a, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:04 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/107, &(0x7f00000000c0)=0x6b) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/107, &(0x7f00000000c0)=0x6b) (async) 04:49:05 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1268, 0x0) 04:49:05 executing program 4: bpf$MAP_CREATE(0x1b, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 04:49:05 executing program 3: bpf$MAP_CREATE(0x17, 0x0, 0x0) 04:49:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:49:05 executing program 3: bpf$MAP_CREATE(0x17, 0x0, 0x0) 04:49:05 executing program 4: bpf$MAP_CREATE(0x1c, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:05 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1268, 0x0) 04:49:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 04:49:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000040)=""/107, &(0x7f00000000c0)=0x6b) 04:49:05 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x1268, 0x0) 04:49:05 executing program 4: bpf$MAP_CREATE(0x1d, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 3: bpf$MAP_CREATE(0x17, 0x0, 0x0) 04:49:05 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127b, 0x0) 04:49:05 executing program 3: bpf$MAP_CREATE(0x17, &(0x7f0000000040), 0x48) 04:49:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:49:05 executing program 4: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 5: bpf$MAP_CREATE(0x1d, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127b, 0x0) 04:49:05 executing program 5: bpf$MAP_CREATE(0x1d, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) [ 1174.920292][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x2, 0x3, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x208bc1, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r3, r0, r4, r1], 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:49:06 executing program 4: bpf$MAP_CREATE(0x21, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:06 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127b, 0x0) 04:49:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 04:49:06 executing program 5: bpf$MAP_CREATE(0x1d, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:06 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:06 executing program 4: bpf$MAP_CREATE(0x22, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:06 executing program 5: bpf$MAP_CREATE(0x1d, 0x0, 0x0) 04:49:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:49:06 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 04:49:06 executing program 5: bpf$MAP_CREATE(0x1d, 0x0, 0x0) 04:49:07 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:49:07 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 04:49:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x2, 0x3, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x208bc1, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x208bc1, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r3, r0, r4, r1], 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:07 executing program 5: bpf$MAP_CREATE(0x1d, 0x0, 0x0) 04:49:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:07 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127b, 0x0) 04:49:07 executing program 4: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:07 executing program 5: bpf$MAP_CREATE(0x1d, &(0x7f0000000040), 0x48) 04:49:07 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 04:49:07 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127b, 0x0) 04:49:07 executing program 4: bpf$MAP_CREATE(0x500, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:07 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:07 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 04:49:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) [ 1176.841581][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.847928][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.000247][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket(0x2, 0x3, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x208bc1, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r3, r0, r4, r1], 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket(0x2, 0x3, 0x4) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x208bc1, 0x0) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000180)=[r3, r0, r4, r1], 0x4) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040085}, 0x4) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:08 executing program 4: bpf$MAP_CREATE(0x600, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127b, 0x0) 04:49:08 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x8933, 0x0) 04:49:08 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 04:49:08 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 4: bpf$MAP_CREATE(0x700, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 04:49:08 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127b, 0x0) 04:49:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:08 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127f, 0x0) 04:49:08 executing program 5: bpf$MAP_CREATE(0x300, 0x0, 0x0) 04:49:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000), 0xfffffec5) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab01, 0x0) 04:49:08 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 04:49:08 executing program 4: bpf$MAP_CREATE(0x900, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 5: bpf$MAP_CREATE(0x700, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:08 executing program 4: bpf$MAP_CREATE(0xa00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:08 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 04:49:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab02, 0x0) 04:49:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 04:49:08 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab03, 0x0) 04:49:08 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000), 0xfffffec5) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:09 executing program 4: bpf$MAP_CREATE(0xb00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 04:49:09 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127f, 0x0) 04:49:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab04, 0x0) 04:49:09 executing program 4: bpf$MAP_CREATE(0xc00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 04:49:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:09 executing program 4: bpf$MAP_CREATE(0xd00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:09 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:49:09 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab00, 0x0) [ 1179.079905][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:10 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5460, 0x0) 04:49:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab06, 0x0) 04:49:10 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab00, 0x0) 04:49:10 executing program 4: bpf$MAP_CREATE(0xe00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000), 0xfffffec5) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:10 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5460, 0x0) 04:49:10 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab00, 0x0) 04:49:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:10 executing program 4: bpf$MAP_CREATE(0xf00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:10 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:10 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5460, 0x0) 04:49:10 executing program 4: bpf$MAP_CREATE(0x1100, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:10 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab09, 0x0) [ 1179.347840][T24897] block nbd1: NBD_DISCONNECT 04:49:10 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5452, 0x0) 04:49:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 04:49:11 executing program 4: bpf$MAP_CREATE(0x1200, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:11 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab00, 0x0) 04:49:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 04:49:11 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5452, 0x0) 04:49:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 04:49:11 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5452, 0x0) 04:49:11 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab00, 0x0) 04:49:11 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x400448c9, 0x0) 04:49:11 executing program 4: bpf$MAP_CREATE(0x1300, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5460, 0x0) 04:49:11 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:11 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5452, 0x0) 04:49:11 executing program 4: bpf$MAP_CREATE(0x1400, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:11 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5460, 0x0) 04:49:12 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5452, 0x0) 04:49:12 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab00, 0x0) 04:49:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x400448dd, 0x0) 04:49:12 executing program 4: bpf$MAP_CREATE(0x1500, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:12 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5460, 0x0) 04:49:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:12 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5452, 0x0) 04:49:12 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5460, 0x0) 04:49:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x400454ca, 0x0) 04:49:12 executing program 4: bpf$MAP_CREATE(0x1600, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:12 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab00, 0x0) 04:49:12 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5452, 0x0) 04:49:12 executing program 4: bpf$MAP_CREATE(0x1700, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 04:49:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) [ 1181.146631][T24975] block nbd2: NBD_DISCONNECT [ 1181.160519][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:12 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:49:12 executing program 4: bpf$MAP_CREATE(0x1800, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 04:49:13 executing program 4: bpf$MAP_CREATE(0x1900, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:13 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) [ 1181.907200][T24987] block nbd2: NBD_DISCONNECT 04:49:13 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab0a, 0x0) 04:49:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:13 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab0a, 0x0) [ 1181.981954][T24998] block nbd2: NBD_DISCONNECT 04:49:13 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab0a, 0x0) 04:49:13 executing program 4: bpf$MAP_CREATE(0x1a00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:13 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:49:13 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab08, 0x0) 04:49:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/17, &(0x7f0000000080)=0x11) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:13 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 04:49:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101286, 0x0) 04:49:13 executing program 4: bpf$MAP_CREATE(0x1b00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:13 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40049409, 0x0) 04:49:13 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab08, 0x0) 04:49:13 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 04:49:14 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40049409, 0x0) 04:49:14 executing program 4: bpf$MAP_CREATE(0x1c00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101288, 0x0) 04:49:14 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab08, 0x0) 04:49:14 executing program 4: bpf$MAP_CREATE(0x1d00, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1183.249905][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/17, &(0x7f0000000080)=0x11) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:14 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40049409, 0x0) 04:49:14 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:14 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab0a, 0x0) 04:49:14 executing program 4: bpf$MAP_CREATE(0x1e00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:14 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:14 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab0a, 0x0) 04:49:14 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:14 executing program 4: bpf$MAP_CREATE(0x1f00, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/17, &(0x7f0000000080)=0x11) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/17, &(0x7f0000000080)=0x11) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:14 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:14 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab0a, 0x0) 04:49:14 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40049409, 0x0) 04:49:14 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab08, 0x0) 04:49:14 executing program 4: bpf$MAP_CREATE(0x2000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:14 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40049409, 0x0) 04:49:14 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab08, 0x0) 04:49:14 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab0a, 0x0) 04:49:14 executing program 4: bpf$MAP_CREATE(0x2100, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40186366, 0x0) 04:49:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = getpid() pidfd_open(r1, 0x0) pidfd_open(r1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x84200800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x5}, &(0x7f0000000100)=""/84, 0x54, &(0x7f0000000180)=""/186, &(0x7f0000000280)=[r1, 0x0, r2, 0x0], 0x4}, 0x58) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:15 executing program 4: bpf$MAP_CREATE(0x2200, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:15 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40049409, 0x0) 04:49:15 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab08, 0x0) 04:49:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) 04:49:15 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab08, 0x0) 04:49:15 executing program 4: bpf$MAP_CREATE(0x2300, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:15 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40049409, 0x0) 04:49:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = getpid() pidfd_open(r1, 0x0) pidfd_open(r1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x84200800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x5}, &(0x7f0000000100)=""/84, 0x54, &(0x7f0000000180)=""/186, &(0x7f0000000280)=[r1, 0x0, r2, 0x0], 0x4}, 0x58) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:15 executing program 4: bpf$MAP_CREATE(0x1000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) 04:49:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:15 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 04:49:15 executing program 4: bpf$MAP_CREATE(0x2000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) 04:49:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:15 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 04:49:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) [ 1185.320188][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:16 executing program 4: bpf$MAP_CREATE(0x3000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:16 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 04:49:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) 04:49:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = getpid() pidfd_open(r1, 0x0) (async) pidfd_open(r1, 0x0) pidfd_open(r1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_clone3(&(0x7f00000002c0)={0x84200800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x5}, &(0x7f0000000100)=""/84, 0x54, &(0x7f0000000180)=""/186, &(0x7f0000000280)=[r1, 0x0, r2, 0x0], 0x4}, 0x58) (async) syz_clone3(&(0x7f00000002c0)={0x84200800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x5}, &(0x7f0000000100)=""/84, 0x54, &(0x7f0000000180)=""/186, &(0x7f0000000280)=[r1, 0x0, r2, 0x0], 0x4}, 0x58) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:16 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870c8, 0x0) 04:49:16 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:16 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:16 executing program 4: bpf$MAP_CREATE(0x4000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:16 executing program 4: bpf$MAP_CREATE(0x5000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:17 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:17 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:17 executing program 4: bpf$MAP_CREATE(0x6000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:17 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870c8, 0x0) 04:49:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 04:49:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:17 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870c8, 0x0) 04:49:17 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070cd, 0x0) 04:49:17 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:17 executing program 4: bpf$MAP_CREATE(0x7000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:17 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) 04:49:17 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:17 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 04:49:17 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086301, 0x0) 04:49:17 executing program 4: bpf$MAP_CREATE(0x8000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:18 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) 04:49:18 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:18 executing program 4: bpf$MAP_CREATE(0x9000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 04:49:18 executing program 4: bpf$MAP_CREATE(0xa000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cb, 0x0) 04:49:18 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870c8, 0x0) [ 1187.401498][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:18 executing program 4: bpf$MAP_CREATE(0xb000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:18 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070cd, 0x0) 04:49:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:18 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:18 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870c8, 0x0) 04:49:18 executing program 4: bpf$MAP_CREATE(0xc000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:18 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:18 executing program 4: bpf$MAP_CREATE(0xd000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:18 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870c8, 0x0) 04:49:18 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, r0, 0x724, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x2e, 0x1, '\x05Zy\x01^\xf9\xf2\xcb[\xae\xa4\"M\xc5]\x03\xc7^\xca!\xd2\x95\x8d{\x12L\xc3\r\xb4m\x00\x00\x00\x00\x00\x00\x00\x00Pi\x8c='}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ']\xbb$\xb99)){\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x80c0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0xf38, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:18 executing program 4: bpf$MAP_CREATE(0xe000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870c8, 0x0) 04:49:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:18 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:18 executing program 4: bpf$MAP_CREATE(0xf000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:18 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80086601, 0x0) 04:49:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:19 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, r0, 0x724, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x2e, 0x1, '\x05Zy\x01^\xf9\xf2\xcb[\xae\xa4\"M\xc5]\x03\xc7^\xca!\xd2\x95\x8d{\x12L\xc3\r\xb4m\x00\x00\x00\x00\x00\x00\x00\x00Pi\x8c='}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ']\xbb$\xb99)){\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x80c0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0xf38, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, r0, 0x724, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x2e, 0x1, '\x05Zy\x01^\xf9\xf2\xcb[\xae\xa4\"M\xc5]\x03\xc7^\xca!\xd2\x95\x8d{\x12L\xc3\r\xb4m\x00\x00\x00\x00\x00\x00\x00\x00Pi\x8c='}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ']\xbb$\xb99)){\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x80c0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0xf38, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x4) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:19 executing program 4: bpf$MAP_CREATE(0x10000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:19 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80086601, 0x0) 04:49:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:19 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0045878, 0x0) 04:49:19 executing program 4: bpf$MAP_CREATE(0x11000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:19 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0045878, 0x0) 04:49:19 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80086601, 0x0) 04:49:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:19 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:19 executing program 4: bpf$MAP_CREATE(0x12000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:19 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, r0, 0x724, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x2e, 0x1, '\x05Zy\x01^\xf9\xf2\xcb[\xae\xa4\"M\xc5]\x03\xc7^\xca!\xd2\x95\x8d{\x12L\xc3\r\xb4m\x00\x00\x00\x00\x00\x00\x00\x00Pi\x8c='}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ']\xbb$\xb99)){\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x80c0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0xf38, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x4) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, r0, 0x724, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x2e, 0x1, '\x05Zy\x01^\xf9\xf2\xcb[\xae\xa4\"M\xc5]\x03\xc7^\xca!\xd2\x95\x8d{\x12L\xc3\r\xb4m\x00\x00\x00\x00\x00\x00\x00\x00Pi\x8c='}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, ']\xbb$\xb99)){\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x891}, 0x80c0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r2) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r4, 0xf38, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x4) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:19 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0045878, 0x0) 04:49:19 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:19 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 04:49:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2) 04:49:19 executing program 4: bpf$MAP_CREATE(0x13000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:19 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:19 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) 04:49:19 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 04:49:19 executing program 4: bpf$MAP_CREATE(0x14000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:19 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x1, 0x300, 0x5, 0x3, 0x10000002, 0xffffdf88}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}]}, 0x15) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xc2f00, 0x0) 04:49:19 executing program 4: bpf$MAP_CREATE(0x15000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:19 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80086601, 0x0) 04:49:19 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) 04:49:19 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 04:49:19 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0045878, 0x0) 04:49:19 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:19 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80086601, 0x0) 04:49:19 executing program 4: bpf$MAP_CREATE(0x16000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:20 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:20 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0045878, 0x0) 04:49:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) [ 1189.479907][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:20 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0045878, 0x0) 04:49:20 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80086601, 0x0) 04:49:20 executing program 4: bpf$MAP_CREATE(0x17000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) 04:49:20 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0101282, 0x0) 04:49:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x1, 0x300, 0x5, 0x3, 0x10000002, 0xffffdf88}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}]}, 0x15) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xc2f00, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x1, 0x300, 0x5, 0x3, 0x10000002, 0xffffdf88}) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800}) (async) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}]}, 0x15) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xc2f00, 0x0) (async) 04:49:20 executing program 4: bpf$MAP_CREATE(0x18000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7) 04:49:20 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 04:49:20 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0045878, 0x0) 04:49:20 executing program 4: bpf$MAP_CREATE(0x19000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:20 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80086601, 0x0) 04:49:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x1, 0x300, 0x5, 0x3, 0x10000002, 0xffffdf88}) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x800, 0x0, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}]}, 0x15) (async) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpuset'}, {0x2b, 'cpu'}, {0x2b, 'cpuset'}]}, 0x15) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xc2f00, 0x0) 04:49:20 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x300) 04:49:20 executing program 4: bpf$MAP_CREATE(0x1a000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:20 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 04:49:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x500) 04:49:21 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0101282, 0x0) 04:49:21 executing program 4: bpf$MAP_CREATE(0x1b000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x600) 04:49:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff12) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x2c) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:21 executing program 4: bpf$MAP_CREATE(0x1c000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x700) 04:49:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1000000) 04:49:21 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0481273, 0x0) 04:49:21 executing program 4: bpf$MAP_CREATE(0x1d000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x2000000) 04:49:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff12) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x2c) (async, rerun: 64) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:21 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0481273, 0x0) 04:49:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:21 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:21 executing program 4: bpf$MAP_CREATE(0x1e000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:21 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0481273, 0x0) 04:49:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0xffffffffffffff12) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x2c) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:21 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3000000) 04:49:21 executing program 4: bpf$MAP_CREATE(0x1f000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:21 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0189436, 0x0) 04:49:21 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc020660b, 0x0) 04:49:22 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:22 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0189436, 0x0) 04:49:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4000000) 04:49:22 executing program 4: bpf$MAP_CREATE(0x20000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:22 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc020660b, 0x0) 04:49:22 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:22 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc020660b, 0x0) 04:49:22 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0189436, 0x0) 04:49:22 executing program 4: bpf$MAP_CREATE(0x21000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5000000) 04:49:22 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0481273, 0x0) 04:49:22 executing program 4: bpf$MAP_CREATE(0x22000000, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1191.560173][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:22 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6000000) 04:49:22 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0481273, 0x0) 04:49:22 executing program 4: bpf$MAP_CREATE(0x23000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:22 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:22 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:22 executing program 4: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:22 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0481273, 0x0) 04:49:22 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7000000) 04:49:22 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:23 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0481273, 0x0) 04:49:23 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc020660b, 0x0) 04:49:23 executing program 4: bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:23 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xc0189436, 0x0) 04:49:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff) 04:49:23 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc020660b, 0x0) 04:49:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) connect$bt_sco(r1, &(0x7f0000000000), 0x8) (async, rerun: 64) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) 04:49:23 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1000000) 04:49:23 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0189436, 0x0) 04:49:23 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc020660b, 0x0) 04:49:23 executing program 4: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfffffdfd) 04:49:23 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0189436, 0x0) 04:49:23 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc020660b, 0x0) 04:49:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xffffff7f) 04:49:23 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cb, 0x0) 04:49:23 executing program 4: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x71, 'freezer'}, {0x2b, 'hugetlb'}, {0x2d, 'devices'}]}, 0x27) 04:49:24 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xc0189436, 0x0) 04:49:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:24 executing program 4: bpf$MAP_CREATE(0x500000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x1000000000000) 04:49:24 executing program 4: bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:24 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:24 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:24 executing program 4: bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1193.640813][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:25 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x801c581f, 0x0) 04:49:25 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:25 executing program 4: bpf$MAP_CREATE(0x800000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000000000000) 04:49:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x71, 'freezer'}, {0x2b, 'hugetlb'}, {0x2d, 'devices'}]}, 0x27) 04:49:25 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x801c581f, 0x0) 04:49:25 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:25 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x300000000000000) 04:49:25 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:25 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x801c581f, 0x0) 04:49:25 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081272, 0x0) 04:49:25 executing program 4: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:25 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:25 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x71, 'freezer'}, {0x2b, 'hugetlb'}, {0x2d, 'devices'}]}, 0x27) 04:49:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x400000000000000) 04:49:26 executing program 4: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:26 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:26 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081272, 0x0) 04:49:26 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:26 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x801c581f, 0x0) 04:49:26 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:26 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081272, 0x0) 04:49:26 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x500000000000000) 04:49:26 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:26 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x801c581f, 0x0) [ 1195.719907][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:27 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:27 executing program 4: bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:27 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081280, 0x0) 04:49:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x600000000000000) 04:49:27 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x801c581f, 0x0) 04:49:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/228, &(0x7f0000000280)=0xe4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0xc0, {0x40, 0x3, 0x6}, 0x40, 0xee01, 0xee00, 0xffffffffffff2d18, 0x5, 0x4787, 0x4d2a, 0xfffffffffffffff7, 0x7, 0xfffffffffffff801, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x4, 0xffffffffffffffff, 0x7}}, 0xa0) 04:49:27 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:27 executing program 4: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:27 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x700000000000000) 04:49:27 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:27 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x801c581f, 0x0) 04:49:27 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:27 executing program 4: bpf$MAP_CREATE(0xf00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:27 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:27 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:27 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081280, 0x0) 04:49:28 executing program 4: bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:28 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081272, 0x0) 04:49:28 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xffffff7f00000000) 04:49:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/228, &(0x7f0000000280)=0xe4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0xc0, {0x40, 0x3, 0x6}, 0x40, 0xee01, 0xee00, 0xffffffffffff2d18, 0x5, 0x4787, 0x4d2a, 0xfffffffffffffff7, 0x7, 0xfffffffffffff801, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x4, 0xffffffffffffffff, 0x7}}, 0xa0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/228, &(0x7f0000000280)=0xe4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0xc0, {0x40, 0x3, 0x6}, 0x40, 0xee01, 0xee00, 0xffffffffffff2d18, 0x5, 0x4787, 0x4d2a, 0xfffffffffffffff7, 0x7, 0xfffffffffffff801, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x4, 0xffffffffffffffff, 0x7}}, 0xa0) (async) 04:49:28 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 04:49:28 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081272, 0x0) 04:49:28 executing program 4: bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:28 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_CLEAR_QUE(r1, 0xab05) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) 04:49:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/228, &(0x7f0000000280)=0xe4) (async) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000180)=""/228, &(0x7f0000000280)=0xe4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0xffffffffffffffff}) write$P9_RGETATTR(r3, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0xc0, {0x40, 0x3, 0x6}, 0x40, 0xee01, 0xee00, 0xffffffffffff2d18, 0x5, 0x4787, 0x4d2a, 0xfffffffffffffff7, 0x7, 0xfffffffffffff801, 0xfffffffffffffffe, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0x8, 0x4, 0xffffffffffffffff, 0x7}}, 0xa0) 04:49:28 executing program 4: bpf$MAP_CREATE(0x1200000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:28 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081272, 0x0) 04:49:28 executing program 4: bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:28 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:28 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$NBD_CLEAR_QUE(r1, 0xab05) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) 04:49:28 executing program 4: bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081272, 0x0) 04:49:28 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x100000000000000) 04:49:28 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xfdfdffff00000000) 04:49:28 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) [ 1197.800288][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xd636) 04:49:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x7ff, 0x0, &(0x7f0000000040)=[r2, r3, r0, r4]}, 0x4) 04:49:29 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xfdfdffff00000000) 04:49:29 executing program 4: bpf$MAP_CREATE(0x1500000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:29 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x100000000000000) 04:49:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 04:49:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x7ff, 0x0, &(0x7f0000000040)=[r2, r3, r0, r4]}, 0x4) 04:49:29 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xfdfdffff00000000) 04:49:29 executing program 4: bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:29 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 04:49:29 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x100000000000000) 04:49:29 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000080)={0x7ff, 0x0, &(0x7f0000000040)=[r2, r3, r0, r4]}, 0x4) 04:49:30 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:30 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:30 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 04:49:30 executing program 4: bpf$MAP_CREATE(0x1700000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fffffff, 0xfffffffe, 0x3, 0x3}, 0x14) 04:49:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xd636) 04:49:30 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0xd636) 04:49:30 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 04:49:30 executing program 4: bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:30 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:30 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fffffff, 0xfffffffe, 0x3, 0x3}, 0x14) 04:49:30 executing program 4: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:30 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000000000) 04:49:30 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xfdfdffff00000000) 04:49:30 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x7fffffff, 0xfffffffe, 0x3, 0x3}, 0x14) 04:49:30 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 04:49:30 executing program 4: bpf$MAP_CREATE(0x1a00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x28c4c1, 0x0) 04:49:31 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xfdfdffff00000000) 04:49:31 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x100000000000000) 04:49:31 executing program 4: bpf$MAP_CREATE(0x1b00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:31 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 04:49:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) 04:49:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) (async) 04:49:31 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 04:49:31 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x100000000000000) [ 1199.879876][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:31 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xfdfdffff00000000) 04:49:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) 04:49:31 executing program 4: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:31 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x100000000000000) 04:49:31 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80081270, 0x0) 04:49:31 executing program 4: bpf$MAP_CREATE(0x1d00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x28c4c1, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x28c4c1, 0x0) 04:49:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) 04:49:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) 04:49:31 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 04:49:31 executing program 4: bpf$MAP_CREATE(0x1e00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:31 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:31 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) (async) 04:49:31 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 04:49:32 executing program 4: bpf$MAP_CREATE(0x1f00000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:32 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80081270, 0x0) 04:49:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 32) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x28c4c1, 0x0) 04:49:32 executing program 4: bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:32 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:32 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a0480) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x70000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x4, 0x0, 0x1, 0x321, 0x2, 0x83, 0x2, 0x8000008, 0x20}}, 0x43) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1ff, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "786d1e25c779a64c", "5d7914b7e3bce0e70d1a599d4fed554c0eb0390616d1f2f119f2dbfcf066e3c0", "ed2e73fa", "37697ccd41408478"}, 0x38) 04:49:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) 04:49:32 executing program 4: bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:32 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x28c4c1, 0x0) 04:49:32 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a0480) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x70000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x4, 0x0, 0x1, 0x321, 0x2, 0x83, 0x2, 0x8000008, 0x20}}, 0x43) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1ff, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "786d1e25c779a64c", "5d7914b7e3bce0e70d1a599d4fed554c0eb0390616d1f2f119f2dbfcf066e3c0", "ed2e73fa", "37697ccd41408478"}, 0x38) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a0480) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x70000, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x4, 0x0, 0x1, 0x321, 0x2, 0x83, 0x2, 0x8000008, 0x20}}, 0x43) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r4) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1ff, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "786d1e25c779a64c", "5d7914b7e3bce0e70d1a599d4fed554c0eb0390616d1f2f119f2dbfcf066e3c0", "ed2e73fa", "37697ccd41408478"}, 0x38) (async) 04:49:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) 04:49:32 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) 04:49:32 executing program 4: bpf$MAP_CREATE(0x2200000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1201.962372][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) 04:49:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) 04:49:33 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a0480) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x70000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x400200, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) write$P9_RSTATFS(r1, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x4, 0x0, 0x1, 0x321, 0x2, 0x83, 0x2, 0x8000008, 0x20}}, 0x43) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r6, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x1ff, @media='ib\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "786d1e25c779a64c", "5d7914b7e3bce0e70d1a599d4fed554c0eb0390616d1f2f119f2dbfcf066e3c0", "ed2e73fa", "37697ccd41408478"}, 0x38) 04:49:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000012c0)) 04:49:33 executing program 4: bpf$MAP_CREATE(0x2300000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x20001f, @private2, 0x1c9}}, 0x0, 0x0, 0x4, 0x0, "5db5c92933fc44ea5ac5317fc8a634fafc7fff7542bc8f90682ab1e2e73530132b639f38026b25f07e7ebc65255ffa05af3e61846553308cd9e3332f96810c35d4726054272708b99d5e163d9ba65492"}, 0xfffffdf5) 04:49:33 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180800}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x483, {0x0, 0x1, 0x5}, 0x11, r2, 0x0, 0xb67, 0x7, 0x1d8, 0x7fffffff, 0x26a000000, 0x9, 0xf5d, 0x7, 0x80, 0x800, 0x80, 0x2, 0x100, 0xff, 0x5}}, 0xa0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3529, 0x4b0101) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) 04:49:33 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xfdfdffff00000000) 04:49:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6}, 0x48) 04:49:33 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:33 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) (async) 04:49:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180800}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x483, {0x0, 0x1, 0x5}, 0x11, r2, 0x0, 0xb67, 0x7, 0x1d8, 0x7fffffff, 0x26a000000, 0x9, 0xf5d, 0x7, 0x80, 0x800, 0x80, 0x2, 0x100, 0xff, 0x5}}, 0xa0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3529, 0x4b0101) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180800}) (async) pipe2$9p(&(0x7f0000000140), 0x80080) (async) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) (async) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x483, {0x0, 0x1, 0x5}, 0x11, r2, 0x0, 0xb67, 0x7, 0x1d8, 0x7fffffff, 0x26a000000, 0x9, 0xf5d, 0x7, 0x80, 0x800, 0x80, 0x2, 0x100, 0xff, 0x5}}, 0xa0) (async) syz_open_dev$dri(&(0x7f0000000000), 0x3529, 0x4b0101) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) (async) 04:49:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) 04:49:34 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7}, 0x48) 04:49:34 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 04:49:34 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 04:49:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8}, 0x48) 04:49:34 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x180800}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x483, {0x0, 0x1, 0x5}, 0x11, r2, 0x0, 0xb67, 0x7, 0x1d8, 0x7fffffff, 0x26a000000, 0x9, 0xf5d, 0x7, 0x80, 0x800, 0x80, 0x2, 0x100, 0xff, 0x5}}, 0xa0) (async) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x483, {0x0, 0x1, 0x5}, 0x11, r2, 0x0, 0xb67, 0x7, 0x1d8, 0x7fffffff, 0x26a000000, 0x9, 0xf5d, 0x7, 0x80, 0x800, 0x80, 0x2, 0x100, 0xff, 0x5}}, 0xa0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x3529, 0x4b0101) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r3}) 04:49:34 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) 04:49:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) (async) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9}, 0x48) 04:49:34 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 04:49:34 executing program 1: syz_clone3(&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) 04:49:34 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb}, 0x48) 04:49:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) 04:49:34 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) 04:49:34 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc}, 0x48) 04:49:34 executing program 1: syz_clone3(&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040), 0xfffffffffffffe5f) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd}, 0x48) 04:49:34 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:34 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0xca82) 04:49:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe}, 0x48) 04:49:34 executing program 1: syz_clone3(&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_clone3(&(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 04:49:34 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041285, 0x0) 04:49:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf}, 0x48) 04:49:34 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 04:49:34 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0xca82) 04:49:34 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) [ 1204.040119][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10}, 0x48) 04:49:35 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 04:49:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 04:49:35 executing program 3: syz_open_dev$ndb(0x0, 0x0, 0xca82) 04:49:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x644242) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) 04:49:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040), 0xfffffffffffffe5f) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000040), 0xfffffffffffffe5f) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:35 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041285, 0x0) 04:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11}, 0x48) 04:49:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) 04:49:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x644242) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x644242) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) (async) 04:49:35 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10}, 0x48) 04:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12}, 0x48) 04:49:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10}, 0x48) 04:49:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040), 0xfffffffffffffe5f) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r1, &(0x7f0000000040), 0xfffffffffffffe5f) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000001240)) 04:49:35 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x10}, 0x48) 04:49:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x644242) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) 04:49:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13}, 0x48) 04:49:35 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:35 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xffff) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001240)) 04:49:35 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x4, 0xf608, 0x8249, 0x5]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x6b]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:35 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001240)) 04:49:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12}, 0x48) 04:49:35 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xffff) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:35 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14}, 0x48) 04:49:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xffff) (async, rerun: 64) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12}, 0x48) 04:49:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001240)) 04:49:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15}, 0x48) 04:49:36 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12}, 0x48) 04:49:36 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x4, 0xf608, 0x8249, 0x5]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x6b]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0x5, 0x2, 0x500, r1, 0x1, '\x00', 0x0, r1, 0x2, 0x2, 0x5, 0xf}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000b00)="89ccb277e205fb26db5e420d4a574bbddee49792bfc8225a80e686a4e90fa80490096da14c8c0ca28687ce6c8427ee38ac114a4bf631de05d4752b08b01dc4fb0f02dbec91012c185b40f661f214645cb794487f065db794cdab5cf730b77bd1cde17fe3fd355e6dd5bd2e5cdc51e908585cdff7e463974cd5f658b415728a1e5e2a1b05b4e8f120cd7d19737c23ed35bcf12187c77fb9319cb0a589e6547296e7e901aa6c9376a66e960392b20c1276b19e7d1f79baa8f33c7840afd0684684810570ab6c5435020bb4a7d44055cee88b0e49d3cee134502a40b4a92d0dc3ec6cd1bb0c5bf55c793ffce80d9e076ac91c258cc657da18f4be8119b3c0c640eb1e9ca32f4f653f36a02b74bdb1dde395f06ad3bcc233284a6f1279a6078d2f82121732ce0b1ac2161814c07fe5044b57852618ffe13acc9edccb70298200378b1f2ec835a366ac8ef019228e494dcc02c20e37d711a18e20676c6bcb7094ba609334af04e4679e17bff2d470cd680b368babb24acc5108d8c2e271c8555a1b407d8ba65b2b0c491df3a8db19ee2f11a0d09e4050f9ec7aecc446e87b7c82de8e9f0f184355f47fdba84bcd6170710e9cc820f2d008c1437b5f64315bebb965984f35b31432a18bdedd4b4f97d1740acdf329bfc66b2b068670cd844d8024a35959fffe0329fa38128ed3da6a41443af6b3b9ce78f311fd54910eb531a4ba04670f5ff4df8d46069a6f11503fe08aad5076e39f83a72432b1389d33d1c62cf768a665e4ad493e1c7903bed425c5a0f99adafd56c7dc21cd49b2383b6eec94a0f8cdacf27915557ced63d2548f49baf5f77c68f9412ec615e42addee5e6ca86455ce758619dd0dc86a7eaa79b522bb5299442bc76fcd07c11efe4597be80766c9b3ff84cfed6d9f38f5f914ef5f04492c751c8d69c8c0a111d931fb08b36b32b20a2ac8ad1512504d52dbaa7da90e1de9622e78f1ea10d884c870442fe19ec43db7e4704f005662f19398ec10dadd4c2bdf52e2d9777caee61d4350065095b9268f80e2f74af5d4cd3048a4000716d5a604a7b86c682e32cd5c3335cc0bfb3db21e0b5643b0c6ab86ceb95a0683db731b6068c7e6e9935394212b0c121a7270e2f56e68e0bd7dd263e65df71742694158276f038b28f7d8f47b9b8680132888d666c960ab2bd399b0c459a46d975575dbd1d597249532d493a6f7d86155689a61493209848a76efcb6109f9a9f3c4f3d55bfa131494c0557377cf7508143513e64b176f9d28a8f1dd933bfc57cc3cccdf1c258f72d39a377d05ad0bbd1f627cfb2f61afe790338980137b6adf9d902b6ed2fda849c73e0466c419985186e4b4172cbd2ec73863f25483f5b7510662422ce863091d1410e3ef2fcaa561667c8153f499c8959a3c0e8e109b04fef941afc6307385e2860294a1019ec06bd8250fbf96f63bfdcbb02bed4209094cc32ce4fa342d3856dfc4fe618d01cf18c21a24f81ecb9a0b10f2414178e61479295b2f4015815adfa37dd64960be92df198caed6f8175f361adc88f1e1a9423a9466d7f411f3b0ffec4ba8d2d1bfbcbea947abf6c1c1138008f5ac7b84cbfbc669f04da1df733a33f6dd91f3553447060cc33b8e4baa34f7a88697e5bf6501c16213cec1961073ed6f457d8d0116e2eb21063c49a9eb4d10c83b591dba2af5f048bec1e4c1af05b2c3f191cc2df25141aa23e578462b5f362a93b4ac417bb4fa7d3c0e4859d9241b97a475e248dd719f586d3bf61c6d32f68aa359e9e834a9f465afa9067081f391563b5de7b01b93c85a2bf3b9f10920ab04e64fe77cbc1c7969e61e61de1fe8260ea434f45d9628fadb976a9cdea46c38bd32c691fa6922a9e61e46045b01950187cfd85e84d8ec650ee281aed0f87895d5783b169214bea9e5ef32a38eb083b7644d99d52527754e25c218e5ff684761b687c2779c2bb6308a2c530c6f99b7fd236c99dd9680de1638ead333004863e7b1d93178515c5b897f5e1b52ed4f355dff817b038135f524f9eaea258af6cbafb0f8f641e6a5847a3096d21e1f411fe253accf0005829c4b58d3100b26cb339029a3ccf2c6179c55069df93172694ff40670173c6bc683c92f9112596fc9665cb48982092e35353dcc154c481babe01690b2205f96e3e1b966d2aad878106993c4efcb61531aeb3158858ac6a79942e7e9094d1401151d936e2dfd3b1f0cd7208a00f8c8fa14e73f5d2db4430fe7b170599121f65c9fca892677623a9e13a73f4d864df8e989c7e5a6bea8c22256eb0e986a194cb5627096dee5aed9a9caae5f67803aebee3e64487b0acc4d0337cf1736a4f94f795b34884abf1471c7f9a4c8ff64ae12c3bafa0771582af8c45b2807558812a226e43b75162e25137a3c75403a88835cbcc360898bc1df0c293be6a7eb59dbc7f193642db1dc9da3ef32d118e7f01843dc0148f64b9674ef8e510f2a6dbba722270d2da918422c44dba760e87a9e65c6a17d97e5ecee62b879e3a6d5922216832001105644085ee63368bcb841f9cfda8a8ce42a7828c76c877dc32d9556bbf963a46c85653e0dd0f206df6d8b9db59e9fb60f9adf7c66571443186ed50ff331966bb44f9c8913d0b032ee4c23a37b0a2b06943038df7dd2cc81a50d6a9b7e0e048d522201aa68a9cb4301efe4e8419608c1dbea7ced578ce991f0bcf3ac84987207294fdfd5a7aaf17f607c59fd46e3a8ac052aa690b36f736d0b2c88d7c322eba01008e9f3070bf14cf0fd8f909ea4b6e59e216448d1b3c3fdf3e99dc45db8742211965b94a7de6460adad2fadd167f3b7d3fe4a14e8fd3d973ff47571ddbed4aa1781d11ed98537f248b1039f33f87e8296acf73395098401056079e5a1f6fc969281c0d703fdaf358357ce88640d38a48b50fd16267e37434b005500f9d56d16d83d0d9833ee37bb1dfcd152598201000973236e6f704a31fad5ed92da1155138f2f3bf1d5d6208a9fdcf857191176cb998054d8d12f7c90497f0e43f301fe1cbffb02e3a7f5e3262579ed360cc128ffceaaa79c7100331e2aeaf9220c52ab16653a087a287689b0c27abdec657ebd5936866d8428a792b2ffba0d7be3938373252b9208cb51831a9c48b2d6c0acbcb385c6b792c52962dc4b8957a8dd5407377c6d0703128b7e625d6b69d8a03be6e86a9c9117e1bb062387d45228ed5ac328301ead6e86a0f6d2502f6913949179dea188da0c179dd050099e4916315aeca9f7acdb2c471f4609513fe8fd425eba6d102e43afd32d3995ed7eb1aa5055909cd24d3d8aca05b1085c23007d54c5d6a61d13d38287b23f36e57bb87884709f3ea911b54fa34b17ab2a657443697b8eecf96c0d9eaa4fb9d750220f1eea39228711dd98b3cf049829588b68de1e7d9ed2373823da402f73b643bad0a92f6075858523e8b56d6307027bb688aeb09c08baa144b67ed14cb9a22f978ab12e0bda61a8d31f8154d8ea70ff135d88861e9a27a36dfb1feb97e3281806e420d4d53a0ed59771103c806c64cc2071a93ee615e321e95a6e800c1d6f1f4117ee61224310383a6248b2d33a769fd1d1991c95f6c852d6bf60ddfa1df1fee8f72c46704199e79b8be11808eac14d893ee7caf8307acb6bf5acd01b1d49e2ef0446a5c680dbf36bb2fb7e379dd7330d1c9302440d648b2c521687f79ce10cc1a4de3c397ffe37fe32bd07bfb477f7e91aec70f30325eba0554a59375c2d0b945b164a6602217eba33118c59853d3f1eba631c12edade80ef3bf31f657d339bd9c62a37b84671f44c057b887da81b3251d2a2b30607ef8a8825825a7a4f1e8594952c015af87d9ed368c44f1c7597f27fe93c294d773e1fdbbf0b0c17933fffd57509a742b5a22b6519305debe0892053ce0e1fdd4f8b98d23f2207f9e974fb5427dfbe9fc8b2d3a6382e519bcdfe9dd2d7d6d1e8b89a6a5ce8af055863a30ad5dc53c90092bf3e4ef8ab25114ba4ab1bfc7d90323d7609f2e410a7ae5265a95220c3bd22fbce7d26f18285e8d6aa55cb7b4829cbefb689483a4b6846b25ab853609edd57c4d83388ae8c77ed9fd1065e5397fa6082187120a4a4ad80fbe16410f5c375dad0ad2c6dcac59af30ad5ce491ad74f4c3124fb26a064ec5ff62abf0b91ac8bcafcffb1599bdb4e30ea3f63a3ae1287a21917af2c75819f7ceb00d6b9d91aaba7f1990adf825934d52cf675cacb2ce5ef298f3e77be0dbfed9178b7e46d8dcf52be9518ab18b0548fac1cf58cb75ce295662925680a1b2799501c362ae5c4167835a2c9232915527821a4dc864031a04a4adcfd3a934cf9ebbec77648e5b893780246cc6272363dac6855d9e25d3d3c6c7ac89ef04db1295893cb12ed284ad0302096ed1bf5ad176dfb146cc3e60e251c551963240ff1445bdacabcd4b28d6c5bcf735caed4677f0fafaf77d2e42afd49dcf24329968e2d570d8d617922bb9b14fefbd02f3125335a94d374538da4477d87866d873acb776f9239c613b3763f5c0c68e02bde84ddc9d327fc883cb5ed6113aec4d3c21b551c41b75ab18671aa878699fadafcf07ce7fc69918580e94ade05ab9e5f8515cef6a6e63b272e718c07061532709084a513c083635e152ebba9303f85539e3815d1c248f5bcb7ef1528065a762ae39298cfb4826d08cc98cb1d67c02aefa58490a296a73972b2418b98c7e8b066ffe3686f83b04660850e050ab722218b6e7f4dd1eb672b4eeb0580f20ea62eb820aa9c0ae2b31fe1fc482720bcb8692c3dfda701e2f76994a2a5aeedce28c09c52618d125a779d94aa837525f639cf455dd9c0e2b3b9855325ae2a8f081b413bd5bc9f78fcb8a95df6b2edd88a08eeb540d8d485c03d2695174ac7424b05ad5e0abfb34d19e805415bdd422f1396b11a7746ca90248c7a5d26190db23a4637725f3908f5ed4815ad4881d22c9ff7b99f7faa7077c8617a8649f6c41a8b321868251f09d9cc742f55fe7ebdbe2c023bd3d47ce39c3e7f8ef50ba0f9b8a8e299202fec68001126eba4cf3f922f40b587ebac830e84cf8a3b4722783fbcb6729fad48d95abd980c72049e9731b52806606e73bfd0f9e73a94b4ed5461c49fcfcd393cc20efaede1f4e2aacd9ae61b330e38d34843ec2618dd05a612c05dc286db93428f75c8a6bf7da9c542eff9cacc6353e84c4c4cd9d1c0824c3efc776bc29c417b9b8528388c9ce391621aa558a70b8eecfe1432440ea5d2a8c6e30d6f7723e3635846cf9a2d000da43c661c5caf2abc504e1b8d17d6bcb7cec83911a26f448582f65679409b5e5f872363eaa47e70cd018d9115834ec13768e395d1287026eac5b205044b3db4072b90734ba1f8b953349c8e9c139288e3cc3edbca270c2e1a57b246b6c33b07cbaaf8020c666db55b3c8509aab76bd8711679c618c83b8f84db296a0bed610fbc316d56456854d124c317d000a3d433a1752b9f38ca5a76f1f218d3907c4b99aae2a9fe910425226c715194d143e39dabd2c0f6a041925ef2ca6c17f86e9421aa9d712f281ded758118d2320b6fdf3130eb51dbb7e27a32623750bbcffd203145905148b39a8d4e0bc0c96c719063da88e81154294b865f2c398909f6e663f0a11ad0e79fc5d9a460e10a5929c603c1a3b3532a35451c4b7c1dde617605b46a673b44ed2f4b71b5a15e42d90933c5ef830db2b26c05e5b9458aa0068dcd2dacb7e956bc1fd9162667c39937c54272d2cc51f3d3bf514e57c313e8e9a88418d3e3c00e6dee60d827a56021426a423e992de5b8aa3d529de01595447af6", &(0x7f0000000100)=@udp6=r1, 0x4}, 0x20) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) 04:49:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:36 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000001240)) 04:49:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16}, 0x48) 04:49:36 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:36 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:36 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:36 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0x5, 0x2, 0x500, r1, 0x1, '\x00', 0x0, r1, 0x2, 0x2, 0x5, 0xf}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000b00)="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", &(0x7f0000000100)=@udp6=r1, 0x4}, 0x20) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) 04:49:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18}, 0x48) 04:49:36 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 1206.120406][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:37 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0x5, 0x2, 0x500, r1, 0x1, '\x00', 0x0, r1, 0x2, 0x2, 0x5, 0xf}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000b00)="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", &(0x7f0000000100)=@udp6=r1, 0x4}, 0x20) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x1, 0x5, 0x2, 0x500, r1, 0x1, '\x00', 0x0, r1, 0x2, 0x2, 0x5, 0xf}, 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000b00)="89ccb277e205fb26db5e420d4a574bbddee49792bfc8225a80e686a4e90fa80490096da14c8c0ca28687ce6c8427ee38ac114a4bf631de05d4752b08b01dc4fb0f02dbec91012c185b40f661f214645cb794487f065db794cdab5cf730b77bd1cde17fe3fd355e6dd5bd2e5cdc51e908585cdff7e463974cd5f658b415728a1e5e2a1b05b4e8f120cd7d19737c23ed35bcf12187c77fb9319cb0a589e6547296e7e901aa6c9376a66e960392b20c1276b19e7d1f79baa8f33c7840afd0684684810570ab6c5435020bb4a7d44055cee88b0e49d3cee134502a40b4a92d0dc3ec6cd1bb0c5bf55c793ffce80d9e076ac91c258cc657da18f4be8119b3c0c640eb1e9ca32f4f653f36a02b74bdb1dde395f06ad3bcc233284a6f1279a6078d2f82121732ce0b1ac2161814c07fe5044b57852618ffe13acc9edccb70298200378b1f2ec835a366ac8ef019228e494dcc02c20e37d711a18e20676c6bcb7094ba609334af04e4679e17bff2d470cd680b368babb24acc5108d8c2e271c8555a1b407d8ba65b2b0c491df3a8db19ee2f11a0d09e4050f9ec7aecc446e87b7c82de8e9f0f184355f47fdba84bcd6170710e9cc820f2d008c1437b5f64315bebb965984f35b31432a18bdedd4b4f97d1740acdf329bfc66b2b068670cd844d8024a35959fffe0329fa38128ed3da6a41443af6b3b9ce78f311fd54910eb531a4ba04670f5ff4df8d46069a6f11503fe08aad5076e39f83a72432b1389d33d1c62cf768a665e4ad493e1c7903bed425c5a0f99adafd56c7dc21cd49b2383b6eec94a0f8cdacf27915557ced63d2548f49baf5f77c68f9412ec615e42addee5e6ca86455ce758619dd0dc86a7eaa79b522bb5299442bc76fcd07c11efe4597be80766c9b3ff84cfed6d9f38f5f914ef5f04492c751c8d69c8c0a111d931fb08b36b32b20a2ac8ad1512504d52dbaa7da90e1de9622e78f1ea10d884c870442fe19ec43db7e4704f005662f19398ec10dadd4c2bdf52e2d9777caee61d4350065095b9268f80e2f74af5d4cd3048a4000716d5a604a7b86c682e32cd5c3335cc0bfb3db21e0b5643b0c6ab86ceb95a0683db731b6068c7e6e9935394212b0c121a7270e2f56e68e0bd7dd263e65df71742694158276f038b28f7d8f47b9b8680132888d666c960ab2bd399b0c459a46d975575dbd1d597249532d493a6f7d86155689a61493209848a76efcb6109f9a9f3c4f3d55bfa131494c0557377cf7508143513e64b176f9d28a8f1dd933bfc57cc3cccdf1c258f72d39a377d05ad0bbd1f627cfb2f61afe790338980137b6adf9d902b6ed2fda849c73e0466c419985186e4b4172cbd2ec73863f25483f5b7510662422ce863091d1410e3ef2fcaa561667c8153f499c8959a3c0e8e109b04fef941afc6307385e2860294a1019ec06bd8250fbf96f63bfdcbb02bed4209094cc32ce4fa342d3856dfc4fe618d01cf18c21a24f81ecb9a0b10f2414178e61479295b2f4015815adfa37dd64960be92df198caed6f8175f361adc88f1e1a9423a9466d7f411f3b0ffec4ba8d2d1bfbcbea947abf6c1c1138008f5ac7b84cbfbc669f04da1df733a33f6dd91f3553447060cc33b8e4baa34f7a88697e5bf6501c16213cec1961073ed6f457d8d0116e2eb21063c49a9eb4d10c83b591dba2af5f048bec1e4c1af05b2c3f191cc2df25141aa23e578462b5f362a93b4ac417bb4fa7d3c0e4859d9241b97a475e248dd719f586d3bf61c6d32f68aa359e9e834a9f465afa9067081f391563b5de7b01b93c85a2bf3b9f10920ab04e64fe77cbc1c7969e61e61de1fe8260ea434f45d9628fadb976a9cdea46c38bd32c691fa6922a9e61e46045b01950187cfd85e84d8ec650ee281aed0f87895d5783b169214bea9e5ef32a38eb083b7644d99d52527754e25c218e5ff684761b687c2779c2bb6308a2c530c6f99b7fd236c99dd9680de1638ead333004863e7b1d93178515c5b897f5e1b52ed4f355dff817b038135f524f9eaea258af6cbafb0f8f641e6a5847a3096d21e1f411fe253accf0005829c4b58d3100b26cb339029a3ccf2c6179c55069df93172694ff40670173c6bc683c92f9112596fc9665cb48982092e35353dcc154c481babe01690b2205f96e3e1b966d2aad878106993c4efcb61531aeb3158858ac6a79942e7e9094d1401151d936e2dfd3b1f0cd7208a00f8c8fa14e73f5d2db4430fe7b170599121f65c9fca892677623a9e13a73f4d864df8e989c7e5a6bea8c22256eb0e986a194cb5627096dee5aed9a9caae5f67803aebee3e64487b0acc4d0337cf1736a4f94f795b34884abf1471c7f9a4c8ff64ae12c3bafa0771582af8c45b2807558812a226e43b75162e25137a3c75403a88835cbcc360898bc1df0c293be6a7eb59dbc7f193642db1dc9da3ef32d118e7f01843dc0148f64b9674ef8e510f2a6dbba722270d2da918422c44dba760e87a9e65c6a17d97e5ecee62b879e3a6d5922216832001105644085ee63368bcb841f9cfda8a8ce42a7828c76c877dc32d9556bbf963a46c85653e0dd0f206df6d8b9db59e9fb60f9adf7c66571443186ed50ff331966bb44f9c8913d0b032ee4c23a37b0a2b06943038df7dd2cc81a50d6a9b7e0e048d522201aa68a9cb4301efe4e8419608c1dbea7ced578ce991f0bcf3ac84987207294fdfd5a7aaf17f607c59fd46e3a8ac052aa690b36f736d0b2c88d7c322eba01008e9f3070bf14cf0fd8f909ea4b6e59e216448d1b3c3fdf3e99dc45db8742211965b94a7de6460adad2fadd167f3b7d3fe4a14e8fd3d973ff47571ddbed4aa1781d11ed98537f248b1039f33f87e8296acf73395098401056079e5a1f6fc969281c0d703fdaf358357ce88640d38a48b50fd16267e37434b005500f9d56d16d83d0d9833ee37bb1dfcd152598201000973236e6f704a31fad5ed92da1155138f2f3bf1d5d6208a9fdcf857191176cb998054d8d12f7c90497f0e43f301fe1cbffb02e3a7f5e3262579ed360cc128ffceaaa79c7100331e2aeaf9220c52ab16653a087a287689b0c27abdec657ebd5936866d8428a792b2ffba0d7be3938373252b9208cb51831a9c48b2d6c0acbcb385c6b792c52962dc4b8957a8dd5407377c6d0703128b7e625d6b69d8a03be6e86a9c9117e1bb062387d45228ed5ac328301ead6e86a0f6d2502f6913949179dea188da0c179dd050099e4916315aeca9f7acdb2c471f4609513fe8fd425eba6d102e43afd32d3995ed7eb1aa5055909cd24d3d8aca05b1085c23007d54c5d6a61d13d38287b23f36e57bb87884709f3ea911b54fa34b17ab2a657443697b8eecf96c0d9eaa4fb9d750220f1eea39228711dd98b3cf049829588b68de1e7d9ed2373823da402f73b643bad0a92f6075858523e8b56d6307027bb688aeb09c08baa144b67ed14cb9a22f978ab12e0bda61a8d31f8154d8ea70ff135d88861e9a27a36dfb1feb97e3281806e420d4d53a0ed59771103c806c64cc2071a93ee615e321e95a6e800c1d6f1f4117ee61224310383a6248b2d33a769fd1d1991c95f6c852d6bf60ddfa1df1fee8f72c46704199e79b8be11808eac14d893ee7caf8307acb6bf5acd01b1d49e2ef0446a5c680dbf36bb2fb7e379dd7330d1c9302440d648b2c521687f79ce10cc1a4de3c397ffe37fe32bd07bfb477f7e91aec70f30325eba0554a59375c2d0b945b164a6602217eba33118c59853d3f1eba631c12edade80ef3bf31f657d339bd9c62a37b84671f44c057b887da81b3251d2a2b30607ef8a8825825a7a4f1e8594952c015af87d9ed368c44f1c7597f27fe93c294d773e1fdbbf0b0c17933fffd57509a742b5a22b6519305debe0892053ce0e1fdd4f8b98d23f2207f9e974fb5427dfbe9fc8b2d3a6382e519bcdfe9dd2d7d6d1e8b89a6a5ce8af055863a30ad5dc53c90092bf3e4ef8ab25114ba4ab1bfc7d90323d7609f2e410a7ae5265a95220c3bd22fbce7d26f18285e8d6aa55cb7b4829cbefb689483a4b6846b25ab853609edd57c4d83388ae8c77ed9fd1065e5397fa6082187120a4a4ad80fbe16410f5c375dad0ad2c6dcac59af30ad5ce491ad74f4c3124fb26a064ec5ff62abf0b91ac8bcafcffb1599bdb4e30ea3f63a3ae1287a21917af2c75819f7ceb00d6b9d91aaba7f1990adf825934d52cf675cacb2ce5ef298f3e77be0dbfed9178b7e46d8dcf52be9518ab18b0548fac1cf58cb75ce295662925680a1b2799501c362ae5c4167835a2c9232915527821a4dc864031a04a4adcfd3a934cf9ebbec77648e5b893780246cc6272363dac6855d9e25d3d3c6c7ac89ef04db1295893cb12ed284ad0302096ed1bf5ad176dfb146cc3e60e251c551963240ff1445bdacabcd4b28d6c5bcf735caed4677f0fafaf77d2e42afd49dcf24329968e2d570d8d617922bb9b14fefbd02f3125335a94d374538da4477d87866d873acb776f9239c613b3763f5c0c68e02bde84ddc9d327fc883cb5ed6113aec4d3c21b551c41b75ab18671aa878699fadafcf07ce7fc69918580e94ade05ab9e5f8515cef6a6e63b272e718c07061532709084a513c083635e152ebba9303f85539e3815d1c248f5bcb7ef1528065a762ae39298cfb4826d08cc98cb1d67c02aefa58490a296a73972b2418b98c7e8b066ffe3686f83b04660850e050ab722218b6e7f4dd1eb672b4eeb0580f20ea62eb820aa9c0ae2b31fe1fc482720bcb8692c3dfda701e2f76994a2a5aeedce28c09c52618d125a779d94aa837525f639cf455dd9c0e2b3b9855325ae2a8f081b413bd5bc9f78fcb8a95df6b2edd88a08eeb540d8d485c03d2695174ac7424b05ad5e0abfb34d19e805415bdd422f1396b11a7746ca90248c7a5d26190db23a4637725f3908f5ed4815ad4881d22c9ff7b99f7faa7077c8617a8649f6c41a8b321868251f09d9cc742f55fe7ebdbe2c023bd3d47ce39c3e7f8ef50ba0f9b8a8e299202fec68001126eba4cf3f922f40b587ebac830e84cf8a3b4722783fbcb6729fad48d95abd980c72049e9731b52806606e73bfd0f9e73a94b4ed5461c49fcfcd393cc20efaede1f4e2aacd9ae61b330e38d34843ec2618dd05a612c05dc286db93428f75c8a6bf7da9c542eff9cacc6353e84c4c4cd9d1c0824c3efc776bc29c417b9b8528388c9ce391621aa558a70b8eecfe1432440ea5d2a8c6e30d6f7723e3635846cf9a2d000da43c661c5caf2abc504e1b8d17d6bcb7cec83911a26f448582f65679409b5e5f872363eaa47e70cd018d9115834ec13768e395d1287026eac5b205044b3db4072b90734ba1f8b953349c8e9c139288e3cc3edbca270c2e1a57b246b6c33b07cbaaf8020c666db55b3c8509aab76bd8711679c618c83b8f84db296a0bed610fbc316d56456854d124c317d000a3d433a1752b9f38ca5a76f1f218d3907c4b99aae2a9fe910425226c715194d143e39dabd2c0f6a041925ef2ca6c17f86e9421aa9d712f281ded758118d2320b6fdf3130eb51dbb7e27a32623750bbcffd203145905148b39a8d4e0bc0c96c719063da88e81154294b865f2c398909f6e663f0a11ad0e79fc5d9a460e10a5929c603c1a3b3532a35451c4b7c1dde617605b46a673b44ed2f4b71b5a15e42d90933c5ef830db2b26c05e5b9458aa0068dcd2dacb7e956bc1fd9162667c39937c54272d2cc51f3d3bf514e57c313e8e9a88418d3e3c00e6dee60d827a56021426a423e992de5b8aa3d529de01595447af6", &(0x7f0000000100)=@udp6=r1, 0x4}, 0x20) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_DO_IT(r1, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) 04:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19}, 0x48) 04:49:37 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x4, 0xf608, 0x8249, 0x5]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x6b]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004050}, 0x0) (async, rerun: 64) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:37 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a}, 0x48) 04:49:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18}, 0x48) 04:49:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:37 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'net_cls'}, {0x2b, 'net'}, {0x2b, 'rdma'}]}, 0x14) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x100, 0x18040) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[r0, r0, r1, r0, r0]}, 0x5) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) 04:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c}, 0x48) 04:49:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 04:49:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a}, 0x48) 04:49:37 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18}, 0x48) 04:49:37 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e}, 0x48) 04:49:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'net_cls'}, {0x2b, 'net'}, {0x2b, 'rdma'}]}, 0x14) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x100, 0x18040) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[r0, r0, r1, r0, r0]}, 0x5) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'net_cls'}, {0x2b, 'net'}, {0x2b, 'rdma'}]}, 0x14) (async) syz_open_dev$dri(&(0x7f0000000100), 0x100, 0x18040) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[r0, r0, r1, r0, r0]}, 0x5) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) (async) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) (async) 04:49:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x18}, 0x48) 04:49:37 executing program 2: syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001240)) 04:49:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a}, 0x48) 04:49:38 executing program 2: syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001240)) 04:49:38 executing program 1: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'net_cls'}, {0x2b, 'net'}, {0x2b, 'rdma'}]}, 0x14) (async) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x100, 0x18040) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000140)=[r0, r0, r1, r0, r0]}, 0x5) (async, rerun: 32) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) 04:49:38 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1a}, 0x48) 04:49:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2}, 0x48) 04:49:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 04:49:38 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:38 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x3}, 0x48) 04:49:38 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:38 executing program 2: syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000001240)) 04:49:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) 04:49:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 04:49:38 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x4}, 0x48) 04:49:38 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) 04:49:38 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 1208.200360][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:39 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 04:49:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 04:49:39 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800}) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) (async) 04:49:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x5}, 0x48) 04:49:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:39 executing program 1: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000280)={0x101, 0x7, 0x2, 0x7, 0x2, 0x200}) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4a1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf25010000000500060008000000050005000500000005000600070000001800040004000000ffff0000b00b0000cae5ffff030000000500050004000000050005000500000005000500030000000800030009000000a73c2df8d95a46aa402cf851fcc8f7810a4625cca13af6564b992b10a3dcae456b4f2867f17aeeb9197570d09fa3bb138429686e3a1106ab617abccb35e3d7f88b259991715c49059520f90f091c9600da9bb9edccbb06c8598a68487c8f95c887b6c4d53eea5ed627aead8721c55f774d9129d5da6bc1d4c57575"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14008080) 04:49:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 04:49:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x6}, 0x48) 04:49:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:40 executing program 0: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000040) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @none}, 0x8) 04:49:40 executing program 1: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000280)={0x101, 0x7, 0x2, 0x7, 0x2, 0x200}) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4a1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf25010000000500060008000000050005000500000005000600070000001800040004000000ffff0000b00b0000cae5ffff030000000500050004000000050005000500000005000500030000000800030009000000a73c2df8d95a46aa402cf851fcc8f7810a4625cca13af6564b992b10a3dcae456b4f2867f17aeeb9197570d09fa3bb138429686e3a1106ab617abccb35e3d7f88b259991715c49059520f90f091c9600da9bb9edccbb06c8598a68487c8f95c887b6c4d53eea5ed627aead8721c55f774d9129d5da6bc1d4c57575"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14008080) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf25010000000500060008000000050005000500000005000600070000001800040004000000ffff0000b00b0000cae5ffff030000000500050004000000050005000500000005000500030000000800030009000000a73c2df8d95a46aa402cf851fcc8f7810a4625cca13af6564b992b10a3dcae456b4f2867f17aeeb9197570d09fa3bb138429686e3a1106ab617abccb35e3d7f88b259991715c49059520f90f091c9600da9bb9edccbb06c8598a68487c8f95c887b6c4d53eea5ed627aead8721c55f774d9129d5da6bc1d4c57575"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14008080) 04:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7}, 0x48) 04:49:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:40 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) 04:49:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2}, 0x48) 04:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x8}, 0x48) 04:49:40 executing program 0: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) (rerun: 32) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000040) (async) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @none}, 0x8) 04:49:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2}, 0x48) 04:49:40 executing program 1: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000280)={0x101, 0x7, 0x2, 0x7, 0x2, 0x200}) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4a1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf25010000000500060008000000050005000500000005000600070000001800040004000000ffff0000b00b0000cae5ffff030000000500050004000000050005000500000005000500030000000800030009000000a73c2df8d95a46aa402cf851fcc8f7810a4625cca13af6564b992b10a3dcae456b4f2867f17aeeb9197570d09fa3bb138429686e3a1106ab617abccb35e3d7f88b259991715c49059520f90f091c9600da9bb9edccbb06c8598a68487c8f95c887b6c4d53eea5ed627aead8721c55f774d9129d5da6bc1d4c57575"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14008080) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf25010000000500060008000000050005000500000005000600070000001800040004000000ffff0000b00b0000cae5ffff030000000500050004000000050005000500000005000500030000000800030009000000a73c2df8d95a46aa402cf851fcc8f7810a4625cca13af6564b992b10a3dcae456b4f2867f17aeeb9197570d09fa3bb138429686e3a1106ab617abccb35e3d7f88b259991715c49059520f90f091c9600da9bb9edccbb06c8598a68487c8f95c887b6c4d53eea5ed627aead8721c55f774d9129d5da6bc1d4c57575"], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x14008080) 04:49:40 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) r0 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000001240)) 04:49:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16}, 0x48) 04:49:40 executing program 0: connect$bt_sco(0xffffffffffffffff, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x2}, 0x4000040) bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @none}, 0x8) 04:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x9}, 0x48) 04:49:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14}, 0x48) 04:49:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2}, 0x48) 04:49:40 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) connect$bt_sco(r3, &(0x7f0000000440), 0x8) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16}, 0x48) 04:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xa}, 0x48) 04:49:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7f80) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) 04:49:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14}, 0x48) 04:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xb}, 0x48) 04:49:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16}, 0x48) 04:49:40 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:40 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7f80) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) 04:49:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xc}, 0x48) 04:49:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14}, 0x48) 04:49:40 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 1210.289842][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:41 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x5) (async) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) connect$bt_sco(r3, &(0x7f0000000440), 0x8) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:41 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7f80) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) 04:49:41 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xd}, 0x48) 04:49:41 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:41 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:41 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff) 04:49:41 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xe}, 0x48) 04:49:41 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff) 04:49:42 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x2}, 0x48) 04:49:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xf}, 0x48) 04:49:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xffffffff) 04:49:42 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) (rerun: 32) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x5) (async, rerun: 32) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) connect$bt_sco(r3, &(0x7f0000000440), 0x8) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x10}, 0x48) 04:49:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x2}, 0x48) 04:49:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:42 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 04:49:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x11}, 0x48) 04:49:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:43 executing program 2: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000600)) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}, 0x5) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x400001, 0x0) connect$bt_sco(r3, &(0x7f0000000440), 0x8) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x2}, 0x48) 04:49:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x12}, 0x48) 04:49:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13}, 0x48) 04:49:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:43 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10004040}, 0x24008080) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13}, 0x48) 04:49:43 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={r2, 0x6, &(0x7f0000000180)=[0x0, 0x3, 0x7ff, 0x605, 0x8f42, 0x3], &(0x7f00000001c0)=[0x4], &(0x7f0000000200)=[0x1, 0x0, 0x63, 0x100]}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7fffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000000)={0x67ce, 0x2, 0x6, 0x3, 0x4, 0x6}) 04:49:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x13}, 0x48) 04:49:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13}, 0x48) [ 1212.362432][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:44 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xffff) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x14}, 0x48) 04:49:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={r2, 0x6, &(0x7f0000000180)=[0x0, 0x3, 0x7ff, 0x605, 0x8f42, 0x3], &(0x7f00000001c0)=[0x4], &(0x7f0000000200)=[0x1, 0x0, 0x63, 0x100]}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7fffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000000)={0x67ce, 0x2, 0x6, 0x3, 0x4, 0x6}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={r2, 0x6, &(0x7f0000000180)=[0x0, 0x3, 0x7ff, 0x605, 0x8f42, 0x3], &(0x7f00000001c0)=[0x4], &(0x7f0000000200)=[0x1, 0x0, 0x63, 0x100]}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7fffffff) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000000)={0x67ce, 0x2, 0x6, 0x3, 0x4, 0x6}) (async) 04:49:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10004040}, 0x24008080) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10004040}, 0x24008080) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x15}, 0x48) 04:49:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x14}, 0x48) 04:49:44 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10004040}, 0x24008080) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:44 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={r2, 0x6, &(0x7f0000000180)=[0x0, 0x3, 0x7ff, 0x605, 0x8f42, 0x3], &(0x7f00000001c0)=[0x4], &(0x7f0000000200)=[0x1, 0x0, 0x63, 0x100]}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7fffffff) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000000)={0x67ce, 0x2, 0x6, 0x3, 0x4, 0x6}) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10004040}, 0x24008080) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10004040}, 0x24008080) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x16}, 0x48) 04:49:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x14}, 0x48) 04:49:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x14}, 0x48) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x17}, 0x48) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:44 executing program 1: r0 = syz_io_uring_setup(0x4d0a, &(0x7f0000000840)={0x0, 0x9d50, 0x200, 0x2, 0x2bd}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000800)={0x7, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/40, 0x28}], &(0x7f0000000780)=[0x1ff, 0xb9, 0xd4d, 0xf3f, 0x2, 0x3, 0x8d, 0xffffffff, 0x3ff, 0x80]}, 0x20) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x18}, 0x48) 04:49:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x18}, 0x48) 04:49:44 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:44 executing program 1: r0 = syz_io_uring_setup(0x4d0a, &(0x7f0000000840)={0x0, 0x9d50, 0x200, 0x2, 0x2bd}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000800)={0x7, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/40, 0x28}], &(0x7f0000000780)=[0x1ff, 0xb9, 0xd4d, 0xf3f, 0x2, 0x3, 0x8d, 0xffffffff, 0x3ff, 0x80]}, 0x20) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x4d0a, &(0x7f0000000840)={0x0, 0x9d50, 0x200, 0x2, 0x2bd}, &(0x7f0000000040), &(0x7f0000000140)) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000800)={0x7, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/40, 0x28}], &(0x7f0000000780)=[0x1ff, 0xb9, 0xd4d, 0xf3f, 0x2, 0x3, 0x8d, 0xffffffff, 0x3ff, 0x80]}, 0x20) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) (async) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x19}, 0x48) 04:49:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:44 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xffff) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:44 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1a}, 0x48) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:44 executing program 1: r0 = syz_io_uring_setup(0x4d0a, &(0x7f0000000840)={0x0, 0x9d50, 0x200, 0x2, 0x2bd}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000800)={0x7, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/40, 0x28}], &(0x7f0000000780)=[0x1ff, 0xb9, 0xd4d, 0xf3f, 0x2, 0x3, 0x8d, 0xffffffff, 0x3ff, 0x80]}, 0x20) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2) 04:49:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11}, 0x48) 04:49:44 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1b}, 0x48) 04:49:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11}, 0x48) 04:49:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf}, 0x48) 04:49:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) (async, rerun: 64) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) 04:49:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x14}, 0x48) 04:49:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/18, 0x12}], &(0x7f0000000480)=[0x200, 0x2, 0x0, 0x0, 0x3, 0x2]}, 0x20) 04:49:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11}, 0x48) 04:49:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf}, 0x48) 04:49:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1c}, 0x48) 04:49:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf}, 0x48) 04:49:45 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:45 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/18, 0x12}], &(0x7f0000000480)=[0x200, 0x2, 0x0, 0x0, 0x3, 0x2]}, 0x20) 04:49:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x14}, 0x48) 04:49:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1d}, 0x48) 04:49:45 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 1214.440143][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1e}, 0x48) 04:49:46 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000000080)=""/23, 0x17}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/18, 0x12}], &(0x7f0000000480)=[0x200, 0x2, 0x0, 0x0, 0x3, 0x2]}, 0x20) 04:49:46 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x14}, 0x48) 04:49:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:46 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x1}, 0xb) ioctl$NBD_DISCONNECT(r1, 0xab08) 04:49:46 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x21}, 0x48) 04:49:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:46 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:46 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async, rerun: 32) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x1}, 0xb) (async, rerun: 32) ioctl$NBD_DISCONNECT(r1, 0xab08) 04:49:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x22}, 0x48) 04:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:49:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x23}, 0x48) 04:49:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x1}, 0xb) (async) ioctl$NBD_DISCONNECT(r1, 0xab08) 04:49:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$bt_hidp(0x1f, 0x3, 0x6) 04:49:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe}, 0x48) 04:49:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xae380) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x31, 0x400, 0x7}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 04:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x300}, 0x48) 04:49:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb}, 0x48) 04:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9}, 0x48) 04:49:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x500}, 0x48) 04:49:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xae380) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x31, 0x400, 0x7}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async, rerun: 64) ioctl$NBD_DISCONNECT(r2, 0xab08) (rerun: 64) 04:49:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe}, 0x48) 04:49:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb}, 0x48) 04:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9}, 0x48) [ 1216.519871][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:49:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x600}, 0x48) 04:49:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe}, 0x48) 04:49:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9}, 0x48) 04:49:47 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xae380) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x31, 0x400, 0x7}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xae380) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x31, 0x400, 0x7}) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) (async) 04:49:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb}, 0x48) 04:49:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$bt_hidp(0x1f, 0x3, 0x6) 04:49:47 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:47 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x700}, 0x48) 04:49:47 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x86282) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x900}, 0x48) 04:49:48 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x86282) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}}, 0x8) (async, rerun: 64) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 64) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (rerun: 64) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) socket$bt_hidp(0x1f, 0x3, 0x6) 04:49:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xa00}, 0x48) 04:49:48 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x86282) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103140, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x250080, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000140)='{!*-\x00', 0x5) 04:49:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xb00}, 0x48) 04:49:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xffffff94) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103140, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x250080, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000140)='{!*-\x00', 0x5) 04:49:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xc00}, 0x48) 04:49:48 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103140, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x250080, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000140)='{!*-\x00', 0x5) 04:49:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103140, 0x0) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x250080, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2200, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) (async) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x4) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000140)='{!*-\x00', 0x5) 04:49:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xd00}, 0x48) 04:49:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xae380) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x8000, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x1, 0x3, 0x100, 0x31, 0x400, 0x7}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) 04:49:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8}, 0x48) [ 1218.600144][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:49 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xffffff94) (async) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], 0x2, r4, r5, 0x894, 0x7, 0x99, 0x80000000, {0x4, 0x9, 0x9, 0x1, 0xffff, 0xfffd, 0x5, 0x1, 0x1, 0x6, 0x8, 0x5, 0xfffffff9, 0x8, "8728c9758fbc2d4adc1a9e6f294b39d913d82d3c4c0e4307561674f56ed75eab"}}) 04:49:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8}, 0x48) 04:49:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xe00}, 0x48) 04:49:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0xca82) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7}, 0x48) 04:49:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7}, 0x48) 04:49:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8}, 0x48) 04:49:49 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2000) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], 0x2, r4, r5, 0x894, 0x7, 0x99, 0x80000000, {0x4, 0x9, 0x9, 0x1, 0xffff, 0xfffd, 0x5, 0x1, 0x1, 0x6, 0x8, 0x5, 0xfffffff9, 0x8, "8728c9758fbc2d4adc1a9e6f294b39d913d82d3c4c0e4307561674f56ed75eab"}}) 04:49:49 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) 04:49:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xf00}, 0x48) 04:49:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7}, 0x48) 04:49:50 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xffffff94) (async) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:50 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], 0x2, r4, r5, 0x894, 0x7, 0x99, 0x80000000, {0x4, 0x9, 0x9, 0x1, 0xffff, 0xfffd, 0x5, 0x1, 0x1, 0x6, 0x8, 0x5, 0xfffffff9, 0x8, "8728c9758fbc2d4adc1a9e6f294b39d913d82d3c4c0e4307561674f56ed75eab"}}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2000) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) write$P9_RRENAME(r1, &(0x7f0000000200)={0x7, 0x15, 0x1}, 0x7) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0], 0x2, r4, r5, 0x894, 0x7, 0x99, 0x80000000, {0x4, 0x9, 0x9, 0x1, 0xffff, 0xfffd, 0x5, 0x1, 0x1, 0x6, 0x8, 0x5, 0xfffffff9, 0x8, "8728c9758fbc2d4adc1a9e6f294b39d913d82d3c4c0e4307561674f56ed75eab"}}) (async) 04:49:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1100}, 0x48) 04:49:50 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) 04:49:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:50 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1200}, 0x48) 04:49:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) 04:49:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:51 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/208, &(0x7f0000000300)=0xd0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r3, r4, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 04:49:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1300}, 0x48) 04:49:51 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) 04:49:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6}, 0x48) 04:49:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xc1, 0x0) 04:49:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1400}, 0x48) 04:49:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6}, 0x48) 04:49:51 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x222240) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80800}) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x2001) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) [ 1220.680144][ T49] Bluetooth: hci4: command 0x0406 tx timeout 04:49:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/208, &(0x7f0000000300)=0xd0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r3, r4, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 04:49:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 32) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x222240) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80800}) (async) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x2001) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) 04:49:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1500}, 0x48) 04:49:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6}, 0x48) 04:49:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001200)={0x2, 0x0, &(0x7f00000011c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000001240)={r3}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000000140)={{0x1, 0x200, 0x2, 0x2, 0x1ff, 0x3d}, 0x3d4, [0x1ff, 0x3, 0x80, 0x20, 0x31, 0x2, 0x1, 0x7, 0x8, 0x80000001, 0x7, 0x7ff, 0x0, 0x10001, 0x81, 0x0, 0x0, 0x0, 0x8, 0x5, 0x200, 0x5, 0x4, 0x6, 0x8, 0x5, 0x5d5, 0x4, 0x101, 0x2, 0x3, 0x1a0, 0x73e, 0xe238cc5e, 0x7, 0x7, 0x0, 0x8000, 0x3f, 0x81, 0x7, 0x8, 0x2, 0xaa, 0x213, 0x8, 0x42, 0x9, 0x7, 0x7, 0x4, 0x5, 0x7, 0x800, 0x6, 0x101, 0x1, 0x4, 0x8, 0x7ff, 0x8, 0x40, 0x400, 0x71f, 0x80000001, 0x1, 0x2, 0x0, 0x7, 0x44e3, 0xffffffff, 0x0, 0x80000001, 0x8001, 0x5, 0x7, 0x6, 0x3842, 0x7, 0x1bb, 0x10000, 0x1d440073, 0x1000, 0xfb, 0x3, 0x1f, 0x81, 0x2909, 0x100, 0x7, 0x8, 0x10000, 0x3, 0x5, 0x8, 0x8, 0x6, 0x4, 0x10001, 0x9, 0x4000, 0x0, 0x80000000, 0xac, 0x401, 0x885b, 0x73, 0x2a9d1f23, 0x2, 0x606, 0xe41, 0x6, 0x8, 0x0, 0xffffffff, 0x200, 0x6, 0x4, 0x8, 0x80000000, 0x3, 0x0, 0x7, 0xffffffff, 0x7ff, 0x3475, 0x20000000, 0x7, 0xb13, 0xfffffffa, 0x74f4ee31, 0x3, 0x3, 0x6, 0x100, 0xfffffffa, 0x3, 0xfff, 0x9, 0x40, 0x6, 0x200, 0x100, 0xe8, 0x400, 0x7, 0x0, 0x5, 0x0, 0xfffffffa, 0xfffffffe, 0x2, 0x3d, 0x1, 0x2, 0x800, 0x8, 0x101, 0x9, 0x3, 0x7fffffff, 0x4, 0x3, 0x1000, 0x80, 0x28000, 0x7, 0x6, 0x3f, 0x3, 0x2, 0xd045, 0x61d9800, 0x2, 0xed, 0x6, 0x7c99, 0x8, 0x0, 0x7d3c, 0x7, 0x7, 0x7fffffff, 0x9, 0x1, 0x8267, 0x9, 0x8001, 0x4, 0x7fff, 0x4, 0x1, 0x5ee, 0x2f05, 0x8, 0x8000, 0x6, 0x5, 0x21c, 0x0, 0x3, 0x9, 0x3e, 0x2, 0x2, 0x4, 0x8, 0x8, 0xad, 0xf394cd1, 0xb2e5, 0x7, 0x2, 0x8, 0x1, 0x0, 0xca, 0x4, 0x5, 0x400, 0x1, 0x7a5e7dda, 0x3, 0x80000001, 0xb240, 0x80, 0xe3, 0x20, 0x1, 0x7f, 0x9, 0x26473546, 0x7fff, 0xffffffff, 0x7, 0x3ff, 0x0, 0x7, 0x56, 0x8000, 0x8001, 0x1, 0x5ab, 0x3b20, 0x80000001, 0x8, 0xb73, 0xffffffff, 0x9, 0x9, 0x7f, 0x9, 0x7fffffff, 0x8, 0x1fe2, 0xec1, 0x10000, 0x3f, 0x100, 0x9, 0x80000000, 0x4, 0x80000000, 0x2, 0x7fffffff, 0x7, 0x6, 0x400, 0x7, 0x5, 0x18, 0x6, 0x1000, 0x0, 0x59, 0x3, 0x3f, 0x100, 0x0, 0xffff, 0x5, 0x1, 0x2b, 0x9, 0x5, 0x5997, 0xfffff507, 0x8, 0x5, 0x7, 0x906b, 0x2, 0x4, 0x100, 0xfffffffd, 0x4, 0x3, 0x20, 0x8000, 0xae, 0x9, 0x6, 0xd638, 0x1, 0xaa, 0xdd, 0x0, 0xc4, 0xf077, 0x55489129, 0x400, 0xffffffff, 0x2, 0x0, 0x40, 0xff, 0x1f, 0x7, 0x5, 0x1f, 0x2, 0x200, 0x8, 0x0, 0x5, 0x1f, 0x903, 0x9, 0x1c, 0x0, 0x2, 0x5, 0x5, 0x7fffffff, 0x9, 0x81, 0x1, 0x100, 0x67d0f7a0, 0x6, 0x1ca2, 0x101, 0x9, 0x7, 0x400, 0x8, 0x7fffffff, 0x200, 0xffffff93, 0x7, 0x48, 0x3, 0x12, 0x3, 0xfff, 0xfffffff8, 0x96, 0x2, 0xffffff9b, 0xf, 0x8, 0xffffffc1, 0x4, 0xf2, 0x651, 0x9, 0x29, 0x3, 0x71d5, 0xf4, 0x4, 0x3, 0x0, 0x4, 0x8, 0x67c, 0xffff, 0xff, 0xffffff7f, 0x101, 0x2, 0x2, 0x400, 0x3ff, 0x0, 0x5, 0x1, 0x0, 0x6d0, 0x7, 0xfffff3be, 0x3, 0x7, 0x3, 0x7fffffff, 0x7, 0x85, 0xfff, 0x4, 0x800000, 0xd654, 0x2, 0x38d, 0x881, 0xff, 0x8000, 0x400, 0x0, 0x8, 0x7fff, 0x9, 0x2, 0x6, 0x1, 0x80, 0x5, 0x5, 0x5, 0x13, 0x8, 0x1000, 0x5, 0x9, 0x401, 0x1, 0x3, 0x7, 0xfffffffc, 0x3, 0x0, 0x1, 0xe222, 0x1000, 0x10001, 0x3, 0x6, 0x9, 0x80, 0x7, 0x5, 0xfffffff1, 0x81, 0xc1, 0x180, 0xfff, 0xf3, 0x3ff, 0x0, 0x1f, 0x1, 0x6, 0x3, 0x7, 0x2, 0x2, 0x7, 0x5, 0xf5, 0x0, 0xa338, 0x2, 0x4, 0x0, 0x91d, 0xc2, 0xfffff0c1, 0x5, 0x7ff, 0x4, 0x8, 0x21aa754a, 0x80000001, 0x2, 0xff, 0x800, 0x6, 0xffffffff, 0x0, 0xdda, 0x5, 0x40, 0x5, 0x401, 0x6, 0x8001, 0x10da, 0x6fa, 0xffffffd1, 0x1412, 0x6, 0x450, 0x2, 0x5, 0x4, 0x2, 0x0, 0x1, 0x401, 0x51ad, 0x8001, 0x1, 0x5, 0x4, 0x3, 0x3, 0x9, 0x7, 0x1, 0x9, 0x8, 0x101, 0x0, 0x1, 0xffffffd7, 0x200, 0x6, 0x1, 0x5, 0x1, 0x1, 0x53, 0x0, 0xfff, 0xffffffff, 0x6, 0x0, 0x4, 0x1, 0x8, 0x2, 0x10000, 0x8, 0x7, 0x1, 0x5, 0x20, 0x7, 0x7fff, 0x101, 0x401, 0x9, 0x1, 0x7, 0xfd, 0x8000, 0x43, 0x0, 0xffff8000, 0x4, 0xfffff000, 0x1, 0x1ff, 0x82, 0x4, 0x9, 0x77, 0x139, 0x4, 0x5, 0x1ff, 0x81, 0x3, 0x80000001, 0xc46, 0x4, 0x1ff, 0xff, 0x0, 0x8001, 0x3f, 0xfff, 0x200, 0x8, 0xfffff608, 0x43, 0x3f, 0xff, 0x1, 0x0, 0x2, 0x2, 0x8, 0x100, 0x2, 0x1ff, 0x8, 0x1, 0x5, 0x80000000, 0x7f, 0x1, 0x7, 0x5, 0x9, 0xffffffff, 0x20, 0x0, 0x3, 0x8, 0x5, 0xf8, 0x3, 0x3, 0x4, 0x1000, 0x8, 0x4e0, 0x9, 0xffff0000, 0x1, 0x587, 0x9, 0x4, 0xffffffff, 0xffff, 0xc1, 0xffffffff, 0x7f, 0x4a4, 0x7, 0x7, 0x4, 0x7, 0x3ff, 0x8, 0x80000001, 0x3f, 0x68, 0x4, 0x5, 0x40, 0xe1, 0x4, 0x2, 0xfffffffb, 0x3, 0x7, 0x82, 0x4a, 0x1, 0x949, 0x3, 0x7, 0x2, 0x4b, 0x401, 0x76c, 0x3, 0x3, 0x9, 0x1000, 0xd8, 0x6, 0x3ff, 0xffff8001, 0x0, 0x7a6, 0x3, 0x92a7, 0x9, 0xff000000, 0x10000, 0x5, 0xb10, 0x5, 0x9e64, 0x0, 0x9, 0x7, 0x1, 0x4, 0x8000, 0x1, 0x6, 0x4, 0x1, 0x7fff, 0x7, 0x1000, 0x3, 0x40, 0x80000001, 0x2, 0x7, 0x4, 0x4, 0x3, 0x3ed, 0x5061, 0x1, 0x1, 0x7fffffff, 0x3, 0x80, 0x3, 0x6, 0x5, 0x47db, 0x7fffffff, 0x1000, 0x2, 0x3, 0x9, 0x8, 0x1b5fb46d, 0x1, 0x3, 0x1, 0x1ff, 0x0, 0xffffff85, 0x2, 0xffff8001, 0x200, 0x101, 0x81, 0x953, 0x0, 0x2b0, 0xaca2, 0x686, 0x1f, 0x80000001, 0x7, 0x7, 0x8, 0x0, 0x80000000, 0x0, 0x5, 0x7, 0x400, 0x8769, 0x4230916c, 0x29b1, 0x10001, 0x35, 0x9, 0x6cd0220, 0x7, 0x400, 0x8001, 0x5, 0x5b1, 0x20, 0x0, 0x23, 0x4, 0x86, 0x4, 0x7ff, 0x80000000, 0x28, 0x2, 0x6, 0x8001, 0x828e, 0x8, 0x3, 0x3, 0x6, 0x2, 0x62d0, 0xfcdf680, 0x0, 0x5, 0x1, 0x3, 0x81, 0x5, 0x1, 0x6de, 0x7, 0x5, 0x1, 0x81, 0x5, 0x10000, 0x5, 0x7, 0x1, 0x3, 0x8986, 0x100, 0x5, 0x6, 0x1ff, 0x37, 0x10000, 0xfffffffb, 0x7, 0x6b, 0xff, 0x40, 0x0, 0x7, 0x4, 0x7, 0x3863, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x54, 0xfffffff9, 0x5, 0x0, 0xfffffffa, 0x100, 0x7fffffff, 0x8, 0x401, 0xf6d6, 0x8, 0x10000, 0x1ff, 0x56, 0x2, 0xd493, 0xfff, 0x14f, 0xd0a, 0x3, 0x4a16, 0x3ff, 0x1, 0x4, 0x5, 0x3ff, 0xffffff81, 0x5, 0x3, 0x7, 0xfff, 0x0, 0x9, 0x81, 0xff, 0x8, 0x75, 0xc0000000, 0x5, 0x1, 0x4, 0x7fff, 0x26366cf6, 0x9, 0x75b5, 0xa1, 0x7ff, 0x7, 0x20, 0x4, 0x3f, 0x43, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0xf, 0xfffffffa, 0x4a, 0x9, 0x8001, 0x8, 0x6, 0x7fffffff, 0x41bf, 0x5, 0xffff, 0x3, 0x5, 0x4, 0x5, 0x2, 0x3, 0x4e9, 0x7, 0x3, 0x24ac, 0xfffffffd, 0x100, 0x2, 0x6, 0x2a131ee0, 0x8, 0x3, 0x5, 0x9, 0x2, 0xc84e, 0x6, 0x1, 0x7f, 0xa67, 0x5f2, 0x3, 0x400, 0x7fff, 0x4, 0x1, 0x0, 0x3, 0x7, 0x6d4b, 0x4, 0xc7, 0xffffffff, 0x40, 0x10, 0x1f, 0x81, 0x1, 0xffff, 0xa626, 0xffff, 0x10001, 0x7f, 0x1f, 0x5, 0x7ff, 0x8, 0x0, 0x8000, 0x1, 0xffff, 0x7, 0xffffffff, 0x1, 0x1, 0x7, 0x3, 0x8, 0xef, 0x6, 0x4e, 0x3, 0x9, 0xfffffff9, 0x7fffffff, 0x1, 0x3, 0x6, 0x5, 0xcc, 0x4, 0x7, 0x6, 0x6, 0x401, 0x8, 0x9, 0xffffffec, 0x7fffffff, 0x6e, 0x3, 0x2, 0x5, 0xfffffff9, 0x8000, 0xda, 0x5, 0xd86, 0x5, 0x80000000, 0x6, 0x0, 0x401, 0x4, 0x7fff, 0x4, 0x15, 0x2, 0x7, 0x0, 0x2, 0x3f, 0x401, 0x7ff, 0x1a7b97d9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x9, 0xf9, 0x2, 0xfffffffe, 0x4b6, 0x2a, 0x80000000, 0x7, 0x0, 0x1, 0x7941, 0x9, 0x1, 0x5, 0x6, 0xffff6869, 0x6, 0xfffffff8, 0x8000, 0x3f, 0x1958, 0x81, 0x0, 0x5, 0xff, 0x3, 0x80, 0x80000000, 0x6, 0x0, 0xb1, 0x2, 0x4, 0x8001, 0x3, 0xfff, 0x4]}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x20040090) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a800, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f0000001280)={0x3, 0x100, 0x7, 0x8, 0x5, 0xffff8001}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:49:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1600}, 0x48) 04:49:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:52 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) (rerun: 64) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x222240) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0], 0x2, 0x80800}) syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x2001) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$NBD_DISCONNECT(r2, 0xab08) 04:49:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:52 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:53 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/208, &(0x7f0000000300)=0xd0) (async) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000200)=""/208, &(0x7f0000000300)=0xd0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000080)={0x1, 0x0, &(0x7f0000000040)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r3, r4, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={r3, r4, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 04:49:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/144, &(0x7f0000000240)=0x90) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a692090637922c35", "58c3969b41a474093bc24e8dd9eb160af9703b41fa1c34faa7f7938d05faa25b", "4132b8ea", "3cfc76b68441e780"}, 0x38) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000100)=""/123) 04:49:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1700}, 0x48) 04:49:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) 04:49:53 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:49:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:53 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/144, &(0x7f0000000240)=0x90) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a692090637922c35", "58c3969b41a474093bc24e8dd9eb160af9703b41fa1c34faa7f7938d05faa25b", "4132b8ea", "3cfc76b68441e780"}, 0x38) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000100)=""/123) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/144, &(0x7f0000000240)=0x90) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a692090637922c35", "58c3969b41a474093bc24e8dd9eb160af9703b41fa1c34faa7f7938d05faa25b", "4132b8ea", "3cfc76b68441e780"}, 0x38) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) (async) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000100)=""/123) (async) 04:49:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) 04:49:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1800}, 0x48) 04:49:53 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 04:49:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) [ 1222.770111][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:54 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x4020940d, 0x0) 04:49:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:54 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 04:49:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1900}, 0x48) 04:49:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000180)=""/144, &(0x7f0000000240)=0x90) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "a692090637922c35", "58c3969b41a474093bc24e8dd9eb160af9703b41fa1c34faa7f7938d05faa25b", "4132b8ea", "3cfc76b68441e780"}, 0x38) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f0000000100)=""/123) 04:49:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000180)=""/63, 0x3f}, &(0x7f0000000200)=0x40) r2 = getpid() pidfd_open(r2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000340)={0x22, 0x37, 0x2, {0x0, 0x7fffffffffffffff, 0x40, r2, 0x4, '),%*'}}, 0x22) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x7fffffff, 0x80000000, 0x9]}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 04:49:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) 04:49:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1a00}, 0x48) 04:49:54 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x4020940d, 0x0) 04:49:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000000}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x10080, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) 04:49:54 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 04:49:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:54 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x4020940d, 0x0) 04:49:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1b00}, 0x48) 04:49:54 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000000}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x10080, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) 04:49:54 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1c00}, 0x48) 04:49:55 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) 04:49:55 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000000}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x10080, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 32) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) (rerun: 32) 04:49:55 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:55 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000180)=""/63, 0x3f}, &(0x7f0000000200)=0x40) r2 = getpid() pidfd_open(r2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000340)={0x22, 0x37, 0x2, {0x0, 0x7fffffffffffffff, 0x40, r2, 0x4, '),%*'}}, 0x22) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x7fffffff, 0x80000000, 0x9]}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000180)=""/63, 0x3f}, &(0x7f0000000200)=0x40) (async) getpid() (async) pidfd_open(r2, 0x0) (async) write$P9_RGETLOCK(r1, &(0x7f0000000340)={0x22, 0x37, 0x2, {0x0, 0x7fffffffffffffff, 0x40, r2, 0x4, '),%*'}}, 0x22) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x7fffffff, 0x80000000, 0x9]}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) 04:49:55 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x80041284, 0x0) 04:49:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1d00}, 0x48) 04:49:55 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) 04:49:55 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:55 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 04:49:55 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1e00}, 0x48) 04:49:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000180)=""/63, 0x3f}, &(0x7f0000000200)=0x40) r2 = getpid() pidfd_open(r2, 0x0) (async) write$P9_RGETLOCK(r1, &(0x7f0000000340)={0x22, 0x37, 0x2, {0x0, 0x7fffffffffffffff, 0x40, r2, 0x4, '),%*'}}, 0x22) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x7fffffff, 0x80000000, 0x9]}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 04:49:55 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x4020940d, 0x0) 04:49:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1f00}, 0x48) 04:49:55 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:55 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 04:49:55 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x4020940d, 0x0) 04:49:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2000}, 0x48) 04:49:55 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:55 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) 04:49:55 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x4020940d, 0x0) 04:49:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2100}, 0x48) [ 1224.839907][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:49:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xc5, 0x4, 0x7, 0x1}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x800) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/9, &(0x7f0000000080)=0x9) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}], 0x1000, 0x0, &(0x7f0000000b00)="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"}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/175, 0xaf}], &(0x7f0000000400)=[0xfff, 0xfff]}, 0x20) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000100)=""/226, &(0x7f0000000200)=0xe2) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:56 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x80041284, 0x0) 04:49:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 04:49:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2200}, 0x48) 04:49:56 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x4020940d, 0x0) 04:49:56 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2300}, 0x48) 04:49:56 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/202, 0xca, 0x0, &(0x7f0000000180)=""/63, 0x3f}, &(0x7f0000000200)=0x40) r2 = getpid() pidfd_open(r2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000340)={0x22, 0x37, 0x2, {0x0, 0x7fffffffffffffff, 0x40, r2, 0x4, '),%*'}}, 0x22) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfffffffa}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x7fffffff, 0x80000000, 0x9]}, @SEG6_ATTR_SECRET={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 04:49:56 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401c5820, 0x0) 04:49:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) 04:49:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1000000}, 0x48) 04:49:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xc5, 0x4, 0x7, 0x1}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x800) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/9, &(0x7f0000000080)=0x9) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}], 0x1000, 0x0, &(0x7f0000000b00)="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"}) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/175, 0xaf}], &(0x7f0000000400)=[0xfff, 0xfff]}, 0x20) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/175, 0xaf}], &(0x7f0000000400)=[0xfff, 0xfff]}, 0x20) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000100)=""/226, &(0x7f0000000200)=0xe2) (async) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000100)=""/226, &(0x7f0000000200)=0xe2) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2000000}, 0x48) 04:49:56 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 04:49:56 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = io_uring_setup(0x160b, &(0x7f0000000000)={0x0, 0x8990, 0xa27780e21dc72f9e, 0x2, 0xf1}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[r0, r0, r0, r2, r0, r3, r0, r4]}, 0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) 04:49:56 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:57 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x3000000}, 0x48) 04:49:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xc5, 0x4, 0x7, 0x1}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x800) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/9, &(0x7f0000000080)=0x9) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x2}, @increfs={0x40046304, 0x3}, @increfs={0x40046304, 0x2}], 0x1000, 0x0, &(0x7f0000000b00)="31dafd59fe2cceccc9888c19d2efab57190d72a0e84502e2f1fd0bbf8d5bb68e268befcc02cc201a7b01b067ca2129c4dca25fcf3954bb1de3592dc8509abe8ee66f1faa097caaedf2edb7dad46c3717b894d1f6c700f53c67b5dc79a075c379872f5fcec763d80fd86ff8f764e9f649f0955cbd0850144a5d47df8ef9f47445de9aa18c4aeec7370222b71acc941925aed4de029b16cd23d85fbf7a5d29ddee06e78dfd876d7451df2a2698f6f3c485fb7aa467450181ea2ab252e46bdfd2fab26512ae2c846f4ae63a5090e501b48ccb052a98fd5d9bb9ed1d58bad0498ca79d7dbcfd3bb909be5fbf01be4099b779a85a9e10801f518844c1a46cd024bd8259b711bfc39246943130974dc70fedf7285ec7eb21a4676c527c48c6a818da653c0657564d6b4152d6f09450d1ee17fa95925a66966fd11c6af9e8ad6aed6a40cf220c38e388384c3267f94cd71713db98a34fd4f3cca7eb0a92f63b8f7df3e9daf77b629290c2c61c9bc0a025c350f3e6e872bf11703a757d4a1a752ab367d2f10ce019cfb6c29ffa9cdf9aa837824890fe62beaabbc1dc6e2f16e84d59e62c72d2304b016a666c14a6fde8c709f59ed97ebf11fda3a5a63c3430e348fb7e8523f4b0226b709c686e785f4186f15ee53edcd785eff9484b687cf4691db99d7bb735544faf5854e81f7eaed43aa76bd16db5a1d5de238b37649332507d1dd62cd62796589cf9d2cd203e5aa3e420dd330f3ace8bc873b5d305bab63fa28d8eb04efb7199741bf13982f345720878f381476b4560b64fda14fd5634e9f91df68eaaef090ff6495026f19d103b3504f4c23a054be6d8f0b98ab13205ce01a19e44b596fc4e00c298717496abc82a3ad40df74d9763a89473b4c4285a4efcdc51777fd6b4758c328ab5762eb2e5965478437451dc196e8bd3a5f928652f3566c569b7b0a96b3a55a8b3ca250aea5484719ec043c8f84cf7a7cd22f1209e5d8a827dce384d8675d6b37e15352c95cc3f446f1a80b1b9727fbbfab04d075936fb363c7fdf692173b7304b6e1f96c0fd37de4c4f9638ef657d7b2d48def80cfd179571b8fab2294352756b628a2c294441a2d1a77b8fdc591ee4fd7f7222c683b61a909821e9fa0f37bd9b0d564b9c41561a5ab579946ff70fd4df57daae15bb942090fe0368801abf0d39d3fe147583b0979fe949ff892f48d294e79509e060f3864d794bc50f791f84ebbb497fcdddee98c6a37d821ef3682eebedbc5d54e1049f10144ea4e4cfe9e749a458792c3c13d7e709d93c4ae45e4ef4ae5fdb1cd301944866818abfa2a7d7060df3743c4648425e0c07859c37e240b345c0609967486e4c953ba55a890ebec468e2924662ae7e686540f85ef6af4b30c930aa56493311367cfb9a816f341fb5968fe8af90b943c63be19e14dc35939f7a8407e41ae363511e80e23a5acbea90d346c6bf15f2b66ef0780cafcce8f9b29f926d7425c2c6c5c6579dfb4cf5865276deb4a9b7e29b596d70a7d8f35883251801bf6955ded1d29009c843c74cf8f35d06aee9bd27668d45a0d946a4a5f771cd064f91925add6ec77fa29b830216f2d24239ed013d27958847d68d822ef28aa67289225b6c9fe7c21416f739e4a2b1df332f65ccd485e77c59af5a33a9fde49fd842724a32a282d613e9339435844091be9a1120c7c4ce4db26763af5c32893813c276dde48df8f50956865ed054b44af1888bd43c55669a2d9f4deefcc282edc2308e23b426fd3f19b585918064c25f7b1541abc17786875814090c43da19defbbf1d155622fb77e44cd96a85e85dc5856f5c688b822495e6782e3102990c82f4e5244a976f84a73dfe818680660ee8cc283ab46932e14678100f7b08ef379f7d38eaa4ed1e1a38d7911b9024a3f245aec2bda0342a2168c8f92ec1437940d25612ac0053991f87f7c91c991a1059fbf93094d2342b84e9565bfcb967ff9565f508bca31bcebfb77142e6c440caffe0f10eca7875c7556056830e070ec4f98c8d48eaf9ed6484ebe5dac91a41e3d1e3b34dc623e2d28bcbd69d187c66ca6bd59b9ffb04a7153e1a13c1e0823447edd2b8e09f6576ab3075782749ee8dbc4171a745698f744d69b53e126e37d64666db66ee6da2fa9b30d67c649ae3e07512213a97e9433f09dd071117b7b0e349e70c5338066658b52f03fc8184bbab382e1e261ed6a4d7d818603a40013cefc701ef143a47d3c800d5c5a09cf430d1b02f3f9222716ec59faedce0f980449abe86c7882cc8a4e8b45afcd7eb6e5023c31e764d93dca1048648a24b0254f9abd44d879915279fb7c2899793a7960592ccb0eb696e555799faf2dc8751a8f240b97574199fc09e3f743c2f5f4a363e4866e201a05a63a94a48575e289a4b5bff0122ff3b760612607aaa24c42b7f6f11b2b0d83244e02000509a0b6d71201a92599dad0f88a0382b3d9e85f1a0440f74bfee5f5cda3b0c045d6e458b6f612e903e9b75a00c123e155bc9c36499461734bae53f1dd8389f447c7243bfaff8cf672007d1bc4bb8b0070e578f6f74c714e26c82facfc915ebf350ab395a82e055105f821fa7b1f313fa3d7245ff882ffdff71b4c420a25efbfac540ef7b252d75959410aa55d4ce32e54b2706f1e905c31eb49c8286a5421fc6e42b3f49b055f4398188a3e6aafb6823281b2f1a79335793b856426cbd60bf0f3c6ac795152e166ba1b47c13a422bf897a406aed97cdb1e17759f3ac0444aebd59ad13c17ada5ae23aac90c35dfb98d36cb02058565b8ed440d37812e77759ab7f02a2ede1c599806aaea909c617144c843af167692b871a27bf92b6cb2cbc07ebf40fc8d76485d973a0df6d2653b0d459bec4c89a766ff38acb29bd8b06ffa29946ae9e2eb487fa069d998de4fb1a72d04748e0d82c5f99d3f6a270b7505fc645286a514ff6fc5bcf3f3ada6e2e8c9723c52361a3706d1252d129651040676064f3b1576dc00544664c1ab38d4458972a9cbc5315090eeaa8b64a423e170d3cc353381ea89ae90c06c1efba8c0b9ad4f6e727c1ce6c002c679fafc2bd4ed3403c8856701cb6221e95a76a7db39128c0e4010a648a4500c79be1479f8512e75e375621636ddb676f683ee11f75a82c62185585ff30cafe1e00b0fa23a0feff1e1c0ffb22ad50076222c76c8e3a862f1b3517954a84e65765315618185f1db00f3e60c1430f5b6c418f9bd832766a6b30431b545afe16acebbb754039d1cf9ef82bb8e65f14f57670158a06a0c39d66794dbd0bda1d9dc539abded0de6d04fb6b0cdbb5ba01f2beb93681052a11f07c9d64cb1a0a965f6bbb492e9b15157b33e905685192c2d200acadc77236774f55c22927574a9e84f4c029a56af3ec2d89d4096d5c6c4ce5712ef1797296fbef1f1c9453c2ade5bc7c558f0090b9d078ffea7f2f41aaa1237c60af864760b5d04811b38287de9f1ab694d259c80ddbaf8bee00d37c3092ffda94d745361b6db8f833853d480b6830fa1c0cebc48762946f118e589f3655240380a7a397a41f082227394b2a755604e3bfb864332aeef9956b85fcadab789a52f91aad6abc3a1ea62a50a84e5910c03de39b8248dc762528c5de56ddce3558f8e6974c389e346aa30ba94b113dbaa3cab6448e9ced181d49e67befabec9fb61d30e755e796f5815080a6fd421fe5890ce678c938d157cdf767927494f16f1b38de5b299cc269c64f8da7ca31eb0931c58b77d784fe3c76f1ef08d8c685fe257ffa5ec3324eee07a0591c514e3498ac7f442493ea2ae65bb66545fea512a4e2184c95cadbffe85c0f23afa390e51a0f35ce32d9eb58a01c30ac0464daf59fa55e1ce0ed0d55523346b68bbc269239a0e9824a228875337bf4bc86be5cf1a5523d00defba65193fc6965f8b6196da256506a1f566654f2f3485eb08fbb462c7822796723e1e7bc17b9796c906037f07862edda624df0ce227dde81720cbb347830a6217da2bd85a387411b64560d983377f9979270d89c3488bf1aa56ebf8ec206ec7eb11cd67447387efd11392fd2f71c4e87ff6d46b4a6918ee16740527b51ca9c8151fcaf3cc2fe3b83e6ce92081c07f3539b636d9207bf7b468e2946e17fa2db157e77489ca2f03fac14b3e323c45e2bd92ea19f52ea73ac35d20c4f265665b6c62abefb1b62f81a315f093c710f9d627b31dff07b1c46148b003552b81bbce395a50f62a7f6de5ad45cae787a946588c24ae0f983db085024e7287377abcedafcbdb8836553988910486c42ad22a7cc006eb577c992e7e9943a60bb901fb700f167b61b243b05fce0386e5a61e20cf5d22f30bc964805b94de9c0f236cb0d3933117dbba8c755021cc97d75eb2f943c92e6040452f4b41699ba9aab319cb31e9d2f3690e0be5bc20a441bc4c37281bf51b1dc0bd009b2be7baabcb2ca24f037fcf2bca8645bd0e1372fc15113b935661fca2e72d46488dd9260b404eb01039f408c3a98d7351268c658cce3e9ac36e769b16c8f66e5886c2e5700539a41f44680c0c59721a26b19aa78f2f1d8333cde7ffefb15c912ca8a8fc5517957a9eef88c17f349b6caa9eedebdec3e847da634ba1aa44bd999e5e7329ae1ad9dfa8ec34bf499ce01233525a1721bc01ff6f0f36ee6e89fde1bb8dd88b65a1124c66e3d96db6e9dd4d9b6978c24207bcac6eee9d9dcbf573755e80960ba2d0e00bfffede3e08582f0ddfe9075747bfa93204e585bbb86b1379d83dbc178ba23c7292f723838389801bb59adcdb3273d018207d37503832983291d0c52c68a473ce6ebe9e23299992289831e4edce2ad2b2c11ca994ae28bcae139525343eaf5c9436057e3c187b3165ca6a341e86d4d3762fb9b31b065d6cc60f52d0e34175aa5ef98b4998688e0d69e64867e6887d34ab6907c46ee07793db3314c80ebca6e43a3cfbe307cae37d8c74e4d705e5859965f9d4294ef8485507646f07d0703cebe2659bcb2326340eec9d892fbe57e0571fc2568f2ed94ebb974d06af8adc2421685acb61e2de20302d635ea3c91f2cc21c129ea6e76cce9b91bee4197c177d89787aa848fe93f664d16afbd650e32a7a26647c138c3d9085ef92d22779ee7f2a562fb4a16143eeb04cf2694242eba68456ef630e1edb0022be8a4ede72e6eb85cb882f83a2b1fa8658825fe44c121eb2a49dcbd1813ef30e12743d0070fcf1879386645db17068a521fe4551cd1b8d6245d80f23ee8c6d9a8ca723f5ddb939ee9eb8198ca674045952823ff7129f9dacc27aeea65759258e9895de0313b1b51f73bee8c6e02966cd50e95697c413cdd277809ef885eee829c60a5e0ad2462435b9afeddcfcf875cbb63de0d4849ebed7af40ec26e1ec2c926763506eafc3818466642a628b785b68e248d7ae2ea9f9b7553632cb51942ab16cc60c5af8e0b4a760fbab50161bf83b46309ccff8400fb563ebb659f333418ff33fee15747bcd0a1312993b5d192db2b931ecf95935e06e995566931feb31d07bdadae4a7f3fde2fb4ac8c0b4f8b84dbe180301208a9397f4ba25bd5f98357fd4d9285b871cf21ab2937bf9d9e95df0ddfb8b944830a6239c791c10062c83d27d6fba6ced7f47f0054d0b82b7680c894017740f385189520f1bff79c4e90c36fb33475c6fc7136c1b710911cff0eb4e26da8acbc13e8467e090687d7508d614e0e61e9ac6737052187d0edb1101204de4203e6c81b729aa656362f8d34a553bcb091ed415fa491dc12a8a749f6ff99688bfdb36f71cf83cfd6e288953031c36ac0700e66ad"}) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000480)=""/249, 0xf9}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/175, 0xaf}], &(0x7f0000000400)=[0xfff, 0xfff]}, 0x20) (async) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000100)=""/226, &(0x7f0000000200)=0xe2) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:57 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401c5820, 0x0) 04:49:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = io_uring_setup(0x160b, &(0x7f0000000000)={0x0, 0x8990, 0xa27780e21dc72f9e, 0x2, 0xf1}) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) (async, rerun: 32) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[r0, r0, r0, r2, r0, r3, r0, r4]}, 0x8) (async, rerun: 32) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) 04:49:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x2300}, 0x48) 04:49:57 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x4000000}, 0x48) 04:49:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:57 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = io_uring_setup(0x160b, &(0x7f0000000000)={0x0, 0x8990, 0xa27780e21dc72f9e, 0x2, 0xf1}) (async) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000600)) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) (async) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000100)=[r0, r0, r0, r2, r0, r3, r0, r4]}, 0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r5, 0x4004480f, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x4) 04:49:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x5000000}, 0x48) 04:49:57 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:57 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x6000000}, 0x48) 04:49:57 executing program 1: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={r0, 0xee, &(0x7f0000000100)=""/238}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) 04:49:57 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:57 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:57 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:57 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 04:49:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x7000000}, 0x48) 04:49:58 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:58 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 04:49:58 executing program 1: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={r0, 0xee, &(0x7f0000000100)=""/238}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={r0, 0xee, &(0x7f0000000100)=""/238}) (async) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) (async) 04:49:58 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x8000000}, 0x48) 04:49:58 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:49:58 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) [ 1226.922656][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:49:58 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401870cc, 0x0) 04:49:58 executing program 1: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={r0, 0xee, &(0x7f0000000100)=""/238}) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) 04:49:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x9000000}, 0x48) 04:49:58 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:49:58 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xa000000}, 0x48) 04:49:58 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:49:58 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:58 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:58 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:58 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 04:49:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xb000000}, 0x48) 04:49:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xc000000}, 0x48) 04:49:58 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070ca, 0x0) 04:49:58 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:58 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:59 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 04:49:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xd000000}, 0x48) 04:49:59 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x401070c9, 0x0) 04:49:59 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 04:49:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:59 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xe000000}, 0x48) 04:49:59 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) 04:49:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0xf000000}, 0x48) 04:49:59 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:49:59 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401870cc, 0x0) 04:49:59 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 04:49:59 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:49:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x10000000}, 0x48) 04:49:59 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000000), 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:49:59 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x980) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 1229.000027][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:50:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) connect$bt_sco(r0, &(0x7f00000001c0), 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0x20, 0x2, 0x9, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffffffffffe98, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) 04:50:00 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:50:00 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070c9, 0x0) 04:50:00 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x401070ca, 0x0) 04:50:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x980) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x980) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x11000000}, 0x48) 04:50:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x12000000}, 0x48) 04:50:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:50:00 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x980) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x980) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 04:50:00 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) 04:50:00 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:50:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x13000000}, 0x48) 04:50:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) connect$bt_sco(r0, &(0x7f00000001c0), 0x8) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0x20, 0x2, 0x9, 0x1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffffffffffe98, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) 04:50:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:50:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:50:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) 04:50:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="429a9345a85104b8a44e7261f77511ad596341a05de8d9cd6b1582e75e1c5f2bcc4237151ad97194305a47ba661d49175765d33a6a2efe2499cd81290c4c837394eec2b6120b75f538d5390d9107d4e5", 0x50) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 04:50:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x14000000}, 0x48) 04:50:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x15000000}, 0x48) 04:50:01 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) 04:50:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:50:01 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async, rerun: 32) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="429a9345a85104b8a44e7261f77511ad596341a05de8d9cd6b1582e75e1c5f2bcc4237151ad97194305a47ba661d49175765d33a6a2efe2499cd81290c4c837394eec2b6120b75f538d5390d9107d4e5", 0x50) (async, rerun: 32) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 04:50:01 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:50:01 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x16000000}, 0x48) [ 1231.090102][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:50:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) connect$bt_sco(r0, &(0x7f00000001c0), 0x8) (async) connect$bt_sco(r0, &(0x7f00000001c0), 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0x20, 0x2, 0x9, 0x1}) (async) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0x20, 0x2, 0x9, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffffffffffe98, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffffffffffe98, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) 04:50:02 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 04:50:02 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="429a9345a85104b8a44e7261f77511ad596341a05de8d9cd6b1582e75e1c5f2bcc4237151ad97194305a47ba661d49175765d33a6a2efe2499cd81290c4c837394eec2b6120b75f538d5390d9107d4e5", 0x50) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 04:50:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x17000000}, 0x48) 04:50:02 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:02 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40081271, 0x0) 04:50:02 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 04:50:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x18000000}, 0x48) 04:50:02 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40081271, 0x0) 04:50:02 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:02 executing program 1: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x4, 0x1, 0x7}, 0x6}}, 0x18) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:02 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 04:50:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x1}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 04:50:03 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:50:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x19000000}, 0x48) 04:50:03 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:03 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40081271, 0x0) 04:50:03 executing program 1: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x4, 0x1, 0x7}, 0x6}}, 0x18) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x4, 0x1, 0x7}, 0x6}}, 0x18) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) (async) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 04:50:03 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:50:03 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:50:03 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) 04:50:03 executing program 1: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x4, 0x1, 0x7}, 0x6}}, 0x18) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1a000000}, 0x48) 04:50:03 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:50:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x1}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) 04:50:04 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40101283, 0x0) 04:50:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1b000000}, 0x48) 04:50:04 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) 04:50:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84c2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:04 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40081271, 0x0) 04:50:04 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 04:50:04 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 04:50:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1c000000}, 0x48) 04:50:04 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40081271, 0x0) 04:50:04 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x40086602, 0x0) 04:50:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84c2) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84c2) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) [ 1233.159999][T20596] Bluetooth: hci4: command 0x0405 tx timeout 04:50:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x84c2) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x1}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={@any, 0x1}) (async) ioctl$NBD_CLEAR_QUE(r1, 0xab05) (async) 04:50:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:04 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40081271, 0x0) 04:50:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1d000000}, 0x48) 04:50:04 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40101283, 0x0) 04:50:04 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20040) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="429a9345a85104b8a44e7261f77511ad596341a05de8d9cd6b1582e75e1c5f2bcc4237151ad97194305a47ba661d49175765d33a6a2efe2499cd81290c4c837394eec2b6120b75f538d5390d9107d4e5", 0x50) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 04:50:04 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40081271, 0x0) 04:50:04 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x60181, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xffffffdc, 0x54, 0x25cd, 0x98b0, 0x8, 0x7, 0x80000000, 0x885, 0x80000000}}, 0x43) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xc8, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x1}, @enter_looper, @increfs_done={0x40106308, 0x3}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x8, 0x2, 0x18}, @fda={0x66646185, 0x0, 0x0, 0xc}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @release={0x40046306, 0x1}, @acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="856164660000000004000000000000000200000000000000b135000000000000852a646600000004", @ANYRES32=r0, @ANYBLOB="0000000000000000000000008561646600000000040000000000000001000000000000000600000000000000"], &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @decrefs], 0x57, 0x0, &(0x7f0000000400)="816920f16c5d82a50709b1b8565fcae25a15c23098509dfee0df5ce853cf03fe317fde75b9bcad2dbd1e267480260e1daeae79441bfe35522b0209e853125a8bde148f21890961971e22d2b48449ac9714998b6b539d63"}) 04:50:04 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1e000000}, 0x48) 04:50:05 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) connect$bt_sco(r0, &(0x7f00000001c0), 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$HIDIOCGUCODE(r3, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0x20, 0x2, 0x9, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0xfffffffffffffe98, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) 04:50:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:50:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x60181, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xffffffdc, 0x54, 0x25cd, 0x98b0, 0x8, 0x7, 0x80000000, 0x885, 0x80000000}}, 0x43) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xc8, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x1}, @enter_looper, @increfs_done={0x40106308, 0x3}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x8, 0x2, 0x18}, @fda={0x66646185, 0x0, 0x0, 0xc}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @release={0x40046306, 0x1}, @acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="856164660000000004000000000000000200000000000000b135000000000000852a646600000004", @ANYRES32=r0, @ANYBLOB="0000000000000000000000008561646600000000040000000000000001000000000000000600000000000000"], &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @decrefs], 0x57, 0x0, &(0x7f0000000400)="816920f16c5d82a50709b1b8565fcae25a15c23098509dfee0df5ce853cf03fe317fde75b9bcad2dbd1e267480260e1daeae79441bfe35522b0209e853125a8bde148f21890961971e22d2b48449ac9714998b6b539d63"}) (rerun: 32) 04:50:05 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x1f000000}, 0x48) 04:50:05 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/113, &(0x7f0000000100)=0x71) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="c77a4e0e0adbf58ed0c87e99c1a38f6dc90dd7551003ec8c50f8f41268d5827b38f20bf2b2a0ed23544720d1f5272b540c0afc05b35232a15ae07b62bb1a999cf0d59cde88cf57a267b43bc3077c4287551117a48b5bd8bd1d33022842f8d0072e952e034131669c4e759a468a0e52628c47971db43c8ff7cba7f3cb19690f28e3ce6d5d115b3e3ed1f8534e45439bcbbb3636b97a849e1259fa93e047a108f2ba68beae5c", 0xa5}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x345}, 0xf) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:50:05 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x60181, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000140)={0x43, 0x9, 0x1, {0xffffffdc, 0x54, 0x25cd, 0x98b0, 0x8, 0x7, 0x80000000, 0x885, 0x80000000}}, 0x43) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xc8, 0x0, &(0x7f00000002c0)=[@release={0x40046306, 0x1}, @enter_looper, @increfs_done={0x40106308, 0x3}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x8, 0x2, 0x18}, @fda={0x66646185, 0x0, 0x0, 0xc}, @flat=@binder={0x73622a85, 0x1100, 0x1}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @exit_looper, @release={0x40046306, 0x1}, @acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="856164660000000004000000000000000200000000000000b135000000000000852a646600000004", @ANYRES32=r0, @ANYBLOB="0000000000000000000000008561646600000000040000000000000001000000000000000600000000000000"], &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @decrefs], 0x57, 0x0, &(0x7f0000000400)="816920f16c5d82a50709b1b8565fcae25a15c23098509dfee0df5ce853cf03fe317fde75b9bcad2dbd1e267480260e1daeae79441bfe35522b0209e853125a8bde148f21890961971e22d2b48449ac9714998b6b539d63"}) 04:50:05 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x40086602, 0x0) 04:50:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x20000000}, 0x48) 04:50:05 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:50:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x21000000}, 0x48) 04:50:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:50:05 executing program 2: bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:05 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000000)={0x3, 0x103, 0x8}) 04:50:05 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab05, 0x0) 04:50:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x22000000}, 0x48) 04:50:05 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (async, rerun: 64) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/113, &(0x7f0000000100)=0x71) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) (async) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="c77a4e0e0adbf58ed0c87e99c1a38f6dc90dd7551003ec8c50f8f41268d5827b38f20bf2b2a0ed23544720d1f5272b540c0afc05b35232a15ae07b62bb1a999cf0d59cde88cf57a267b43bc3077c4287551117a48b5bd8bd1d33022842f8d0072e952e034131669c4e759a468a0e52628c47971db43c8ff7cba7f3cb19690f28e3ce6d5d115b3e3ed1f8534e45439bcbbb3636b97a849e1259fa93e047a108f2ba68beae5c", 0xa5}) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x345}, 0xf) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async, rerun: 32) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) 04:50:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:50:05 executing program 2: bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:05 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab05, 0x0) 04:50:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x23000000}, 0x48) 04:50:05 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000000)={0x3, 0x103, 0x8}) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000000)={0x3, 0x103, 0x8}) (async) 04:50:05 executing program 2: bpf$MAP_CREATE(0x23, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:06 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab05, 0x0) 04:50:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:50:06 executing program 1: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) (async) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000000)={0x3, 0x103, 0x8}) 04:50:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:06 executing program 0: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) (async) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/113, &(0x7f0000000100)=0x71) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="c77a4e0e0adbf58ed0c87e99c1a38f6dc90dd7551003ec8c50f8f41268d5827b38f20bf2b2a0ed23544720d1f5272b540c0afc05b35232a15ae07b62bb1a999cf0d59cde88cf57a267b43bc3077c4287551117a48b5bd8bd1d33022842f8d0072e952e034131669c4e759a468a0e52628c47971db43c8ff7cba7f3cb19690f28e3ce6d5d115b3e3ed1f8534e45439bcbbb3636b97a849e1259fa93e047a108f2ba68beae5c", 0xa5}) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x345}, 0xf) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:06 executing program 2: bpf$MAP_CREATE(0x23, 0x0, 0x0) 04:50:06 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:06 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:50:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x2}, 0x48) 04:50:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x12100) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000040)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x8, 0xbf, &(0x7f0000000100)="28a41faafcd3afcbcdc91493bc5c247f641dcee2f55d6ded596e96ed803d3c7cf81a37d4ad0c09131e8a129ffe3b8fdc3aa36f958a06c9977f170d87605d3047d862893bbb5fd58b96c3dbb950acb478c5e5396da94ea8f1cdfd79c5578ae680149a3e4528092601b991fd5fff8fd72b7a3a03c488eb9072c8fe0e1f3f40e35090bf5eac1d13687f867a2d94ff879fa2cd5c23f69bad569b655b6bc6ae4fb817ca1245e2bfd9aec3a8758e03d8632e96fb32fe3a06b25128718efd7421716c", 0x67, 0x81, 0x4, 0x9, 0x2, 0x0, 0x3f, 'syz0\x00'}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x6) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) 04:50:06 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:06 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:50:06 executing program 2: bpf$MAP_CREATE(0x23, 0x0, 0x0) 04:50:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x3}, 0x48) 04:50:06 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x12100) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000040)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x8, 0xbf, &(0x7f0000000100)="28a41faafcd3afcbcdc91493bc5c247f641dcee2f55d6ded596e96ed803d3c7cf81a37d4ad0c09131e8a129ffe3b8fdc3aa36f958a06c9977f170d87605d3047d862893bbb5fd58b96c3dbb950acb478c5e5396da94ea8f1cdfd79c5578ae680149a3e4528092601b991fd5fff8fd72b7a3a03c488eb9072c8fe0e1f3f40e35090bf5eac1d13687f867a2d94ff879fa2cd5c23f69bad569b655b6bc6ae4fb817ca1245e2bfd9aec3a8758e03d8632e96fb32fe3a06b25128718efd7421716c", 0x67, 0x81, 0x4, 0x9, 0x2, 0x0, 0x3f, 'syz0\x00'}) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x6) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) [ 1235.240195][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:50:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b2cdcf6e896c21162ed4716a23d1d3c279397b38ab7df44ce6c5b3b9c31ffc28ef578f8ba42bfc52b3a8af69feddbe2e26d86413590c233766ea3759dc6943837dbcfc04bff2d1dd7d46bc9c013dd84dcd6f642a8dc45092d3a42505a84221a5a7c5e224fffb98ac952f986ae667923a6fbbd3f35efab6", 0x77, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={r2, 0x6c, &(0x7f0000000100)=""/108}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:06 executing program 2: bpf$MAP_CREATE(0x23, 0x0, 0x0) 04:50:06 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab05, 0x0) 04:50:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x4}, 0x48) 04:50:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x12100) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$HIDIOCGVERSION(r2, 0x80044801, &(0x7f0000000040)) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r4, 0x4004480f, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x8, 0xbf, &(0x7f0000000100)="28a41faafcd3afcbcdc91493bc5c247f641dcee2f55d6ded596e96ed803d3c7cf81a37d4ad0c09131e8a129ffe3b8fdc3aa36f958a06c9977f170d87605d3047d862893bbb5fd58b96c3dbb950acb478c5e5396da94ea8f1cdfd79c5578ae680149a3e4528092601b991fd5fff8fd72b7a3a03c488eb9072c8fe0e1f3f40e35090bf5eac1d13687f867a2d94ff879fa2cd5c23f69bad569b655b6bc6ae4fb817ca1245e2bfd9aec3a8758e03d8632e96fb32fe3a06b25128718efd7421716c", 0x67, 0x81, 0x4, 0x9, 0x2, 0x0, 0x3f, 'syz0\x00'}) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x6) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x5) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) 04:50:06 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:50:06 executing program 2: bpf$MAP_CREATE(0x23, &(0x7f0000000040), 0x48) 04:50:06 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab05, 0x0) 04:50:06 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x5}, 0x48) 04:50:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x2}, 0x48) 04:50:07 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:50:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x6}, 0x48) 04:50:07 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab05, 0x0) 04:50:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x2}, 0x48) 04:50:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 04:50:07 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5451, 0x0) 04:50:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b2cdcf6e896c21162ed4716a23d1d3c279397b38ab7df44ce6c5b3b9c31ffc28ef578f8ba42bfc52b3a8af69feddbe2e26d86413590c233766ea3759dc6943837dbcfc04bff2d1dd7d46bc9c013dd84dcd6f642a8dc45092d3a42505a84221a5a7c5e224fffb98ac952f986ae667923a6fbbd3f35efab6", 0x77, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={r2, 0x6c, &(0x7f0000000100)=""/108}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={r2, 0x6c, &(0x7f0000000100)=""/108}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:07 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab05, 0x0) 04:50:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x7}, 0x48) 04:50:07 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x2}, 0x48) 04:50:07 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b2cdcf6e896c21162ed4716a23d1d3c279397b38ab7df44ce6c5b3b9c31ffc28ef578f8ba42bfc52b3a8af69feddbe2e26d86413590c233766ea3759dc6943837dbcfc04bff2d1dd7d46bc9c013dd84dcd6f642a8dc45092d3a42505a84221a5a7c5e224fffb98ac952f986ae667923a6fbbd3f35efab6", 0x77, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={r2, 0x6c, &(0x7f0000000100)=""/108}) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10002) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xfffffffffffffff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x7) 04:50:07 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x8}, 0x48) 04:50:07 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10002) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xfffffffffffffff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x7) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10002) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xfffffffffffffff8) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) (async) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x7) (async) 04:50:07 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 1237.319841][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:50:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x9}, 0x48) 04:50:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b2cdcf6e896c21162ed4716a23d1d3c279397b38ab7df44ce6c5b3b9c31ffc28ef578f8ba42bfc52b3a8af69feddbe2e26d86413590c233766ea3759dc6943837dbcfc04bff2d1dd7d46bc9c013dd84dcd6f642a8dc45092d3a42505a84221a5a7c5e224fffb98ac952f986ae667923a6fbbd3f35efab6", 0x77, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={r2, 0x6c, &(0x7f0000000100)=""/108}) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:08 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10002) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10002) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xfffffffffffffff8) (async) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0xfffffffffffffff8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r3, 0x4004480f, 0x0) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x7) 04:50:08 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:50:08 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:08 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 04:50:08 executing program 3: bpf$MAP_CREATE(0x23, 0x0, 0x0) 04:50:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xa}, 0x48) 04:50:08 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0xfffffffffffffe24, 0x21, 0x2}, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r1, r3, r0, r0, r1]}, 0x5) 04:50:08 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5451, 0x0) 04:50:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x2}, 0x48) 04:50:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @enter_looper, @increfs_done={0x40106308, 0x2}], 0x18, 0x0, &(0x7f0000000140)="4f2a4c4ab2b8a3bb24719e85305186447f3b0ed748da683c"}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) 04:50:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x2}, 0x48) 04:50:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x22000000}, 0x48) 04:50:08 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0xfffffffffffffe24, 0x21, 0x2}, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r1, r3, r0, r0, r1]}, 0x5) 04:50:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xb}, 0x48) 04:50:08 executing program 3: bpf$MAP_CREATE(0x23, 0x0, 0x0) 04:50:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x2}, 0x48) 04:50:08 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0xfffffffffffffe24, 0x21, 0x2}, 0x7) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[r1, r3, r0, r0, r1]}, 0x5) 04:50:08 executing program 5: ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000200)) connect$bt_sco(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000080)=""/113, &(0x7f0000000100)=0x71) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, @fixed}, 0x8) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="c77a4e0e0adbf58ed0c87e99c1a38f6dc90dd7551003ec8c50f8f41268d5827b38f20bf2b2a0ed23544720d1f5272b540c0afc05b35232a15ae07b62bb1a999cf0d59cde88cf57a267b43bc3077c4287551117a48b5bd8bd1d33022842f8d0072e952e034131669c4e759a468a0e52628c47971db43c8ff7cba7f3cb19690f28e3ce6d5d115b3e3ed1f8534e45439bcbbb3636b97a849e1259fa93e047a108f2ba68beae5c", 0xa5}) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x345}, 0xf) connect$bt_sco(r1, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xc}, 0x48) 04:50:08 executing program 3: bpf$MAP_CREATE(0x23, 0x0, 0x0) 04:50:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) [ 1238.292491][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.298963][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 04:50:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @enter_looper, @increfs_done={0x40106308, 0x2}], 0x18, 0x0, &(0x7f0000000140)="4f2a4c4ab2b8a3bb24719e85305186447f3b0ed748da683c"}) (async, rerun: 64) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) 04:50:09 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200002) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4bf) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xd}, 0x48) 04:50:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:50:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xe}, 0x48) 04:50:09 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200002) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4bf) (async, rerun: 32) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (rerun: 32) 04:50:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x3}, @enter_looper, @increfs_done={0x40106308, 0x2}], 0x18, 0x0, &(0x7f0000000140)="4f2a4c4ab2b8a3bb24719e85305186447f3b0ed748da683c"}) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000040)=""/96, &(0x7f00000000c0)=0x60) 04:50:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:50:09 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:09 executing program 2: bpf$MAP_CREATE(0x1d, 0x0, 0x0) 04:50:09 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:50:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xf}, 0x48) 04:50:09 executing program 1: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200002) (rerun: 32) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x4bf) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:09 executing program 2: bpf$MAP_CREATE(0x1d, 0x0, 0x0) 04:50:09 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:09 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) 04:50:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x10}, 0x48) 04:50:09 executing program 2: bpf$MAP_CREATE(0x1d, 0x0, 0x0) [ 1239.400139][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:50:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x11}, 0x48) 04:50:10 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) 04:50:10 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 04:50:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:50:10 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) (async) ioctl$NBD_DO_IT(r0, 0xab03) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) (async) 04:50:10 executing program 5: bpf$MAP_CREATE(0x22, 0x0, 0x0) 04:50:10 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) 04:50:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x12}, 0x48) 04:50:10 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x20000) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) 04:50:10 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:50:11 executing program 5: bpf$MAP_CREATE(0x22, 0x0, 0x0) 04:50:11 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x13}, 0x48) 04:50:11 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:50:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @none}, 0x8) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:50:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0600) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:11 executing program 5: bpf$MAP_CREATE(0x22, 0x0, 0x0) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x14}, 0x48) 04:50:11 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:50:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0600) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:11 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f0000000040), 0x48) 04:50:11 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5421, 0x0) 04:50:11 executing program 5: bpf$MAP_CREATE(0x22, 0x0, 0x0) 04:50:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @none}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @none}, 0x8) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:50:11 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5421, 0x0) 04:50:11 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5450, 0x0) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x15}, 0x48) 04:50:11 executing program 5: bpf$MAP_CREATE(0x22, 0x0, 0x0) 04:50:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa0600) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:11 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5421, 0x0) 04:50:11 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x16}, 0x48) 04:50:11 executing program 5: bpf$MAP_CREATE(0x22, 0x0, 0x0) 04:50:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xfffffffe, 0x0, 0x9, 0x800, 0x1ff}, 0x14) 04:50:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x17}, 0x48) 04:50:11 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) 04:50:11 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:11 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x18}, 0x48) 04:50:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xfffffffe, 0x0, 0x9, 0x800, 0x1ff}, 0x14) 04:50:11 executing program 3: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5450, 0x0) 04:50:11 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:11 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:50:11 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x2) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0xfffffffe, 0x0, 0x9, 0x800, 0x1ff}, 0x14) 04:50:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x19}, 0x48) 04:50:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:12 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x1a}, 0x48) 04:50:12 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:12 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x5421, 0x0) 04:50:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00000) [ 1241.479959][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:50:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x1b}, 0x48) 04:50:12 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:12 executing program 5: bpf$MAP_CREATE(0x21, 0x0, 0x0) 04:50:12 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5421, 0x0) 04:50:12 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00000) 04:50:12 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x55f127d8b00fd63b}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40000) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000180)={0x7, 0x7f, 0x2}, 0x7) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r4, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x1c}, 0x48) 04:50:13 executing program 3: bpf$MAP_CREATE(0x1e, 0x0, 0x0) 04:50:13 executing program 5: bpf$MAP_CREATE(0x21, 0x0, 0x0) 04:50:13 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5421, 0x0) 04:50:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xa00000) (async) 04:50:13 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x5421, 0x0) 04:50:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x1d}, 0x48) 04:50:13 executing program 3: bpf$MAP_CREATE(0x1e, 0x0, 0x0) 04:50:13 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:13 executing program 5: bpf$MAP_CREATE(0x21, 0x0, 0x0) 04:50:13 executing program 2: bpf$MAP_CREATE(0x21, 0x0, 0x0) 04:50:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = io_uring_setup(0x3116, &(0x7f0000000040)={0x0, 0xd08e, 0x2, 0x0, 0x11a}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:14 executing program 3: bpf$MAP_CREATE(0x1e, 0x0, 0x0) 04:50:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x1e}, 0x48) 04:50:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:14 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f0000000040), 0x48) 04:50:14 executing program 2: bpf$MAP_CREATE(0x21, 0x0, 0x0) 04:50:14 executing program 2: bpf$MAP_CREATE(0x21, 0x0, 0x0) 04:50:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:50:14 executing program 3: bpf$MAP_CREATE(0x1e, &(0x7f0000000040), 0x48) 04:50:14 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:50:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x21}, 0x48) 04:50:14 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) [ 1243.560046][ T49] Bluetooth: hci4: command 0x0405 tx timeout 04:50:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:50:15 executing program 3: bpf$MAP_CREATE(0x1b, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x22}, 0x48) 04:50:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:50:15 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x402000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffffb) 04:50:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) r1 = io_uring_setup(0x3116, &(0x7f0000000040)={0x0, 0xd08e, 0x2, 0x0, 0x11a}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:50:15 executing program 3: bpf$MAP_CREATE(0x1b, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x23}, 0x48) 04:50:15 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x402000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffffb) 04:50:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:50:15 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 04:50:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x300}, 0x48) 04:50:15 executing program 3: bpf$MAP_CREATE(0x1b, &(0x7f0000000040)=@base={0x1b}, 0x48) 04:50:15 executing program 1: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x402000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffffb) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) (async) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) (async) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) (async) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) (async) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x402000) (async) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xfffffffffffffffb) (async) 04:50:15 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 04:50:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async, rerun: 64) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r1 = io_uring_setup(0x3116, &(0x7f0000000040)={0x0, 0xd08e, 0x2, 0x0, 0x11a}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x500}, 0x48) 04:50:15 executing program 3: bpf$MAP_CREATE(0x1b, 0x0, 0x0) 04:50:15 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 04:50:15 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 04:50:15 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x600}, 0x48) 04:50:15 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = io_uring_setup(0x3116, &(0x7f0000000040)={0x0, 0xd08e, 0x2, 0x0, 0x11a}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:15 executing program 2: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 04:50:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x700}, 0x48) 04:50:15 executing program 5: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 04:50:15 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:50:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) 04:50:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x900}, 0x48) 04:50:16 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:50:16 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:50:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3ff}, @register_looper, @clear_death], 0xd, 0x0, &(0x7f0000000280)="b3ae986556506b3acd05bd3894"}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8c1}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:16 executing program 1: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) (async) 04:50:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xa00}, 0x48) 04:50:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 04:50:16 executing program 2: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127e, 0x0) 04:50:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xb00}, 0x48) 04:50:16 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:50:16 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) r2 = syz_io_uring_setup(0x7fffffff, &(0x7f0000000080)={0x0, 0xc489, 0x40, 0x1, 0x390, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[r0, r1, r0, r0, r2]}, 0x5) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4e41c2, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 04:50:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xc00}, 0x48) 04:50:16 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 04:50:16 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x541b, 0x0) 04:50:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) [ 1245.639850][T11749] Bluetooth: hci4: command 0x0405 tx timeout 04:50:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3ff}, @register_looper, @clear_death], 0xd, 0x0, &(0x7f0000000280)="b3ae986556506b3acd05bd3894"}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8c1}, 0x40) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x7, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:50:17 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) r2 = syz_io_uring_setup(0x7fffffff, &(0x7f0000000080)={0x0, 0xc489, 0x40, 0x1, 0x390, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[r0, r1, r0, r0, r2]}, 0x5) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4e41c2, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 04:50:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xd00}, 0x48) 04:50:17 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 04:50:17 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 04:50:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x127d, 0x0) 04:50:17 executing program 2: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127e, 0x0) 04:50:17 executing program 5: syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x541b, 0x0) 04:50:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xe00}, 0x48) 04:50:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3ff}, @register_looper, @clear_death], 0xd, 0x0, &(0x7f0000000280)="b3ae986556506b3acd05bd3894"}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8c1}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) connect$bt_sco(r0, &(0x7f0000000440)={0x1f, @fixed}, 0x8) (async) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x3c, 0x0, &(0x7f0000000240)=[@enter_looper, @free_buffer, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x3ff}, @register_looper, @clear_death], 0xd, 0x0, &(0x7f0000000280)="b3ae986556506b3acd05bd3894"}) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8c1}, 0x40) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0x7, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) 04:50:17 executing program 3: ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0x127d, 0x0) 04:50:17 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, 0x0) (async) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000600)) r2 = syz_io_uring_setup(0x7fffffff, &(0x7f0000000080)={0x0, 0xc489, 0x40, 0x1, 0x390, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000180)=[r0, r1, r0, r0, r2]}, 0x5) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x4e41c2, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) [ 1246.207006][T11749] ================================================================== [ 1246.215129][T11749] BUG: KASAN: slab-use-after-free in sco_conn_del+0xb9/0x2d0 [ 1246.222612][T11749] Write of size 4 at addr ffff88802c9cc080 by task kworker/u5:2/11749 [ 1246.230806][T11749] [ 1246.233142][T11749] CPU: 0 PID: 11749 Comm: kworker/u5:2 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1246.243043][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1246.253111][T11749] Workqueue: hci4 hci_cmd_sync_work [ 1246.258684][T11749] Call Trace: [ 1246.261970][T11749] [ 1246.264941][T11749] dump_stack_lvl+0xd9/0x1b0 [ 1246.269540][T11749] print_report+0xc4/0x620 [ 1246.273960][T11749] ? __virt_addr_valid+0x5e/0x2d0 [ 1246.278974][T11749] ? __phys_addr+0xc6/0x140 [ 1246.283468][T11749] kasan_report+0xda/0x110 [ 1246.287875][T11749] ? sco_conn_del+0xb9/0x2d0 [ 1246.292539][T11749] ? sco_conn_del+0xb9/0x2d0 [ 1246.297121][T11749] kasan_check_range+0xef/0x190 [ 1246.302090][T11749] sco_conn_del+0xb9/0x2d0 [ 1246.306501][T11749] sco_connect_cfm+0x205/0xb70 [ 1246.311282][T11749] ? sco_disconn_cfm+0xb0/0xb0 [ 1246.316040][T11749] ? sco_disconn_cfm+0xb0/0xb0 [ 1246.320797][T11749] hci_conn_failed+0x196/0x320 [ 1246.325558][T11749] hci_conn_unlink+0x6f9/0x9b0 [ 1246.330313][T11749] hci_conn_del+0x59/0xd10 [ 1246.334722][T11749] hci_abort_conn_sync+0xacb/0xe20 [ 1246.339845][T11749] ? hci_dev_close_sync+0x10f0/0x10f0 [ 1246.345204][T11749] ? lock_release+0x4bf/0x680 [ 1246.349958][T11749] ? abort_conn_sync+0x11e/0x3a0 [ 1246.355059][T11749] ? reacquire_held_locks+0x4b0/0x4b0 [ 1246.360980][T11749] ? bit_wait_timeout+0x160/0x160 [ 1246.366019][T11749] abort_conn_sync+0x18e/0x3a0 [ 1246.370966][T11749] hci_cmd_sync_work+0x1a4/0x3c0 [ 1246.375899][T11749] process_one_work+0xaa2/0x16f0 [ 1246.380944][T11749] ? le_conn_timeout+0x240/0x240 [ 1246.385978][T11749] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1246.391345][T11749] ? spin_bug+0x1d0/0x1d0 [ 1246.395669][T11749] worker_thread+0x687/0x1110 [ 1246.400369][T11749] ? process_one_work+0x16f0/0x16f0 [ 1246.405567][T11749] kthread+0x33a/0x430 [ 1246.409633][T11749] ? kthread_complete_and_exit+0x40/0x40 [ 1246.415377][T11749] ret_from_fork+0x45/0x80 [ 1246.419832][T11749] ? kthread_complete_and_exit+0x40/0x40 [ 1246.425557][T11749] ret_from_fork_asm+0x11/0x20 [ 1246.430346][T11749] [ 1246.433352][T11749] [ 1246.435685][T11749] Allocated by task 27838: [ 1246.440085][T11749] kasan_save_stack+0x33/0x50 [ 1246.444759][T11749] kasan_set_track+0x25/0x30 [ 1246.449347][T11749] __kasan_kmalloc+0xa2/0xb0 [ 1246.453941][T11749] __kmalloc+0x60/0x100 [ 1246.458088][T11749] sk_prot_alloc+0x1a4/0x2a0 [ 1246.462666][T11749] sk_alloc+0x3a/0x7f0 [ 1246.466726][T11749] bt_sock_alloc+0x3b/0x3e0 [ 1246.471223][T11749] sco_sock_create+0xe3/0x3b0 [ 1246.475910][T11749] bt_sock_create+0x180/0x340 [ 1246.480662][T11749] __sock_create+0x334/0x810 [ 1246.485245][T11749] __sys_socket+0x14c/0x260 [ 1246.489738][T11749] __x64_sys_socket+0x72/0xb0 [ 1246.494535][T11749] do_syscall_64+0x38/0xb0 [ 1246.498942][T11749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1246.504837][T11749] [ 1246.507148][T11749] Freed by task 27838: [ 1246.511198][T11749] kasan_save_stack+0x33/0x50 [ 1246.515872][T11749] kasan_set_track+0x25/0x30 [ 1246.520464][T11749] kasan_save_free_info+0x2b/0x40 [ 1246.525481][T11749] ____kasan_slab_free+0x15b/0x1b0 [ 1246.530587][T11749] slab_free_freelist_hook+0x114/0x1e0 [ 1246.536074][T11749] __kmem_cache_free+0xb8/0x2f0 [ 1246.540919][T11749] __sk_destruct+0x5fc/0x770 [ 1246.545500][T11749] sk_destruct+0xc2/0xf0 [ 1246.549729][T11749] __sk_free+0xc4/0x3a0 [ 1246.553877][T11749] sk_free+0x7c/0xa0 [ 1246.557845][T11749] sco_sock_kill+0x19d/0x1c0 [ 1246.562421][T11749] sco_sock_release+0x154/0x2c0 [ 1246.567345][T11749] __sock_release+0xae/0x260 [ 1246.572036][T11749] sock_close+0x1c/0x20 [ 1246.576182][T11749] __fput+0x3f7/0xa70 [ 1246.580179][T11749] task_work_run+0x14d/0x240 [ 1246.584759][T11749] do_exit+0xa99/0x2a20 [ 1246.588901][T11749] do_group_exit+0xd4/0x2a0 [ 1246.593400][T11749] get_signal+0x23d1/0x27b0 [ 1246.597935][T11749] arch_do_signal_or_restart+0x90/0x7f0 [ 1246.603473][T11749] exit_to_user_mode_prepare+0x11f/0x240 [ 1246.609091][T11749] syscall_exit_to_user_mode+0x1d/0x60 [ 1246.614541][T11749] do_syscall_64+0x44/0xb0 [ 1246.619028][T11749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1246.624907][T11749] [ 1246.627212][T11749] Last potentially related work creation: [ 1246.632905][T11749] kasan_save_stack+0x33/0x50 [ 1246.637574][T11749] __kasan_record_aux_stack+0xbc/0xd0 [ 1246.642956][T11749] __call_rcu_common.constprop.0+0x9a/0x790 [ 1246.648926][T11749] netlink_release+0xec0/0x20b0 [ 1246.653764][T11749] __sock_release+0xae/0x260 [ 1246.658517][T11749] sock_close+0x1c/0x20 [ 1246.662662][T11749] __fput+0x3f7/0xa70 [ 1246.667001][T11749] __fput_sync+0x47/0x50 [ 1246.671231][T11749] __x64_sys_close+0x87/0xf0 [ 1246.675822][T11749] do_syscall_64+0x38/0xb0 [ 1246.680243][T11749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1246.686137][T11749] [ 1246.688443][T11749] Second to last potentially related work creation: [ 1246.695007][T11749] kasan_save_stack+0x33/0x50 [ 1246.699674][T11749] __kasan_record_aux_stack+0xbc/0xd0 [ 1246.705029][T11749] __call_rcu_common.constprop.0+0x9a/0x790 [ 1246.710914][T11749] qdisc_put+0xd1/0xf0 [ 1246.715055][T11749] dev_shutdown+0x1ce/0x430 [ 1246.719540][T11749] unregister_netdevice_many_notify+0x5bd/0x1a20 [ 1246.725938][T11749] ip6gre_exit_batch_net+0x3ea/0x580 [ 1246.731293][T11749] ops_exit_list+0x125/0x170 [ 1246.735898][T11749] cleanup_net+0x505/0xb20 [ 1246.740304][T11749] process_one_work+0xaa2/0x16f0 [ 1246.745229][T11749] worker_thread+0x687/0x1110 [ 1246.749893][T11749] kthread+0x33a/0x430 [ 1246.753980][T11749] ret_from_fork+0x45/0x80 [ 1246.758382][T11749] ret_from_fork_asm+0x11/0x20 [ 1246.763136][T11749] [ 1246.765538][T11749] The buggy address belongs to the object at ffff88802c9cc000 [ 1246.765538][T11749] which belongs to the cache kmalloc-2k of size 2048 [ 1246.779574][T11749] The buggy address is located 128 bytes inside of [ 1246.779574][T11749] freed 2048-byte region [ffff88802c9cc000, ffff88802c9cc800) [ 1246.793531][T11749] [ 1246.795843][T11749] The buggy address belongs to the physical page: [ 1246.802231][T11749] page:ffffea0000b27200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c9c8 [ 1246.812365][T11749] head:ffffea0000b27200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1246.821285][T11749] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1246.829335][T11749] page_type: 0xffffffff() [ 1246.833655][T11749] raw: 00fff00000000840 ffff888012842000 ffffea0001e3d400 dead000000000002 [ 1246.842316][T11749] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 1246.850882][T11749] page dumped because: kasan: bad access detected [ 1246.857277][T11749] page_owner tracks the page as allocated [ 1246.862970][T11749] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5108, tgid 5108 (kworker/1:5), ts 54887813818, free_ts 54479684618 [ 1246.885280][T11749] post_alloc_hook+0x2cf/0x340 [ 1246.890048][T11749] get_page_from_freelist+0x10a9/0x31e0 [ 1246.895607][T11749] __alloc_pages+0x1d0/0x4a0 [ 1246.900183][T11749] alloc_pages+0x1a9/0x270 [ 1246.904588][T11749] allocate_slab+0x251/0x380 [ 1246.909188][T11749] ___slab_alloc+0x8be/0x1570 [ 1246.913859][T11749] __slab_alloc.constprop.0+0x56/0xa0 [ 1246.919234][T11749] __kmem_cache_alloc_node+0x137/0x350 [ 1246.924687][T11749] __kmalloc_node_track_caller+0x50/0x100 [ 1246.930403][T11749] kmalloc_reserve+0xef/0x270 [ 1246.935162][T11749] pskb_expand_head+0x236/0x1170 [ 1246.940085][T11749] netlink_trim+0x1eb/0x240 [ 1246.944660][T11749] netlink_broadcast_filtered+0xc5/0xf00 [ 1246.950301][T11749] nlmsg_notify+0x9e/0x220 [ 1246.954719][T11749] rtmsg_ifinfo+0x16f/0x1a0 [ 1246.959209][T11749] netdev_state_change+0x12b/0x140 [ 1246.964405][T11749] page last free stack trace: [ 1246.969055][T11749] free_unref_page_prepare+0x476/0xa40 [ 1246.974705][T11749] free_unref_page+0x33/0x3b0 [ 1246.979377][T11749] __unfreeze_partials+0x21d/0x240 [ 1246.984567][T11749] qlist_free_all+0x6a/0x170 [ 1246.989143][T11749] kasan_quarantine_reduce+0x18b/0x1d0 [ 1246.994587][T11749] __kasan_slab_alloc+0x65/0x90 [ 1246.999430][T11749] kmem_cache_alloc+0x172/0x3b0 [ 1247.004301][T11749] getname_flags.part.0+0x50/0x4d0 [ 1247.009488][T11749] getname+0x90/0xe0 [ 1247.013377][T11749] do_sys_openat2+0x100/0x1e0 [ 1247.018086][T11749] __x64_sys_openat+0x175/0x210 [ 1247.022935][T11749] do_syscall_64+0x38/0xb0 [ 1247.027426][T11749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1247.033313][T11749] [ 1247.035619][T11749] Memory state around the buggy address: [ 1247.041232][T11749] ffff88802c9cbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1247.049381][T11749] ffff88802c9cc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1247.057429][T11749] >ffff88802c9cc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1247.065478][T11749] ^ [ 1247.069552][T11749] ffff88802c9cc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1247.077622][T11749] ffff88802c9cc180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1247.085683][T11749] ================================================================== [ 1247.095580][T11749] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 1247.103499][T11749] CPU: 0 PID: 11749 Comm: kworker/u5:2 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 1247.113411][T11749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1247.123568][T11749] Workqueue: hci4 hci_cmd_sync_work [ 1247.128786][T11749] Call Trace: [ 1247.132062][T11749] [ 1247.134983][T11749] dump_stack_lvl+0xd9/0x1b0 [ 1247.139587][T11749] panic+0x6a6/0x750 [ 1247.143471][T11749] ? panic_smp_self_stop+0xa0/0xa0 [ 1247.148678][T11749] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1247.154827][T11749] end_report+0x12d/0x150 [ 1247.159151][T11749] kasan_report+0xea/0x110 [ 1247.163652][T11749] ? sco_conn_del+0xb9/0x2d0 [ 1247.168230][T11749] ? sco_conn_del+0xb9/0x2d0 [ 1247.172813][T11749] kasan_check_range+0xef/0x190 [ 1247.177655][T11749] sco_conn_del+0xb9/0x2d0 [ 1247.182062][T11749] sco_connect_cfm+0x205/0xb70 [ 1247.186818][T11749] ? sco_disconn_cfm+0xb0/0xb0 [ 1247.191585][T11749] ? sco_disconn_cfm+0xb0/0xb0 [ 1247.196338][T11749] hci_conn_failed+0x196/0x320 [ 1247.201096][T11749] hci_conn_unlink+0x6f9/0x9b0 [ 1247.205860][T11749] hci_conn_del+0x59/0xd10 [ 1247.210278][T11749] hci_abort_conn_sync+0xacb/0xe20 [ 1247.215385][T11749] ? hci_dev_close_sync+0x10f0/0x10f0 [ 1247.220749][T11749] ? lock_release+0x4bf/0x680 [ 1247.225516][T11749] ? abort_conn_sync+0x11e/0x3a0 [ 1247.230444][T11749] ? reacquire_held_locks+0x4b0/0x4b0 [ 1247.235809][T11749] ? bit_wait_timeout+0x160/0x160 [ 1247.240824][T11749] abort_conn_sync+0x18e/0x3a0 [ 1247.245578][T11749] hci_cmd_sync_work+0x1a4/0x3c0 [ 1247.250509][T11749] process_one_work+0xaa2/0x16f0 [ 1247.255438][T11749] ? le_conn_timeout+0x240/0x240 [ 1247.260370][T11749] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 1247.265734][T11749] ? spin_bug+0x1d0/0x1d0 [ 1247.270057][T11749] worker_thread+0x687/0x1110 [ 1247.274727][T11749] ? process_one_work+0x16f0/0x16f0 [ 1247.279911][T11749] kthread+0x33a/0x430 [ 1247.283964][T11749] ? kthread_complete_and_exit+0x40/0x40 [ 1247.289763][T11749] ret_from_fork+0x45/0x80 [ 1247.294197][T11749] ? kthread_complete_and_exit+0x40/0x40 [ 1247.299832][T11749] ret_from_fork_asm+0x11/0x20 [ 1247.304597][T11749] [ 1247.308522][T11749] Kernel Offset: disabled [ 1247.312850][T11749] Rebooting in 86400 seconds..